Privacy Policy

Last updated: March 2026

Introduction

MCWorldTools ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit mcworldtools.com. By using the site, you agree to the practices described here.

Data Controller

MCWorldTools is operated as a personal project. For any data protection inquiries, please contact us through our contact form.

Information We Collect

Account Information

  • Email address and username (required to create an account)
  • Password (stored securely using industry-standard hashing — we never store or have access to your plain-text password)
  • Minecraft UUID (optional — you can link your Minecraft profile to display your skin)
  • Saved content (armor builds, banner designs, skin files, favourited items)

Other Information You Provide

  • Contact form submissions (email address, message content)
  • Minecraft usernames entered in the UUID Lookup tool (used to query the public Mojang API)

Automatically Collected Information

  • Usage data via Google Analytics (page views, session duration, device type, browser, operating system, referring website) — only with your consent
  • Aggregate tool usage statistics (e.g. number of commands copied, files uploaded) — these are anonymous counters with no personal information
  • IP addresses in server logs for security and rate limiting purposes

UUID Lookup Data

When you use the UUID Lookup tool, we query the public Mojang API with the username you enter. The returned player UUID, username, and skin URL are temporarily cached on our server for up to 24 hours to reduce repeat API calls. This cache is automatically cleared after 24 hours.

What We Do NOT Collect

  • Your Minecraft world files (level.dat, player.dat, etc.) — these are processed entirely in your browser and never uploaded
  • Player inventory contents, world data, or save files
  • Payment information

Legal Basis for Processing (GDPR)

We process personal data on the following legal bases:

  • Consent — Analytics cookies are only set after you accept them via the cookie consent banner. You can withdraw consent at any time by clearing your cookies or using your browser settings.
  • Contract — When you create an account, we process your email, username, and saved content to provide the account features you signed up for (saving builds, favourites, syncing across devices).
  • Legitimate interest — We use IP-based rate limiting and server logs to protect the site from abuse. Contact form data is processed to respond to your inquiries.
  • Performance of a service — UUID lookup caching is necessary to provide the lookup feature without exceeding third-party API limits.

Cookies

We use cookies to enhance your experience. You can manage your preferences using the cookie consent banner that appears when you first visit our site.

Essential Cookies

Required for the website to function properly:

  • Cookie consent preference (stored in your browser's localStorage)
  • Authentication session cookies (httpOnly, used to keep you signed in to your account)

Analytics Cookies (Optional)

Only set if you accept analytics via the consent banner. We use Google Analytics which:

  • Tracks page views and general usage patterns
  • Helps us understand which tools are most used so we can improve them
  • Uses Google's Consent Mode — no data is collected until you opt in

How We Process Your Minecraft Files

Your files never leave your device. All Minecraft world files (level.dat, player.dat, etc.) are processed entirely within your web browser using JavaScript. We do not upload, store, or have any access to your world data.

When you download a modified file, it is generated locally in your browser and saved directly to your device.

Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following data protection rights under the GDPR:

  • Right of access — Request a copy of the personal data we hold about you.
  • Right to rectification — Request correction of inaccurate or incomplete data.
  • Right to erasure — Request deletion of your personal data where there is no compelling reason for continued processing.
  • Right to restriction — Request that we restrict processing of your data in certain circumstances.
  • Right to data portability — Request transfer of your data in a structured, machine-readable format.
  • Right to object — Object to processing based on legitimate interests.
  • Right to withdraw consent — Where processing is based on consent (e.g. analytics cookies), you can withdraw consent at any time by clearing your cookies or declining analytics in the cookie banner. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us using our contact form. We will respond to your request within 30 days.

Data Retention

  • Account data — Your email, username, saved builds, and favourites are retained for as long as your account exists. You can request account deletion at any time via our contact form, and all data will be deleted within 30 days.
  • Contact form submissions — Retained until the inquiry is resolved, then deleted.
  • Google Analytics data — Retained for 14 months (Google Analytics default), then automatically deleted.
  • UUID lookup cache — Player UUID, username, and skin URL are cached for up to 24 hours, then automatically expired.
  • Aggregate usage statistics — Anonymous tool usage counters (e.g. total commands copied) are retained indefinitely as they contain no personal information.
  • Server logs — IP addresses in rate-limiting logs are held in memory only and cleared on server restart. Admin audit logs containing IP addresses are retained for security purposes.
  • Cookie preferences — Stored locally in your browser until you clear your browser data.

Third-Party Services

We use the following third-party services:

  • Google Analytics — Website analytics (with consent) (Privacy Policy)
  • Vercel — Website hosting and deployment (Privacy Policy)
  • Supabase — Database hosting for contact form submissions, usage statistics, and UUID lookup cache (Privacy Policy)
  • Mojang API — Player UUID and skin lookups (Privacy Policy)

International Data Transfers

Our third-party service providers (Google, Vercel, Supabase) may process data in the United States or other countries outside the European Economic Area. These providers maintain appropriate safeguards for international data transfers, including Standard Contractual Clauses (SCCs) where applicable. By using our site, you acknowledge that your data may be transferred to and processed in these locations.

Children's Privacy

MCWorldTools does not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided personal information through our contact form, please contact us and we will delete it promptly.

Contact Us

If you have any questions about this Privacy Policy, your data, or wish to exercise your data protection rights, please contact us through our contact form.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.