Privacy
ModChest has no accounts and never asks for your name or email. The website has no advertising, tracking pixels or session recording. Browsing and downloading free creations do not require personal information.
Visit counts
A tool called PostHog records which page you opened and what you downloaded. While you browse it also records the filters and sort order you pick — including when you take one off or clear them all, with the part of the catalog you were looking at and how many results the choice leads to — and the words you search for, with how many results they found. When you tap a card to open a mod, skin, texture pack or collection, it records which of those it was, which part of the catalog it belongs to, and which part of the page you tapped it in, such as a list of results or a row on the home page; never which card. When you download a skin from the skin editor, it records that you did, whether you started from a new skin, your own file, a ModChest skin or one someone shared with you, the arm width, and whether you downloaded it or saved it to your photos; never the skin itself. When you share a skin from the skin editor, it records how: a link, a picture, an animation, a replay or a video; never the skin or its link. When you download a skin someone shared with you, it records that you did, its arm width and whether you saved it to your photos. When you open the chest on a drop day, it records that you did, whether on the home page or a section’s page, and the drop’s date; never what came out of it. When you roll Surprise me, it records that you did, where, and which section it was choosing from; never what it landed on. After you tap Install, it records which device’s three steps you were shown — Android, iPhone and iPad, or Windows — whether you switched to a different device, and whether you opened the full guide; nothing else about your device is sent with it. When you tap a link to the app, it records where on the page the link sat and which store it led to, or that it led to the app’s own page, with the name the listing was opened under; nothing about you. A page’s address includes those search words and filters too. PostHog stores nothing on your device, with no cookies and no local storage, so there is no cookie banner to click.
PostHog receives the page address, the page that linked you to it, your browser and device type, your browser’s language and time zone, your screen size, and your IP address. Your IP address and browser are mixed into a hash with a secret that is replaced every day and then deleted; the IP address itself is removed before anything is stored, and no location is looked up from it. That hash can tell that two pages were opened by the same visitor today; it cannot tell that you came back tomorrow. We never ask PostHog to identify anyone, so no visitor profile is built. PostHog processes this in the United States.
If your browser sends Do Not Track, or you block the script, nothing is sent and the site works the same. Every download is an ordinary link and never depends on it.
On your device
The website keeps a few things in your browser’s storage, so they are still there when you come back, and never sends them to PostHog or to us: your last 5 searches, which the search box offers again until you clear them; the day of the last drop whose chest you opened, so the chest stays open; and, in the skin editor, the last 60 skins you worked on, your recent colours, whether its sounds are on and whether you have seen its first tip, and, once you start painting, a copy of the skin editor’s page and files, so it works without a connection. While a tab stays open, its session storage keeps the cards a list added when you tapped Show more, and how far down you had scrolled, so going back to that list puts you where you were; closing the tab removes them. Clearing your browser’s site data removes all of it.
Shared skins
Nothing you draw leaves your device until you press Make a link in the skin editor. Then our website keeps the skin for that short link — the picture only, never its name — for 2 years after the link was last made, and deletes it after that. Nothing is kept with the skin: not your name, not your IP address. Your IP address is used for a moment to stop one address making too many links at once; like every visit, it also appears in our hosting provider’s short-lived logs (see Website delivery). If a short link can’t be made, the editor gives a longer link that carries the skin itself, and then the skin is kept only in that link. Anyone you give a link to can see the skin; shared skins are never listed anywhere or shown to search engines, and the part of an address that holds a skin is taken out before anything reaches PostHog. To have a shared skin’s short link taken down for good, use Report this skin on its page, or write to support@modchest.com with its link.
Website delivery
Our hosting providers process connection information, such as your IP address and requested file, to serve the website and downloads.
The ModChest app
Your saved list, your mixes, recent searches and the list of what you sent stay on your device. Sending something to Minecraft shares its file through your device’s standard file permissions. The app has no advertising and no tracking. The one thing it counts is the Premium plans being shown (see Subscriptions); it does not count any other screen, or taps, searches, visits or installs.
When the app runs into an error it cannot recover from, it sends an error report to PostHog: what went wrong and where in the app, the app version, your device’s make, model, operating system, language, time zone and screen size, and random IDs the app creates on your device for itself and for each time it runs, so related reports can be grouped. PostHog also receives your IP address, removes it before the report is stored, and looks up no location from it. When the app itself crashes, the report also names your mobile network’s carrier and your device’s user agent, the line that tells a server the device’s model and system. The part of PostHog that catches those crashes also asks PostHog for feature settings each time the app starts, sending the app’s random ID; the app uses none of them. A lost connection is never reported, the report holds nothing you typed or saved, and no profile is built. PostHog processes reports in the United States.
Each time it starts, the app asks Expo, the service that delivers updates to it, whether a newer version of its code is ready. That request carries a random ID the app creates for it, the app’s version and whether it is running on Android or iOS, and, like any connection, your IP address.
Subscriptions
Premium creations come with a ModChest subscription, bought in the app through the App Store or Google Play. Apple or Google takes the payment, so we never see a name, email address or card. The app uses a service called RevenueCat to know whether a subscription is active. RevenueCat receives the store’s record of the purchase (the plan, when it started, renews or ended, and the store country), a random ID the app creates that is not linked to anyone, the app version, the device’s operating system and, like any connection, the IP address. On an iPhone or iPad it also receives Apple’s note of whether the app was installed from an Apple ad, and if so which search term and campaign; Apple shows no ads to accounts under 13. RevenueCat processes this in the United States.
Each time the Premium plans appear in the app, it tells RevenueCat that they were shown, where they were opened from — offered after you came back from Minecraft, a premium creation’s page, a mix or About — and which set of plans it showed, with that same random ID. We use it to learn which plans and which places lead to a subscription. It says nothing about what you browse, save or download.
Installing a premium creation sends that random ID, with the creation and its version, to our website, which asks RevenueCat whether the subscription is active before handing over a download link that works for ten minutes. Our hosting logs record the ID and the creation, so we can see how premium creations are used. During a free trial, which includes only a few premium creations, our website also keeps the store’s number for that subscription — Apple’s transaction or Google’s order number, which RevenueCat gives it — and the creations the trial has downloaded, so that reinstalling the app does not start the count again; it deletes them a day after the trial ends. Restoring purchases asks the store for your subscription and nothing more.
If someone is giving you Premium, the app’s About screen can send that random ID through your phone’s share sheet, to whoever you choose. It goes nowhere unless you send it. If you send it to us, we use it only to give that ID the subscription in RevenueCat, and the message it came in, with the address you sent it from, is kept like any other email to us, so from then on we can tell whose ID it is.
Children
Players of every age use ModChest, so neither the website nor the app asks for a name, email address, age or any other personal information, and neither lets anyone post or message. The website’s visit counts and the app’s error reports, its update checks, the Premium plans’ views and a subscription’s record above are the only things either sends about you, and a purchase is made through the App Store or Google Play, whose family settings can require a parent’s approval.
Legal basis
Counting website visits, counting when the Premium plans are shown and receiving the app’s error reports rely on our legitimate interests: knowing which pages, creations and plans people use, and finding and fixing what breaks, without cookies, profiles or anything that names you. Serving the website and its downloads, delivering the app’s updates, and keeping them running and secure, rely on the same. Checking a subscription, delivering its premium creations, holding a free trial to what it includes and keeping the record of the purchase are needed to provide the subscription you bought, so they rely on the performance of that contract.
How long it is kept
PostHog keeps the website’s visit counts and the app’s error reports for up to seven years. Cloudflare, which hosts the website, keeps the hosting logs, including the ones that record a premium download, for seven days, and a free trial’s downloads until a day after the trial ends. RevenueCat keeps a subscription’s record, and the Premium plans’ views, until we ask it to delete them. Apple and Google keep their own records of a purchase under their own privacy policies.
Your rights
You can ask for a copy of the information we hold about you, and ask us to correct it, delete it, limit how we use it, or give it to you in a form a computer can read. You can also object to anything we do on the grounds of legitimate interests. Write to support@modchest.com.
ModChest has no accounts, so we can only find information that something you send us leads to. Nothing you could send us picks out your website visits: the hash that joined one day’s pages was made with a secret deleted the next day. The app’s error reports and update checks are tied to random IDs the app made for itself, which it never shows you. A subscription’s record is tied to the ID that About’s Send your ID shares, which the app offers only while nothing is subscribed, so if you were given Premium, that ID finds it. For a subscription you bought, tell us which store you bought it through and the order number on the store’s receipt; if that is not enough to find the record, we will tell you. Removing the app deletes what it kept on your device.
You can also complain to a data-protection supervisory authority, such as the one in the country where you live or work.
Contact
Questions about privacy or anything else go to support@modchest.com.