Back to Main Policy

Server Plugins Privacy

INXTRA PROXY ARCHITECTURES
VERIFIED COMPLIANCE PROTOCOL — PLUGIN SIDE

The INXTRA Velocity and Paper Plugins run server-side on integrated proxy systems and game servers to coordinate zero-password cracked player authentication and enforce community anti-cheat/mod banning guidelines.

1. Information Collected and Processed

To clear connections securely, the plugins process:

  • Connection Metadata: Player username, UUID, and incoming connection IP address (to match against in-memory IP bypass caches for fast logins).
  • Cryptographic Nonces and Signatures: To prevent session hijacking and replay attacks during the authentication handshake.
  • Banned Mod IDs: If reporting is active, the Velocity plugin parses the filtered lists of actively running cheat mods sent by the client's INXTRA mod.

2. Banned Mods Enforcement & Admin Toggles

Admins have total control over mod verification features inside their configurations:

  • Ad-Hoc Verification: The plugin only queries the backend API for the active blacklist (no static lists stored in jar files).
  • Cheat Detection Toggle: The admin can disable mod checks entirely by setting cheat.detection.enabled=false in the Velocity configuration. When disabled, any mod blacklist data received is immediately discarded.
  • Zero Non-Cheat Exposure: Because the client mod only sends banned cheat mod IDs, the plugin never receives or logs any list of safe/clean mods you have installed.

3. In-Memory Processing and Security

Player IP addresses and verification states are cached in thread-safe, in-memory ConcurrentHashMaps. They are used strictly to coordinate fast IP-based bypass logins (so players don't have to verify on every rejoin) and are automatically cleared on plugin reload, server restarts, or session expiry.

4. Server Logs Compliance

When a player is kicked for using cheat mods, a warning is logged on the proxy console identifying the specific blacklisted mod in use. Safe, unlisted mods are never logged, scanned, or tracked, ensuring compliance with player privacy rights.

© 2026 INXTRA AUTHENTICATION SYSTEMS — ALL RIGHTS RESERVED