Privacy Policy
Last updated: 2026-11-10
This policy explains what data PickaxeKit (pickaxekit.com) collects and why. The site is run by an independent developer based in Pakistan, who is the data controller. Contact: support@pickaxekit.com.
The short version
- Tools run in your browser. Only skins you choose to publish are uploaded.
- You never need an account to use the tools. Accounts are optional and free.
- If you create an account, we keep your email, username and what you choose to sync or publish, and nothing else.
- Our own statistics are cookieless; Google Analytics runs with advertising features off.
- If ads are shown, we request non-personalised ads for everyone.
Data the tools use
Tool settings are kept in the page address (so you can share a link) and, for features like recent searches and theme, in your browser's local storage. This stays on your device. You can clear it at any time in your browser settings.
Accounts (optional)
If you sign up, we store your email address (to sign you in and send messages you ask for), your username and profile (public: username, bio, links, avatar, level), and, if you choose to sync them, a copy of My Kit, your favourites and progress, and the skins in your wardrobe. While you are signed in, skins you download from the skin editor are added to your private wardrobe. Accounts are run on Supabase (database and sign-in) and skin files on Cloudflare R2. If you sign in with Google, Discord or Microsoft, we receive your email address and account ID from them, not your password.
You can download all of this at any time (Settings → Your data) and delete your account (Settings → Delete account). Deletion has a 7-day grace period, after which your profile, synced data and skin files are permanently removed. Real names are never shown, and there are no private messages.
Community features
What you publish is public: skins (with their renders), titles, tags, comments, collections you make public, contest entries, follows, likes counts, your level and trophies. Your individual likes, votes, drafts, reports and notifications are private.
To keep contests fair, when you enter or vote we store a one-way hash of your IP address (salted, so it can't be turned back into the address). It is used only to spot votes from one network and is deleted with your account.
If you claim a Minecraft profile, we store its public UUID and name, and record the skins it wears (from Mojang's public API) as your skin history. Unclaiming deletes them. Player lookups of anyone else are not stored.
Copyright notices sent with the DMCA form are kept so we can act on them and keep a record, as the law expects.
Statistics
We use Cloudflare Web Analytics, which does not use cookies and does not track you across sites. It records page views, the referring site, browser type and country, in aggregate.
Our own counter adds 1 to daily totals: visitors, page groups, which tools are opened, used, saved and shared, searches that found nothing, the referring site, the country (from Cloudflare) and the device type. It keeps no cookies, no IP address and no ID, so no total can be linked to you. To count a visitor only once a day, your browser remembers today's date in local storage.
We also use Google Analytics 4 to understand which pages and tools people use. It sets first-party cookies (_ga) to tell visits apart and reports page views, approximate location, device and referring site in aggregate. Advertising features are switched off: no Google signals, no ad personalisation and no advertising cookies from Analytics. In the EEA, the UK and Switzerland, Analytics cookies are only used after you agree; before that, Google receives cookieless pings without identifiers. You can opt out with Google's opt-out add-on. See how Google uses data from sites that use its services.
Hosting and security logs
The site is served by Cloudflare. To deliver pages and protect against attacks, Cloudflare processes your IP address and request details as our service provider. These logs are kept only as long as needed for security and are not used to identify you.
Advertising and cookies
When advertising is enabled, ads are served by Google AdSense. Please note:
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet.
- We request non-personalised ads for all visitors. Non-personalised ads still use cookies or local storage for frequency capping, aggregated reporting and fighting fraud and abuse.
- Third parties may place and read cookies on your browser, or use web beacons, to collect information such as your IP address and device identifiers as a result of ad serving.
- You can opt out of personalised advertising in Google Ads Settings, and opt out of some third-party vendors' cookies at aboutads.info.
- Learn how Google uses information from sites or apps that use its services.
Ad network used: Google AdSense. We will list any other ad network here before it is used.
Consent (EEA, UK and Switzerland)
Visitors in the European Economic Area, the United Kingdom and Switzerland see a consent message from Google's certified consent management platform (IAB Transparency & Consent Framework) before any advertising cookies are used. You can change or withdraw your choice at any time using the privacy settings link shown with that message.
US state privacy rights
We do not sell your personal information. Where US state laws give you the right to opt out of the sale or sharing of personal information or targeted advertising, you can do so through the privacy message shown to you, or by emailing us. We serve non-personalised ads only.
Children
PickaxeKit is a general-audience site that many young players use. We do not knowingly collect personal information from children under 13 (or the age required in your country). We do not offer accounts, chat or messaging, ads are non-personalised, and ad requests are marked for age-appropriate treatment. If you are a parent and believe your child has sent us personal information, email us and we will delete it.
Emails you send us
If you email us, we use your message and address only to reply, and delete them when the matter is closed unless we must keep them for legal reasons.
International transfers
Our providers (Cloudflare, Google) may process data in the United States, the European Union and other countries, under their own safeguards for international transfers.
Your rights
You can ask us what personal data we hold about you, and ask us to correct or delete it, or object to its use. Email support@pickaxekit.com and we will reply within 30 days. You may also complain to your local data protection authority.
Location data
We do not collect precise location data.
Changes
We will update the date at the top of this page when this policy changes, and describe major changes on this page.