Terms of service

In this document, the following terms carry the meaning set out here.

• The service: the Minealyze web application, its API, and the collector plugin distributed with it.
• You, the operator: the person or entity that opens an account and connects a Minecraft server.
• Organization: the billing and data compartment that one or more servers and members belong to. All collected data is isolated within it.
• Player: someone who plays on your server. A player has no Minealyze account and is never our customer.
• Collector plugin: the JAR file installed on your server, which emits game events to the API.
• Server API key: the secret that authorizes ONE server to ingest its events and receive its actions.
• Action: a command or message the service asks the plugin to run, after confirmation.
• Holdout: a group of players deliberately excluded from a campaign, so its real effect can be measured.

Minealyze reads your Minecraft server's events and gives you back its numbers: sessions, retention, cohorts, economy, anomalies. Paid plans add a per-player churn risk score, win-back campaigns, and measurement of their real effect against a holdout group. Minealyze is not an official Minecraft product: it is not approved by or associated with Mojang or Microsoft.

Better written down than left to guesswork.

• It does not host your Minecraft server and does not back it up.
• It does not moderate your community and does not read the content of your players' messages.
• It runs only the commands you authorized yourself on your server, and only if you enabled the action channel.
• It guarantees no commercial outcome: a risk score is an estimate, not a prediction.

You must provide accurate information and keep your password confidential. An account gives access to one or more organizations, and each member holds a role that bounds what they can do: owner, admin, or read only. Sensitive operations, in particular changing the retention window, are reserved to the owner. You are responsible for activity carried out under your account and by the members you invite.

Each connected server gets an API key whose scope is limited to that server: it authorizes ingestion of its events and receipt of its actions, nothing else. We do not keep the key in clear text, only its hash, which means a lost key can be revoked and replaced but never recovered. The plugin can read the key from an environment variable rather than from its config file, so it does not sit in a backup of the plugins folder. Keep it secret: whoever holds it can write events into your account.

The plugin collects in categories you can switch off one by one in its config file, and transmits in compressed batches at a set interval. It never works on your server's main thread: queueing is bounded in memory and sending happens on a dedicated thread over asynchronous HTTP. If the API is unreachable, events wait in the local queue, and are dropped in a controlled way if it fills up, rather than growing your server's memory.

The action channel is off by default in the plugin: until you enable it, any action received is logged and then refused. Once enabled, several stacked safeguards apply, and they live in the plugin's code, not only on this page.

• An action is only sent after the preview then confirm path in the dashboard.
• Only the command roots you listed in your allowlist can run, and that list starts empty.
• An internal blocklist rejects administrative or advantage-granting commands anyway (granting items, currency, permissions, operator rank, teleportation, game mode), even if you added them to your allowlist by mistake.
• Frequency caps bound the number of actions per minute and per player per day.
• Every order carries an idempotency key and an expiry date: a stale order is never delivered, and a replayed order never runs twice.
• The plugin keeps a local audit log of executed actions, on your own disk.

Any offer proposed or executed by Minealyze on your server stays cosmetic or social, and never grants a gameplay advantage. This is not an intention: the plugin's blocklist structurally rejects commands that would hand out an item, currency, or a permission. The commitment is meant to keep your use of the service compatible with Mojang's rules on commercial usage. What you otherwise sell to your players is not up to us, and your own compliance remains yours.

The game data you send us stays yours. Over that data you are the controller and we are the processor: you decide to collect, you inform your players, and you answer their requests, using the export and deletion tools we provide. You represent that you are entitled to send us this data and that you have given your community the notice required by the law that applies to it. The split of roles is set out in the privacy policy and the GDPR page.

You may not use the service for the following, and this list is not exhaustive.

• Sending harassing, hateful, or deceptive content, or nudging a player who has opted out.
• Deliberately targeting minors with commercial win-back messages.
• Circumventing rate limits, quotas, or the safeguards of the action channel.
• Attempting to reach another organization's data, probing the API beyond the scope of your keys, or reverse engineering the service.
• Uploading in an import a database you have no right to hold.

The descriptive layer is free. Action and proof features are attached to paid plans through a per-plan entitlement mechanism. Quotas bound usage per organization and per period, in particular on processing that calls a language model. The API also applies a rate limit per IP address. Exceeding a quota results in an explicit refusal, never in a surprise charge.

Paid plans are subscribed as a recurring subscription through Stripe Checkout, and managed afterwards from the Stripe customer portal. The prices shown at the time of subscription govern. We never see your card details: they are entered at Stripe and do not pass through our servers. We keep the Stripe customer and subscription identifiers, the plan, the status, and the period dates, so we know what your organization is entitled to.

You can cancel at any time from the billing portal. Cancellation takes effect at the end of the period already paid for: your access and entitlements stay intact until then, and the organization returns to the free plan. A downgrade turns off paid features and may lower the maximum retention window applicable to your data, which causes the event detail now outside the window to be purged on the next pass. Export what you want to keep before downgrading.

You can link a Tebex shop, an Azuriom shop, a Discord webhook, and your own language model key to Minealyze. Those links are your doing and under your control: you supply the secrets, you can remove them, and we store them encrypted. How those third-party services behave is not up to us, their terms are their own, and an outage on their side does not engage our liability. You warrant that you are authorized to give us those accesses.

We aim for good availability without guaranteeing uninterrupted service, and this document carries no service level commitment. The product is built to degrade visibly rather than silently: if no model key is available, assisted writing is replaced by deterministic text and the response says so explicitly; if the data is too thin for an honest figure, the product abstains instead of inventing one. Scoring and the dashboard depend on no language model.

The code, interface, analytical models, documentation, and plugin remain the property of 9558-3936 Québec inc.. Your subscription gives you a right to use, described on the Licenses page, and nothing more: no assignment, no resale, no right to create a derivative work of the plugin or to decompile it.

The service is provided "as is", with no warranty that the analyses are accurate, complete, or fit for a particular purpose. To the extent permitted by applicable law, we are not liable for indirect or consequential damages, including lost revenue, players, or data, arising from use of the service, from an action executed on your server, or from a commercial decision taken on the basis of our figures. Nothing in this paragraph excludes liability that cannot be excluded by law.

We may suspend or terminate an account that breaches these terms, endangers the service or other people's data, or remains unpaid, with notice where reasonably possible and without notice where the risk is immediate. Suspension cuts off access but does not by itself erase your data: to have it deleted, use the deletion request described on the GDPR page.

We may update these terms. The date at the top of the page indicates the version in force. Material changes are announced with reasonable notice, and continuing to use the service after they take effect counts as acceptance.

These terms are governed by the law applicable in the province of Quebec and the laws of Canada applicable therein, and the courts of Quebec have jurisdiction. This does not deprive a consumer or a data subject of the mandatory rights granted by the law of their country of residence. Before any proceedings, write to us: most disputes are settled by an exchange.

Any question about these terms can be sent to contact@minealyze.com.