Privacy Policy

Last updated: July 26, 2026

This policy explains what information MCEdit Skin Studio collects, how it is used, and your rights regarding your data.

1. What We Collect

Account information

When you register: email address, username, and a hashed (one-way encrypted) password. We do not store your password in plain text.

Generated skins

When you choose to save a skin, the generated PNG files are stored on our server linked to your account. The original photo you uploaded is never transmitted or stored.

Usage analytics

We collect anonymous usage data (page views, feature use frequency) without personally identifying information. This helps us improve the Service.

Server logs

Our servers automatically record IP addresses, timestamps, and requested URLs in standard web server access logs. These are retained for up to 30 days for security and debugging purposes.

2. What We Do Not Collect

The original photo or selfie you upload. Processing happens in your browser; the photo is never sent to our servers.
Payment information (the Service is currently free).
Location data beyond what is apparent from your IP address.
Data from third-party social networks.

3. How We Use Your Information

To provide and maintain your account and saved skins.
To send transactional communications (e.g., password reset if implemented).
To detect and prevent abuse, fraud, or security incidents.
To improve the Service based on aggregate usage patterns.

We do not use your data to train AI or machine learning models. We do not sell your data to third parties.

4. Data Storage and Security

Data is stored on servers in Canada/United States. We use HTTPS (TLS) for all transmissions. Passwords are stored as bcrypt hashes. We implement rate limiting and CSRF protection to prevent unauthorized access.

Despite our best efforts, no system is 100% secure. In the event of a data breach affecting your personal information, we will notify affected users within a reasonable timeframe as required by applicable law.

5. Data Retention

Your account data and saved skins are retained until you delete your account or the files. Server access logs are retained for up to 30 days. You may request deletion of your data at any time.

6. Your Rights

Depending on your jurisdiction (GDPR, CCPA, PIPEDA, etc.), you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data ("right to be forgotten").
Object to or restrict processing.
Data portability.

To exercise these rights, contact us using the information provided on the site. We will respond within 30 days.

7. Cookies and Local Storage

We use a session cookie to keep you logged in. This cookie is HttpOnly, Secure (HTTPS only), and expires when you close your browser or click "Sign out". We do not use third-party tracking cookies or advertising cookies.

8. Third Parties

Image compression may be processed by our own internal compression service (compressor.dannny0117.com), which we operate. No compressed image data is shared with external third parties. We do not use any external analytics, advertising, or social media SDKs.

9. Children

This Service is not directed at children under 13. If you are a parent or guardian and believe your child has created an account, contact us and we will delete it.

10. Changes to This Policy

We may update this policy. We will update the "Last updated" date above. Continued use after changes constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or data requests, use the contact information provided on the site.