Privacy Policy
- What we keep, and what we never do
What we collect
When you sign in with Google, Microsoft, or Steam, we receive and store your email address (if provided by the provider), display name, and account identifier. This is the minimum required to create and manage your Mumble server. Note: Steam does not provide an email address.
How we use your data
Your data is used solely to:
- Authenticate you and manage your account
- Provision and manage your Mumble server
- Send you service-related emails (server creation, inactivity warnings)
What we don’t do
- We do not sell or share your data with third parties
- We do not use your data for advertising
- We do not track you across other websites or build an advertising profile of you
Activity and storage
Activity records
To run and protect the service we keep a basic record of account activity: when you sign in or visit your dashboard, when your server is created, changed or deleted, messages you send to your server from the dashboard, and which service emails we sent you. We also record when people last used your server, so it is not deleted while it is in use.
Data storage
Your account data is stored in a secured database hosted on Microsoft Azure. Voice communication on your Mumble server is not recorded or stored.
While you are connected to a Mumble server, its owner can see your IP address on their dashboard, as a Mumble server administrator can in the Mumble client. The Mumble server software also records connection addresses in its own log, and the server’s owner can view the recent entries of that log on their dashboard.
To decide where to run servers, we occasionally look at which countries those connections come from, so we can tell whether servers are close to the people using them. Addresses are converted to a country on our own systems, are not copied or stored, and the result is only a count per country and region, never tied to a person or an account.
Choosing your server’s region
When you create a server, we look up which region your IP address belongs to, using a database on our own systems. Only the region is kept, not the address. We use it to put your server close to you.
Data deletion
Servers inactive for 21 days are automatically deleted, as are new servers that nobody joins within 3 days of being created.
Your account is automatically and permanently deleted, together with your server’s backups and all other data we hold about you, after 6 months in which you have not signed in, have not visited your dashboard, and nobody has used your server. Accounts that have been banned are deleted 6 months after the ban. Activity records and records of the emails we sent are deleted after 6 months for everyone.
You can delete your account yourself at any time from your dashboard. This immediately deletes your server, your account and all data we hold about you. You can also ask us to do it by contacting talk@redmumble.eu.
Third-party services
- Google OAuth, Microsoft Account, Steam OpenID: for authentication
- SendGrid: for transactional emails
- Microsoft Azure: for hosting and infrastructure
- Application Insights: for error monitoring and performance
- Google reCAPTCHA: human check when creating a server, loaded only after you press Start check
- DB-IP: the IP-to-country database we use on our own systems (IP Geolocation by DB-IP, CC BY 4.0). No data is sent to them.
Contact
For any privacy-related questions, contact us at talk@redmumble.eu.