CraftRCON - Privacy Policy

Fabricio Galo built the CraftRCON app as an ad supported app. This SERVICE is provided at no cost and is intended for use as is. If you use the app, you agree to what is described here.

What stays on your phone

Most of what the app knows never leaves the device:

The servers you add - their name, address and ports - are stored locally on the device only.
RCON passwords are stored in the Android keystore, separately from everything else. They are sent to the server you entered them for, and to nowhere else. They are never transmitted to me or to any third party.
Whether a server was last seen up or down, so the app can tell you when that changes.

None of the above is uploaded, backed up to a server of mine, or shared. There is no account to create and no server of mine holding your data, because the app has no backend.

What leaves your phone

The Minecraft servers you configure. The app connects directly from your phone to the address you entered, both to read a server's status and to run RCON commands. Nothing is relayed through me.

DNS lookups. When you add a server by domain without a port, the app asks Cloudflare's public DNS resolver (cloudflare-dns.com) for that domain's Minecraft SRV record, which is how shared hosting publishes the real port. That request contains the server's domain name and nothing about you.

Advertising. The app shows ads through Google AdMob. Where required by law you are asked for consent before any personalised advertising, through Google's User Messaging Platform, and you can change that choice at any time from Settings inside the app.

Crash reports and usage. The app uses Firebase Crashlytics and Google Analytics for Firebase so that failures can be found and fixed. These report technical information about the device and the error, not the contents of your servers.

Third party services

The app uses third party services that have their own privacy policies:

Permissions the app asks for

Internet - to reach the servers you added, and the services listed above.
Notifications - to tell you when a server you chose to watch stops answering.
Run at startup and foreground service - so that watching a server survives a restart and keeps working while the screen is off. Only active while at least one server is set to be watched.

Payments

The app offers a one time purchase to remove ads. Payment is handled entirely by Google Play. I never see your payment details; the app only learns whether the purchase exists.

Children's privacy

This Service does not address anyone under the age of 13. I do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided me with personal information, please contact me so that I can take the necessary action.

Security

RCON passwords are held in the Android keystore rather than alongside ordinary app settings, because an RCON password is full operator access to a server. No method of storage or transmission is completely secure, and I cannot guarantee absolute security.

Changes to this policy

I may update this Privacy Policy from time to time. You are advised to review this page periodically. Changes are effective when they are posted here.

Contact

If you have questions about this Privacy Policy, or want data held by the services above deleted, contact me at fabegalo@gmail.com.