Privacy
Know what gets linked.
plexsur.net stores your application account UUID and optional account name alongside a Discord identity inside the workspace that requested the link.
Data boundaries
Workspace administrators can see account links, access decisions, bans, and authentication events for their own workspace. Challenge tokens are stored as digests and expire quickly. Discord user IDs and basic profile fields are retained to display the connection; OAuth access tokens are not retained.
Control
Administrators can unlink accounts and request workspace deletion. Minecraft consent pages load account heads from mc-heads.net, which receives the UUID and browser IP. Application consent pages use a local icon. Contact privacy@soluslabs.sh for privacy requests.