Privacy Policy

Sign-in is handled by Google's Firebase Authentication (email & password, or Google sign-in). We store your email, display name, and avatar, plus the rooms you host or join, on our own servers. We never see or store your password — Firebase handles credentials.

Room details (name, game, version, who's in it) and messages you send in a room's chat are stored on our servers so the room works across devices and members. Public rooms are listed to other users; private rooms are only reachable by join code.

Game traffic flows directly between players (peer-to-peer) whenever possible. Like any direct connection, the players in your room can technically observe your IP address — that's inherent to how P2P works. When a direct connection isn't possible, traffic is relayed through Cloudflare's TURN service instead; relayed traffic transits Cloudflare's network but is not stored by us.

Launching Minecraft online requires signing in with your Microsoft account. That sign-in happens between your machine and Microsoft — your Microsoft password never touches Lobbify. The resulting tokens are stored only on your device, encrypted with your operating system's keychain. We keep your public Minecraft profile (player name, UUID, skin) to show who's playing.

The website uses PostHog to understand how it's used — page views and basic usage events, along with standard technical metadata (browser, device type). We don't use advertising trackers, and we don't sell data to anyone.

Lobbify is built on a small set of services, each receiving only what it needs to do its job: Firebase Authentication (sign-in), Cloudflare (site hosting and connection relay), PostHog (website analytics), Modrinth (mod and modpack downloads — requests for content go to Modrinth's public API), and Microsoft/Mojang services (Minecraft sign-in and game files).

We don't sell your data. We don't run ads. We don't read your game traffic. We don't store your Microsoft credentials or tokens on our servers.

Want your account and its data deleted, or have any question about this policy? Email [email protected] and we'll take care of it.