This policy explains what Serverdex collects when you browse the directory, create an account, list a server, or buy a plan or sponsored article — and what we do with it.

1. What we collect

  • Account data. Your email address and a password (stored hashed by our authentication provider, Supabase). Optionally a display name.
  • Listing and submission data. The server details you submit (name, description, links, category), the page URL you give us as a backlink, and the contact email on a submission.
  • Sponsored article data. The article text, your author name and optional author URL.
  • Payment data. Payments are processed by Stripe. We never see or store card numbers. We store Stripe’s identifiers for your customer, subscription and checkout session so we can activate what you bought and let you manage billing.
  • Usage counts. For each listed server we count page views and outbound clicks so owners can see how their listing performs. These counts are not tied to you: we don’t store your IP address or any identifier with them. Your IP is used only momentarily, in memory, to prevent abuse (rate limiting and de-duplicating counts).
  • Technical logs. Our hosting provider (Railway) keeps standard server logs, which may include IP addresses, for security and reliability.

2. Cookies

We use only functional cookies: the session cookies that keep you signed in, and a session cookie for our own staff moderation area. We do not use advertising cookies and we do not load third-party analytics or tracking scripts.

3. How we use your data

  • To run the directory: show listings, verify backlinks, publish approved content.
  • To provide your account, your listing dashboard and billing.
  • To contact you about your submission, listing or purchase.
  • To prevent abuse and keep the service secure.

We don’t sell personal data and we don’t use it for third-party advertising.

4. Who we share it with

Only the service providers that run the product, each acting on our instructions: Supabase (database and authentication), Stripe (payments), Railway (hosting) and Resend (transactional email). Public listing content — server details and published sponsored articles — is, by nature, public.

5. Retention and deletion

Account data is kept while your account exists. You can delete your account from Settings; this removes your profile and detaches your listings. Payment records are kept as long as required for accounting and tax purposes. Published listing data for servers that come from the official MCP registry remains in the directory as public information.

6. Your rights

You can access and correct your account data in Settings, and delete your account there. For any other request about your data — access, correction, deletion or objection — contact us via the Contact page and we will respond.

7. Children

The Service is for people aged 18 and over. It is not directed at children and we don’t knowingly collect their data.

8. Changes

We may update this policy as the product evolves. The date at the top shows the current version.