Last updated October 27, 2026
The short version
- We keep what the game needs: your Minecraft name and ID, your progress and stats, and the IP address you connect from.
- Your name and stats are public on the website and in Discord. You can hide them from the website.
- No ads, no tracking cookies, no analytics. We never sell your data.
- You must be 13 or older. Email contact@xenastudios.co to see or delete your data.
Who we are
MostWanted (the Minecraft server at play.mostwantedmc.com, the website at mostwantedmc.com, and the MostWanted Discord server and bot) is run by an individual in the United States under the name Xena Studios. In this policy, "we" means Xena Studios. Questions go to contact@xenastudios.co.
What we collect
When you play
- Your Minecraft account: your username, your account's unique ID (UUID), and whether you play on Java or Bedrock.
- Your IP address: needed to connect you. It's kept in the server's logs, and with a punishment if staff ban an IP address.
- Your progress: your role, in-game cash, bank, bounty, sentence, rank, and when you first and last played.
- Your stats: escapes, arrests, robberies and similar counts, all-time, monthly and weekly.
- What happens in the game: a record of events such as arrests, escapes, robberies and staff actions, with who was involved.
- Chat and commands: what you type in chat and the commands you use, in the server's logs, so staff can deal with reports.
- Anti-cheat checks: the server checks how you move and fight to catch cheats. It keeps the alerts, not a recording of your play.
- Punishments: warnings, mutes and bans, with the reason, the staff member, and the dates.
On the website
- Visiting: the site is served by Cloudflare, which processes your IP address and browser details to deliver pages and block attacks. Forms are protected by Cloudflare Turnstile, which checks you're not a bot.
- Signing in with Discord: your Discord user ID, username and avatar. We don't ask Discord for your email or your servers.
- Signing in with Minecraft: the code from
/websitein game connects your website account to your Minecraft account. - Cookies: one, to keep you signed in. It's needed for signing in to work and isn't used for anything else. We use no advertising or analytics cookies.
- Support tickets and applications: what you write, and staff replies.
On Discord
- If you join our Discord server: your Discord user ID, username and roles, and what you post there (Discord holds the messages).
- If you use the bot: the commands you send it. If you link your accounts, the link between your Discord and Minecraft accounts.
When you buy something
The store is run by Tebex, which sells the items, takes payment and handles tax and fraud. We never see your card or bank details. Tebex tells us what was bought, for which Minecraft username, the price and a transaction ID, so we can deliver it. Tebex's own privacy policy covers the checkout.
When you contact us
If you email us, we have your email address and what you send.
Why we use it
- To run the game: connect you, save your progress, and show you your stats.
- To show stats and leaderboards on the website, in Discord and in game.
- To keep the game fair and safe: catching cheats, handling reports, and enforcing the rules.
- To answer support tickets and applications, and to tell you about replies on the site, in Discord and in game.
- To deliver purchases and deal with refunds and chargebacks.
- To keep our servers secure and working.
We don't use your data for advertising, and we don't make automated decisions about you beyond the anti-cheat's alerts, which staff review.
What's public
Your Minecraft username, your skin's head, your role and your stats appear on your player page and on leaderboards on the website, on /profile in Discord, and in game. To hide them from the website and Discord, use /stats private in game. They still show in game, where other players can see you anyway.
Who else handles it
We don't sell or rent your data, and we don't share it for advertising. These services handle some of it to run MostWanted, each under its own privacy policy:
- OVHcloud hosts the game server and the database, in the United States.
- Minehut connects players to the server, including all Bedrock players. It sees your connection before we do.
- Cloudflare serves the website and protects it and our API.
- Discord, for sign-in, the Discord server and the bot.
- Tebex, for the store.
- mc-heads.net, which draws skin heads on the website and in Discord from your Minecraft ID.
We may also share information if the law requires it, or to protect players or MostWanted from harm, such as reporting a threat to the authorities.
How long we keep it
- Server logs (chat, commands, IP addresses): 90 days.
- The record of game events: 12 months.
- Your progress and stats: while the server runs, or until you ask us to delete them.
- Punishments: as long as they're needed to enforce the rules, so a ban can't be dodged by asking us to forget it.
- Your website account, tickets and applications: until you delete your account.
- Sign-in sessions: 30 days.
- Purchase records: as long as we need them for refunds, chargebacks and our accounts.
Your choices
- See or get a copy of what we hold about you.
- Correct it if it's wrong.
- Delete it. Delete your website account from your account page, or email us to delete your game data too. We keep only what we must: active punishments and purchase records.
- Hide your stats from the website and Discord with
/stats private.
Email contact@xenastudios.co from any address and tell us your Minecraft username. We may ask you to prove the account is yours, such as by typing a code in game. We answer within 30 days. Depending on where you live, you may have more rights over your data; we'll honor them.
Children
You must be 13 or older to play on MostWanted or use the website and Discord. If you're under 18, ask a parent or guardian to read this with you. If we learn we've collected data from someone under 13, we delete it. Parents can email contact@xenastudios.co to ask us to.
Keeping it safe
Our database and server aren't reachable from the internet except through the game and Cloudflare. Connections to the website and API are encrypted. Sign-in sessions are stored scrambled, so a stolen copy of the database can't be used to sign in. Only the people who run MostWanted can reach the database, and staff see only what they need to moderate. No system is perfectly secure; if something goes wrong that affects your data, we'll tell you.
Where it's stored
In the United States. If you play from elsewhere, your data is sent there.
Changes
If we change this policy, we'll update the date at the top. For important changes, we'll also post in the announcements on Discord or in game before they apply.

