Privacy Policy
MinecraftRender is a free 3D rendering service. We try to collect as little personal data as possible, and this page explains exactly what gets processed when you use the site.
Last updated: 2026-04-16.
What we collect
We process three categories of data:
- Player identifiers you submit — Java usernames, UUIDs, Bedrock gamertags, or XUIDs passed to the render API. These are typically the player's own identifier in Minecraft, and are necessary for the service to function (we can't render a skin without knowing whose).
- Server request metadata — your IP address, the URL you requested, the time, and your browser's
User-Agentstring. This is standard HTTP server information and appears in our access logs. - Content you publish — if you use the Studio's Share feature, the pose data (bone rotations, props, lighting, camera) plus any name/description/tags you add is stored on our server under a 6-character shortcode so others can render from it.
We do not use cookies, analytics, advertising trackers, fingerprinting, or any third-party telemetry. The site ships no tracking scripts.
Why we collect it
| Data | Purpose |
|---|---|
| Player identifiers | To fetch the player's skin/model from Mojang, Microsoft, or other upstream services, and produce the render you asked for. |
| IP addresses | Rate limiting (to prevent abuse) and diagnosing server issues from access logs. |
| User-Agent + request metadata | Standard server logs for debugging and security (e.g. identifying misbehaving clients). |
| Published scene data | To make your shortcode renderable by you and others. |
Under UK/EU data protection law, the lawful basis for this processing is legitimate interests — running a free public service responsibly requires the minimum data needed to serve requests, enforce fair use, and maintain security.
Third parties
To resolve player identifiers and fetch skins, we make outbound requests to the following services. Your IP is not sent to them — our server makes the requests on your behalf:
- Mojang API (
api.mojang.com,sessionserver.mojang.com,textures.minecraft.net) — Java player resolution and skin fetching. - Microsoft Persona API (
persona.franchise.minecraft-services.net) — Bedrock Persona / Character Creator model data. - GeyserMC (
api.geysermc.org) — Bedrock gamertag→XUID resolution and classic-skin fetching. - mcprofile.io — fallback Bedrock gamertag→XUID resolution.
We share only the minimum needed to make each request (a player identifier). We do not share your IP, your browser, or any content you've posed or shared with these services.
The site is hosted on standard web infrastructure; hosting providers may process IP addresses as necessary to route traffic and provide DDoS protection.
Browser storage
The Studio uses localStorage in your own browser to:
- Autosave your current scene so you can reload the tab without losing work.
- Remember your Studio settings (preview quality, undo depth, autosave toggle).
This data stays on your device. It is never transmitted to our server. Clearing site data in your browser removes it entirely.
Any GLB props or skin PNGs you upload to the Studio are processed client-side and, if you publish the scene, embedded inline in the published pose. Uploaded files are not stored as separate assets on our server.
Retention
| Data | How long we keep it |
|---|---|
| HTTP access logs (IP, URL, UA) | Up to 30 days, then rotated/deleted. |
| Rate-limit state | In-memory only; discarded within 1 minute. |
| Player-resolution cache | In-memory, 1 hour TTL. |
| Rendered image cache | On-disk, 6 hour TTL; then overwritten. |
| Unpublished shortcodes | Auto-deleted after 90 days of no activity. |
| Gallery-published templates | Kept indefinitely unless you request removal. |
Your rights
Under the UK GDPR and equivalent laws, you have the right to:
- Request a copy of the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (including removing a published template).
- Object to processing based on legitimate interests.
- Complain to your local data protection authority (in the UK, the Information Commissioner's Office).
To exercise any of these rights, contact us on Discord. Because we don't keep account records, identity-proving your request may require that you tell us the specific IP, shortcode, or identifier the data relates to.
Children
MinecraftRender is not directed at children under 13. We don't ask for names, ages, or account details from anyone. If you're a parent or guardian and believe your child has published content (via the gallery) that you'd like removed, contact us on Discord.
Changes to this policy
If we change how we handle data, we'll update this page and bump the "Last updated" date at the top. Material changes (adding analytics, changing retention periods, etc.) will also be announced on our Discord before they take effect.