Privacy Policy

This Privacy Policy explains how SkinForge ("SkinForge", "we", "us") collects, uses, and protects your information when you use our website and skin-generation service at skinforgemc.org and api.skinforgemc.org (the "Service"). By using the Service you agree to this Policy.

1. Information we collect

• Account information. When you create an account we store your email address and a securely hashed password, or — if you sign in with Google — your Google account identifier, email address, and display name.
• Linked Minecraft accounts. If you link a Minecraft account, we store its public profile (UUID and username) and the authentication tokens required to generate and sign skins on your behalf.
• Content you submit. Images you upload or provide by URL for skin generation, and the resulting generated skin textures.
• Usage & technical data. API requests, API-key usage, timestamps, and your IP address, used for security, abuse prevention, and rate limiting.
• Cookies. A single session cookie to keep you signed in across skinforgemc.org and its subdomains. We do not use advertising cookies.

2. How we use your information

• To provide, operate, and maintain the Service, including generating and caching signed skin textures.
• To authenticate you and keep your session active.
• To communicate with you — email verification, password resets, and important service notices.
• To protect the Service — enforcing rate limits, detecting abuse, and moderating submitted content.

3. How your information is shared

We do not sell your personal information. We share data only as needed to run the Service:

• Google — when you choose "Sign in with Google", for authentication.
• Microsoft / Mojang — to authenticate linked Minecraft accounts and upload skins for Mojang to sign.
• Infrastructure providers — hosting and delivery of the Service.
• Where required by law, or to protect the rights, safety, and security of SkinForge and its users.

4. Data retention

We keep account information for as long as your account is active. Generated skins may be cached to speed up repeat requests. You can request deletion of your account and associated personal data at any time by contacting us (see below); some records may be retained where required for security or legal reasons.

5. Security

Passwords are stored using industry-standard one-way hashing, and all traffic is encrypted in transit (HTTPS). No system is perfectly secure, but we take reasonable measures to protect your data.

6. Your rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw linked Minecraft accounts at any time from your dashboard. To exercise these rights, contact us at the address below.

7. Children

The Service is not directed to children under the age of 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will remove it.

8. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to you.

9. Contact

Questions about this Policy? Email hello@skinforgemc.org.

← Back to home