Last updated: 29 September 2026
Who is responsible
MinecraftSkin.app runs MinecraftSkin.app and is responsible for your data. Contact: contact@minecraftskin.app.
What we collect and why
| What | Why |
|---|---|
A random visitor ID in one cookie (vid, kept for up to 1 year) | So your free skins, credits and saved skins stay with your browser. It contains no name or email. |
| A scrambled (one-way hashed) version of your internet address | To stop people from grabbing endless free skins or spamming sign-in codes. We don't store the address itself. |
| Your skin ideas and the skins made from them | To make the skins, show them in "Your skins", and power your share links. |
| Your email address, only if you choose to sign in | To send you a sign-in code, and to link your skin packs to you so you can use them on any device. Nothing else: no newsletters. |
| Your purchases (pack, price, date, the email you paid with) | To add your credits, handle refunds, and keep the records the law requires. |
| Settings saved on your device only (world theme, sound on/off) | So the site looks and sounds the way you left it. These never leave your device. |
We don't ask for your name, age, address, phone number or photos. There are no public profiles, no chat and no location tracking.
Kids and parents
- We built the site for young players, following the ideas of COPPA (US) and the UK Age Appropriate Design Code (Children's Code): the most private settings are the default, email is optional, and we don't build profiles about anyone.
- If you are under 13, please ask a parent before signing in, and use a parent's email.
- Parents can ask us at any time what we hold about their child, and ask us to delete it: email contact@minecraftskin.app.
Companies that help us
We share only what each one needs to do its job:
- Stripe handles payments. Card details go straight to Stripe; we only get the result and the email you paid with.
- Resend sends our sign-in emails (it receives your email address and the code).
- Modal runs the AI on its computers (it receives the idea text only, never who you are).
- Cloudflare protects and speeds up the site. It sees your internet address like any network would, and its Turnstile check may ask your browser to prove it is not a bot before your free skins.
- Our server host stores the site's database and skins.
- Google, only if rewarded ads are switched on and only when you choose to watch an ad: the ads are non-personalised and marked as meant for a young audience. Google may still use cookies to limit how often an ad is shown and to stop fraud.
We never sell your data and never use it for personalised advertising.
Cookies
We use one cookie of our own: vid, the random visitor ID described above. It is needed for the site to work.
We don't use tracking or analytics cookies. If ads are on and you choose to watch one, Google's ad cookies described above may be used.
How long we keep things
- Skins, credits and your visitor ID: while you use the site, or until you ask us to delete them.
- Sign-in codes stop working after 10 minutes and are stored scrambled.
- Purchase records: as long as tax and accounting laws require (usually several years).
- Backups of the database are kept for 14 days, then deleted.
Your rights
You (or your parent) can ask to see your data, correct it, get a copy, or delete it. Email contact@minecraftskin.app from the email you signed in with, or tell us your share link so we can find your skins. We answer within 30 days. Where the GDPR or UK GDPR applies we rely on running the service you asked for (contract) and on keeping it safe from abuse (legitimate interest). You can also complain to your local data protection authority.
Keeping data safe
The site only works over an encrypted connection, sign-in codes and internet addresses are stored scrambled, and only the people who run the site can reach the database.
Changes
If we change how we use data, we update this page and the date at the top first.