Winstreak API - Terms of Service

Last updated: November 25 2025

1. Definitions

• “Winstreak”: The Winstreak.ws project and its operators, maintainers, and contributors who run and administer the Service.
• “Service”: The Winstreak API, its hosted endpoints, documentation, websites, SDKs, and related infrastructure made available by Winstreak.
• “API”: Any programmatic interface or endpoint exposed by the Service for retrieving or processing data.
• “API Key”: A credential issued by Winstreak that authenticates and authorizes access to the Service. An API Key is confidential and tied to an individual or entity.
• “User”: Any individual or legal entity that accesses or uses the Service, including developers, operators, or organizations acting through authorized personnel.
• “Player Data”: Publicly available information relating to game player identities and statistics (e.g., Minecraft/Mojang/Hypixel usernames, UUIDs, public stats) collected or referenced by the Service.
• “Operational Metadata”: Technical and administrative data associated with API usage, including IP address, User-Agent, timestamps, endpoints, request identifiers, and API key identifiers.
• “Public Use”: Any use of the Service where outputs or derived data are accessible to the general public or a broad audience (e.g., websites, bots, dashboards, public reports).
• “Private Group Use”: Use within a closed group of multiple users (e.g., an organization, team, guild) where outputs are not public but shared among more than one person.
• “Commercial Use”: Use in connection with a business or revenue-generating activity, or where access to outputs is offered for a fee, bundled into a paid product, or used to support monetized services.

2. Legal Entity & Contact

• Nature of the project: Winstreak is a community project operated by the Winstreak team. References to “we,” “us,” and “our” mean Winstreak and its operators.
• Contact: For support, legal, or abuse reports, contact support@winstreak.ws or join winstreak.ws/discord.
• Governing law (overview): Unless otherwise required by the law of your domicile, these Terms are governed by the laws of the Netherlands; insofar as they specifically relate to services hosted in the United Kingdom, the laws of England and Wales shall apply.

3. Usage & Access

• Access to the Service is granted via an API Key obtainable through our Discord community at winstreak.ws/discord. Each key is issued to a specific User (person or entity) and must be safeguarded.
• Permitted uses include personal projects, Private Group Use, Public Use, and Commercial Use, provided you comply with these Terms, applicable law, and all third-party platform rules (e.g., Mojang/Microsoft, Hypixel).
• Any Public Use, Commercial Use, or Private Group Use requires clear attribution to Winstreak API with a link to api.winstreak.ws. Attribution must be reasonably prominent in your documentation, interface, or visible output.
• You are responsible for all activity performed using your API Key. Keys are non-transferable and may not be shared except with Winstreak's prior written consent.
• By using the Service, you agree to these Terms. If you do not agree, you must stop using the Service.

4. Age Requirements

• You must be at least 13 years old, or the digital age of consent in your country if higher, to use the Service.
• If you are under the age of majority in your jurisdiction, you must have permission from a parent or legal guardian who agrees to be bound by these Terms on your behalf.

5. Security Responsibilities

• You must keep your API Key secure and confidential. Do not embed it in publicly distributed client-side code without appropriate controls (e.g., proxying, obfuscation, or server-side calls).
• You are responsible for promptly rotating or revoking your API Key if you suspect compromise. Winstreak is not liable for losses or damages arising from lost, stolen, or compromised keys.
• We may monitor usage patterns, audit access, and take protective action (e.g., throttling, blocking) when suspicious or abusive activity is detected.

6. Prohibited Usage

• Do not violate or circumvent the terms or acceptable use policies of Mojang/Microsoft, Hypixel, or any third-party platform whose data you access via the Service.
• Do not misrepresent the Service as official, exclusive, or endorsed by Winstreak, Mojang, Microsoft, Hypixel, or any third party.
• Do not proxy, rehost, resell, sublicense, white-label, or package the Service or substantial portions of its responses as a competing API or derivative data service.
• Do not attempt to bypass rate limits (e.g., via multiple keys, rotating IPs, or collusion) or help others do so.
• Do not perform automated penetration testing, security scanning, stress testing, or load generation without prior written approval.
• Do not reverse engineer or decompile beyond what is intentionally exposed through documented endpoints.
• Do not create abusive player profiles, or use data for doxing, harassment, discrimination, or other unlawful activities.
• Do not interfere with Service integrity or performance, including attempts to overload infrastructure or exploit flaws.
• Do not share, sell, or publicly disclose your API Key. Do not embed it directly in distributed client-side code without adequate safeguards.
• Do not engage in any unlawful activity, intellectual property infringement, fraud, deceptive practices, or unauthorized surveillance using the Service.

7. Rate Limits & Enforcement

• Unless otherwise agreed in writing, each API Key is limited to 120 requests per minute aggregated across all endpoints. Sub-limits may apply to specific endpoints.
• Exceeding limits may result in HTTP 429 responses, throttling, temporary suspension, permanent revocation, and/or IP-level denial.
• Rate limits may change at any time for operational or security reasons. Attempts to evade enforcement may lead to expanded blocking.
• Implement client-side caching and exponential backoff to minimize unnecessary requests.

8. Fair Use Guidelines

• Caching: Respect cache headers where provided. In absence of explicit headers, cache identical responses for at least 60 seconds where feasible.
• Backoff: On HTTP 429/5xx, implement exponential backoff (e.g., 1s, 2s, 4s, up to a reasonable cap) rather than retrying aggressively.
• Polling: Avoid polling more frequently than necessary. For high-churn data, do not poll more than once every 15-30 seconds unless explicitly permitted.
• Heavy-load users: Coordinate with us in advance via Discord to discuss rate-limit increases, architectural guidance, or dedicated capacity.

9. Service Availability & Maintenance

• No guaranteed uptime or SLA is provided. The Service may be interrupted, degraded, or unavailable without notice.
• Endpoints, parameters, and response formats may change or be removed. We strive to provide reasonable notice, but this is not guaranteed.
• Maintenance (including emergency work) may occur at any time. We may throttle or temporarily disable specific functionality to protect platform stability.

10. API Versioning & Deprecation

• API versions (e.g., /v1) may be introduced. Older versions may be deprecated and removed after a deprecation window.
• We communicate deprecations via Discord, website notices, documentation, and/or response headers where applicable. We generally aim to provide at least 60 days' notice for removals, though urgent changes may occur sooner for security or compliance reasons.
• No guarantee of long-term stability is provided. You are responsible for monitoring announcements and updating integrations accordingly.

11. Data Logging & Privacy

• We log Operational Metadata for each request, which may include IP address, User-Agent, HTTP method, endpoint path, timestamp, and API Key identifier.
• We may store API Key issuance and status history (including revoked/expired) for audit, abuse prevention, and analytics.
• If linked to a Discord account, we may store your Discord user ID and tag for administration and abuse mitigation.
• Operational Metadata is used for abuse prevention, performance tuning, security monitoring, and diagnostics. We apply reasonable safeguards and do not sell this metadata.
• Disclosure occurs only as required by law, valid legal process, or to enforce these Terms and protect our users and the Service.

12. GDPR & Data Rights

• Where applicable (e.g., under the EU/UK GDPR or similar laws), you may exercise rights over personal data linked to your API Key or identifiers you voluntarily provide (such as Discord ID).
• Subject to legal limitations, your rights may include: access, rectification, erasure, restriction, portability, and objection to certain processing activities.
• We process only Operational Metadata necessary to run the Service securely and effectively. We do not engage in automated decision-making that produces legal or similarly significant effects.
• To submit a request, contact support@winstreak.ws or visit winstreak.ws/discord. We may require reasonable verification to confirm key ownership.
• We endeavor to respond within 30 days or communicate if more time is required due to complexity.

13. Data Retention

• Request logs: We generally retain Operational Metadata for up to 12 months, except where longer retention is required for security investigations, legal compliance, or abuse mitigation.
• Player Data: Public Player Data may be retained as long as it remains relevant for the Service's features and integrity. We periodically prune stale or low-value data.
• Deletion: Operational Metadata is deleted or anonymized after the applicable retention period, subject to legal holds. Player Data sourced from public endpoints may be refreshed or removed when no longer accurate or available.

14. Player Data Collection (Non-API Related)

• Independent of API usage, Winstreak maintains a database of public Player Data obtained from legitimate, publicly accessible sources (e.g., Mojang/Microsoft, Hypixel, and game-related public profiles).
• This collection is unrelated to an individual User's API usage and may include players who do not hold an API Key.
• Only data publicly exposed or permissibly queryable is collected. We do not intentionally collect private or access-restricted data.
• Player Data is not considered personal data of API Users unless voluntarily linked by the User (e.g., through Discord or account association).
• For requests related to linkage or accuracy, contact support@winstreak.ws.

15. Redistribution & Third-Party Data

• You may use data retrieved from the Service in your applications, reports, or analyses, but you may not repackage or offer the Service or substantial portions of its responses as a competing API or bulk data feed.
• Ownership of third-party data (e.g., Mojang/Microsoft or Hypixel) remains with those respective rights holders. You must comply with their terms, policies, and attribution requirements, as applicable.
• If you redistribute outputs, you must ensure no violation of third-party terms and include appropriate attribution to Winstreak and any relevant third parties where required.

16. Export Compliance

• You may not access or use the Service in violation of applicable export control and sanctions laws, including those of the United States, the European Union, and the United Kingdom.
• You represent that you are not located in, under the control of, or a national or resident of any embargoed or sanctioned country and are not on any government list of prohibited or restricted parties.

17. Copyright & Abuse Reporting

• Copyright/DMCA: If you believe content accessible through the Service infringes your copyright, send a notice to support@winstreak.ws with sufficient detail to identify the work and the allegedly infringing material.
• Abuse/Harassment: Report data abuse, harassment, or policy violations to support@winstreak.ws or via Discord. We may request additional information to investigate.

18. Governing Law & Dispute Resolution

• These Terms are governed by the laws of the Netherlands, without regard to its conflict of laws principles; insofar as they specifically relate to services hosted in the United Kingdom, the laws of England and Wales shall apply.
• Venue: Subject to the arbitration provision below, the exclusive jurisdiction and venue for disputes will be the courts located in Amsterdam, Netherlands. For matters relating specifically to services hosted in the United Kingdom, venue shall be the courts of England and Wales in London. You consent to personal jurisdiction in those courts.
• Arbitration: Any dispute arising out of or relating to these Terms or the Service will be resolved by binding arbitration administered by the London Court of International Arbitration (LCIA) under its rules. The seat of arbitration will be London, England. Either party may seek injunctive or equitable relief in court to protect intellectual property or confidential information.
• Class Action Waiver: You and Winstreak agree that disputes will be resolved only on an individual basis and not in a class, consolidated, or representative action. Class arbitrations and class actions are not permitted.
• Small Claims: Either party may bring an individual action in small claims court consistent with jurisdictional limits.

19. No Warranty

• The Service and all data are provided “AS IS” and “AS AVAILABLE” without warranties of any kind, whether express, implied, statutory, or otherwise, including implied warranties of merchantability, fitness for a particular purpose, non-infringement, and uninterrupted or error-free operation.
• We do not warrant that data is accurate, complete, reliable, current, or suitable for your use, nor that endpoints will remain available or unchanged.
• We are not responsible for outages, changes, or inaccuracies caused by third-party services or networks (e.g., Mojang/Microsoft, Hypixel, hosting providers, ISPs).

20. Limitation of Liability

• To the maximum extent permitted by law, Winstreak will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenues, goodwill, data, or business opportunities, arising from or related to your use of the Service.
• To the extent liability cannot be excluded, Winstreak's aggregate liability under these Terms will not exceed the greater of: (a) USD $100, or (b) the total amount you paid (if any) for access to the Service in the three (3) months preceding the event giving rise to the claim.
• These limits apply even if Winstreak has been advised of the possibility of such damages and even if a remedy fails of its essential purpose. Some jurisdictions do not allow certain limitations; in such cases, these limitations apply to the fullest extent permitted by law.

21. Changes & Termination

• We may modify, suspend, or discontinue any endpoint, feature, rate limit, or aspect of the Service at any time, with or without notice.
• We may amend these Terms at our discretion. Material changes may be announced through Discord or the website; continued use after changes constitutes acceptance.
• We may terminate or restrict your access (including revoking keys) for any reason, including suspected abuse, non-compliance, security threats, or legal obligations. We are under no obligation to restore access.
• Upon termination, your rights to use the Service cease immediately. Provisions relating to attribution, prohibited usage, data rights, warranty disclaimers, and limitations of liability survive termination.

22. User-Agent Requirements

• All API requests must include a meaningful User-Agent identifying the calling application or service (e.g., “Soov Discord Bot (winstreak.ws/soov)” or “ExampleDashboard/1.2 (contact: admin@example.com)”).
• Generic or default User-Agents (e.g., “Mozilla/5.0”, “Python-Requests”) without distinguishing context may be throttled or rejected. Absence of a valid User-Agent may result in suspension or revocation.
• Endpoints explicitly documented as for Cubelify integration may relax this requirement; all other endpoints must comply.

23. Historical Versions & Effective Date

• Effective date: The effective date is shown at the top of this page.
• Change tracking: We may maintain an archive of prior versions or a changelog available via our website or repository. Older versions may be retained for reference but are superseded by the most recent version.
• We encourage you to review these Terms periodically. Your continued use constitutes acceptance of any updates.