Privacy

In short

No accounts, no cookies, no ads, no tracking, no analytics scripts.
The server keeps a standard access log for 15 days, for security; visits are counted from it without storing IP addresses.
Your settings and uploaded skins stay in your own browser.
Your browser only ever talks to this site. When you build a player by username, our server fetches the skin, so the skin services never see your IP address.

Who is responsible

The controller under the GDPR (Art. 4 No. 7) is:

Maximilian Engl
Am Tennenbach 26, 91080 Spardorf, Germany
E-mail: engl.devmail@gmail.com

Hosting and server logs

The site runs on a server in the Open Telekom Cloud of T-Systems International GmbH (Hahnstraße 43d, 60528 Frankfurt am Main, Germany), in a data centre in the European Union. T-Systems processes the data below only on our behalf, as the hosting provider.

Every time a page or file is requested, the web server writes a line to its log with:

your IP address,
date and time,
the address requested, the result (for example "200 OK") and the amount of data sent,
the page you came from (referrer), if your browser sends it,
your browser and operating system (user agent).

This is needed to deliver the site and to find and stop attacks and faults. The legal basis is our legitimate interest in a secure, working website (Art. 6 (1) (f) GDPR). The logs are rotated daily and deleted after 15 days. They are not combined with other data and not used to build profiles.

Visitor statistics

To see how many people use the site and which pages they open, we count page views from the server log above with GoatCounter, running on our own server. Your IP address is used only for a moment, to look up your country in a database on the server and to tell repeat visits apart within one day; it is not stored. Only totals are kept: page views per page and day, referring sites, browsers, operating systems and countries. Nothing is sent to anyone else, no cookies or scripts are used, and no profiles are built. The legal basis is our legitimate interest in knowing how the site is used, to improve it (Art. 6 (1) (f) GDPR).

Fonts and files

Everything the site needs, including the pixel font, the mob models and the block textures, is served from this server. No content delivery network, Google Fonts or other third party is contacted when you open the site.

Stored in your browser

The site uses your browser's local storage (not cookies) to remember things for you on this device. Nothing of it is sent to the server. It holds:

your view settings: dark mode, lighting, background, measurement direction, folded sections, whether Steve is shown;
whether you have seen the tour;
your last build (which mob or block, the layer and settings) so you can continue it;
players you built from a skin, and skin images you uploaded.

Storing these is strictly necessary for features you use (§ 25 (2) No. 2 TDDDG). You can delete them at any time by clearing this site's data in your browser settings.

Building a player from a username

If you type a Minecraft username under "Build a player", or open a link to a player (such as ?mob=player:jeb_), your browser asks our server for that skin, and our server fetches it from these services:

playerdb.co, to look up the player and the address of the skin;
Mojang / Microsoft (textures.minecraft.net), which stores the skin image;
minotar.net, only if playerdb.co cannot be reached.

These services only receive the username and our server's address, not your IP address or anything about your browser. The request appears in our server log like any other (see above). The legal basis is our legitimate interest in offering the feature you use (Art. 6 (1) (f) GDPR). An uploaded skin file never leaves your browser.

Contacting us by e-mail

If you write to us, we use your e-mail address and message only to answer you. The legal basis is our legitimate interest in answering your request (Art. 6 (1) (f) GDPR), or steps you asked for (Art. 6 (1) (b) GDPR). We delete the e-mails when the matter is settled, unless the law requires us to keep them.

Our mailbox is at Gmail, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, so Google also receives your e-mail; Google's privacy policy applies to that. Data may also be processed by Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR).

No obligation, no automated decisions

You are not required to give us any data. Without the server log data the site cannot be delivered to you. We do not use automated decision-making or profiling (Art. 22 GDPR).

Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or restricted (Art. 18), and to data portability (Art. 20). Write to the e-mail address above.

Right to object (Art. 21 GDPR)

Where we process your data based on our legitimate interest (Art. 6 (1) (f) GDPR), you have the right to object to this processing at any time, on grounds relating to your particular situation. We then stop processing it, unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. Write to the e-mail address above.

Right to complain

You can complain to a data protection supervisory authority (Art. 77 GDPR), in particular in the EU country where you live or work. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

Server logs only hold IP addresses, so we can usually not tell which entries are yours without more details from you, such as the time of your visit.