Privacy
ModChest has no accounts and never asks for your name or email. The website has no advertising, tracking pixels or session recording. Browsing and downloading free creations do not require personal information.
Visit counts
A tool called PostHog records which page you opened and what you downloaded. While you browse it also records the filters and sort order you pick — including when you take one off or clear them all, with the part of the catalog you were looking at and how many results the choice leads to — and the words you search for, with how many results they found. When you tap a card to open a mod, skin, texture pack or collection, it records which of those it was, which part of the catalog it belongs to, and which part of the page you tapped it in, such as a list of results or a row on the home page; never which card. When you download a skin from the skin editor, it records that you did, whether you started from a new skin, your own file or a ModChest skin, the arm width, and whether you downloaded it or saved it to your photos; never the skin itself. When you open the chest on a drop day, it records that you did, whether on the home page or a section’s page, and the drop’s date; never what came out of it. When you roll Surprise me, it records that you did, where, and which section it was choosing from; never what it landed on. After you tap Install, it records which device’s three steps you were shown — Android, iPhone and iPad, or Windows — whether you switched to a different device, and whether you opened the full guide; nothing else about your device is sent with it. A page’s address includes those search words and filters too. PostHog stores nothing on your device, with no cookies and no local storage, so there is no cookie banner to click.
PostHog receives the page address, the page that linked you to it, your browser and device type, your browser’s language and time zone, your screen size, and your IP address. Your IP address and browser are mixed into a hash with a secret that is replaced every day and then deleted; the IP address itself is removed before anything is stored, and no location is looked up from it. That hash can tell that two pages were opened by the same visitor today; it cannot tell that you came back tomorrow. We never ask PostHog to identify anyone, so no visitor profile is built. PostHog processes this in the United States.
If your browser sends Do Not Track, or you block the script, nothing is sent and the site works the same. Every download is an ordinary link and never depends on it.
On your device
The website keeps a few things in your browser’s local storage, so they are still there when you come back, and never sends them to PostHog or to us: your last 5 searches, which the search box offers again until you clear them; the day of the last drop whose chest you opened, so the chest stays open; and, in the skin editor, the last 12 skins you worked on, your recent colours and whether you have seen its first tip. While a tab stays open, its session storage keeps the cards a list added when you tapped Show more, and how far down you had scrolled, so going back to that list puts you where you were; closing the tab removes them. Clearing your browser’s site data removes all of it.
Website delivery
Our hosting providers process connection information, such as your IP address and requested file, to serve the website and downloads.
The ModChest app
Your saved list, your mixes, recent searches and the list of what you sent stay on your device. Sending something to Minecraft shares its file through your device’s standard file permissions. The app has no advertising and no tracking, and it does not count screens, taps, searches, visits or installs.
When the app runs into an error it cannot recover from, it sends an error report to PostHog: what went wrong and where in the app, the app version, your device’s make, model, operating system, language, time zone and screen size, and random IDs the app creates on your device for itself and for each time it runs, so related reports can be grouped. PostHog also receives your IP address, removes it before the report is stored, and looks up no location from it. When the app itself crashes, the report also names your mobile network’s carrier and your device’s user agent, the line that tells a server the device’s model and system. The part of PostHog that catches those crashes also asks PostHog for feature settings each time the app starts, sending the app’s random ID; the app uses none of them. A lost connection is never reported, the report holds nothing you typed or saved, and no profile is built. PostHog processes reports in the United States.
Each time it starts, the app asks Expo, the service that delivers updates to it, whether a newer version of its code is ready. That request carries a random ID the app creates for it, the app’s version and whether it is running on Android or iOS, and, like any connection, your IP address.
Subscriptions
Premium creations come with a ModChest subscription, bought in the app through the App Store or Google Play. Apple or Google takes the payment, so we never see a name, email address or card. The app uses a service called RevenueCat to know whether a subscription is active. RevenueCat receives the store’s record of the purchase (the plan, when it started, renews or ended, and the store country), a random ID the app creates that is not linked to anyone, the app version, the device’s operating system and, like any connection, the IP address. RevenueCat processes this in the United States.
Installing a premium creation sends that random ID, with the creation and its version, to our website, which asks RevenueCat whether the subscription is active before handing over a download link that works for ten minutes. Our hosting logs record the ID and the creation, so we can see how premium creations are used. Restoring purchases asks the store for your subscription and nothing more.
If someone is giving you Premium, the app’s About screen can send that random ID through your phone’s share sheet, to whoever you choose. It goes nowhere unless you send it. If you send it to us, we use it only to give that ID the subscription in RevenueCat, and the message it came in, with the address you sent it from, is kept like any other email to us, so from then on we can tell whose ID it is.
Children
Players of every age use ModChest, so neither the website nor the app asks for a name, email address, age or any other personal information, and neither lets anyone post or message. The website’s visit counts and the app’s error reports, its update checks and a subscription’s record above are the only things either sends about you, and a purchase is made through the App Store or Google Play, whose family settings can require a parent’s approval.
Legal basis
Counting website visits and receiving the app’s error reports rely on our legitimate interests: knowing which pages and creations people use, and finding and fixing what breaks, without cookies, profiles or anything that names you. Serving the website and its downloads, delivering the app’s updates, and keeping them running and secure, rely on the same. Checking a subscription, delivering its premium creations and keeping the record of the purchase are needed to provide the subscription you bought, so they rely on the performance of that contract.
How long it is kept
PostHog keeps the website’s visit counts and the app’s error reports for up to seven years. Vercel, which hosts the website, keeps the hosting logs, including the ones that record a premium download, for at most 30 days. RevenueCat keeps a subscription’s record until we ask it to delete it. Apple and Google keep their own records of a purchase under their own privacy policies.
Your rights
You can ask for a copy of the information we hold about you, and ask us to correct it, delete it, limit how we use it, or give it to you in a form a computer can read. You can also object to anything we do on the grounds of legitimate interests. Write to support@modchest.com.
ModChest has no accounts, so we can only find information that something you send us leads to. Nothing you could send us picks out your website visits: the hash that joined one day’s pages was made with a secret deleted the next day. The app’s error reports and update checks are tied to random IDs the app made for itself, which it never shows you. A subscription’s record is tied to the ID that About’s Send your ID shares, which the app offers only while nothing is subscribed, so if you were given Premium, that ID finds it. For a subscription you bought, tell us which store you bought it through and the order number on the store’s receipt; if that is not enough to find the record, we will tell you. Removing the app deletes what it kept on your device.
You can also complain to a data-protection supervisory authority, such as the one in the country where you live or work.
Contact
Questions about privacy or anything else go to support@modchest.com.