Privacy

This page describes what the mod and the website collect. The mod and site are run by Schematic Index, founded by Fudgedy1 & SubwayWraps, and that is who holds the data described here. The client source is on GitHub, so you can check exactly what it sends.

The mod

When you first open the catalogue, the mod confirms your Minecraft username and account id with Mojang, the same check a Minecraft server does when you join it. That is how posts, likes and Shards are tied to your account. The mod then sends the requests you make: catalogue searches and downloads, likes, ratings, follows, collections, uploads, Shard claims and cosmetic purchases. It sends the mod version, the game version and your locale, so that we can keep things working and show prices in your currency. It does not read your worlds, chat or other mods. The only files it touches are the schematics you choose to upload and the ones it downloads into your schematics folder.

Nametags

To show badges and cosmetics, the mod asks the server which players nearby also run the mod, by UUID. Nothing else about those players is sent.

This website

The site sets no cookies and uses no third-party analytics. It counts page views, which sections, packs and outside links get clicked, which discount codes are applied, how far people get through checkout and how many people are on the site, and sends those counts to our own service. Visitors are counted with a hash made from your IP address, browser and the date, kept for 35 days, so nobody can be followed across days. Visit counts reach our service as ordinary web requests, which carry your internet address and browser type; we turn those into the daily hash straight away and do not store the address itself in our database. To show the download and member counts your browser asks Modrinth and Discord directly, at most once every three hours, and keeps the two numbers locally so they load without a request each time; nothing in them identifies you. When you type a username at checkout it goes to our shop service, which asks Mojang for the account id and checks whether that account has used the mod; the account id is then sent to mc-heads.net to show the player head. When you press Continue to payment, the username, email, pack, currency, any discount code and your tick-box answers are sent to our shop service to create the order. Nothing else about you leaves your browser.

Payments

Payments are processed by Stripe, which sets its own cookies and has its own privacy policy, and receipts are emailed through Resend. We keep your Minecraft username and account id, your email, what you bought and what you paid, any discount code, the time you ticked the delivery confirmation, and a payment reference. Stripe collects your billing name, address and card details to process the payment and, where it applies, work out tax; we can see the name, address and card type in our Stripe dashboard but do not copy them into our own records, and card numbers go to Stripe only. Purchase records, including the email address and Minecraft username on the order, are kept for six years because tax law requires it. Each purchase and each sign-in also stores a salted hash of your IP address, used only to spot abuse and referral fraud; the address itself is not stored. The updates box at checkout is ticked to start with. If you leave it ticked we keep your email to send occasional news about the mod and the store until you unsubscribe from one of the emails or ask in the Discord; if you untick it we use your email for the receipt only. We do this on the basis of our legitimate interest in telling customers about similar things we make.

Why we use your data

We process your Minecraft profile, your catalogue activity and your purchases because we need to in order to provide the service and complete your order (contract). We keep purchase records because tax law requires it (legal obligation). We count site visits, check for abuse of the API and the store, apply the daily purchase limit and run the nearby-player check because we have a legitimate interest in keeping the service working and fair; none of these track you across days. We email existing customers about updates to the mod and the store because we have a legitimate interest in telling customers about similar things we make, and you can stop it at any time (see Payments).

Who else sees your data

Your data is stored on servers run by Railway in the United States (Virginia). Payment data goes to Stripe, receipts are sent through Resend, your Minecraft profile is verified with Mojang (Microsoft), and support tickets are held in Discord. Stripe, Microsoft and Discord are in the United States and certified under the UK-US data bridge; for Resend and Railway we rely on their data processing agreements, which include the UK's approved transfer terms. At checkout the site shows your player head from mc-heads.net; that service sees the account id and nothing else.

Retention and rights

Account data (your Minecraft username and account id, Shard balance, likes, follows and cosmetics) is kept while your account exists; you can ask for it to be deleted at any time. Posts are kept while they are published. Purchase records are kept for six years as tax law requires, even after the account is deleted. Site counters are kept for 13 months and the daily visitor hash for 35 days. Nearby-player checks and the live-viewer count are not stored. You can ask us for a copy of your data, to correct it, to delete it, to limit what we do with it, to receive it in a machine-readable form, or to object to processing based on our legitimate interests. Ask in the Discord and we will answer within a month; we do this by hand and confirm in the ticket, and posts you made can be removed at the same time. You have to give us a Minecraft username to use the mod and an email address to buy Shards, because we cannot deliver or send a receipt without them; everything else is optional. Support tickets are handled in Discord and are subject to Discord's privacy policy. If you are unhappy with how we handle your data you can complain to the UK's data regulator, the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Contact

Questions about privacy go to the Discord support tickets.