Privacy Policy - PizzaCube

Effective date: October 31, 2026
Last updated: October 31, 2026

PizzaCube is a Minecraft skin editor and community website available at PizzaCube.net (the "Service"). In this policy, "PizzaCube," "we," "us," and "our" refer to the operator of PizzaCube.net.

This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices available to you. It applies to PizzaCube.net and the skins, profiles, comments, notifications, and other features we make available through it. This policy is effective on the date shown at the top of the document.

This policy does not apply to third-party websites or services, including Mojang and Microsoft services, Cloudflare (including Cloudflare Tunnel, Cloudflare Email Routing, and Cloudflare Turnstile), Google Fonts, Resend, and the mailbox provider that receives our contact email. Those services handle information under their own privacy policies.

By using the Service, you acknowledge this Privacy Policy. If you do not agree with it, do not use the Service.

1. Information We Collect

We collect the following categories of information.

Information you provide directly

Account information - Your username. Usernames are 3–24 characters, may contain letters, numbers, and underscores, and are unique without regard to capitalization. Some names are reserved. - Your email address. Email addresses are unique without regard to capitalization and are used for account verification, password recovery, and account notices. - Your password. Passwords are stored only as an Argon2id password hash. We do not store your plaintext password. - Your email verification status and related account status information. - Your account role or permission level, if an administrator grants one.

Profile information - Your About Me text, up to 2,000 characters. A shorter bio field of up to 280 characters is also stored. - Your profile picture, which is created from the face of a Minecraft skin and stored as image data. - Your Favorites privacy setting, which determines whether other visitors can see the skins you have favorited.

Content you create or submit - Skins you create, upload, import, save as drafts, or publish. A skin record includes a title of up to 60 characters, a 64×64 PNG image stored as a data URL, a Classic/Slim arm setting, tags, public/private status, and timestamps. - Skin tags you add when publishing. Tags and tag usage counts are stored in a shared tag database. - Comments and replies, up to 2,000 characters each, together with the skin or player skin they relate to, timestamps, and whether a comment was edited or deleted. - Likes and favorites, including whether you liked or favorited a community skin or an imported player skin, and when you did so. - Notifications generated when someone comments on your published skin or replies to your comment, and whether you have read them.

Communications - The content of account-related emails we send you, such as verification, password reset, welcome, and password-change notices. - Any information you include when you contact us for support, privacy, copyright, or moderation reasons. PizzaCube does not operate its own mail server: messages sent to [email protected] are accepted by Cloudflare Email Routing and forwarded to a Microsoft Outlook mailbox that we monitor, so Cloudflare and Microsoft process those messages in addition to us (see Section 4).

Information generated through normal use

Login and account activity - The time of your current and previous login. - The IP address associated with your current and previous login. - Your login count. - Records showing that a verification or password-reset token was used, including a SHA-256 hash of the token, its purpose, the associated account, and when it was consumed.

Security and abuse-prevention information - Temporary failed-login records containing the source IP address and the username or email address used in the attempt. These records are held in process memory for 10 minutes and are cleared on a successful login or when they expire. - Rate-limit counters used to limit requests. Depending on the endpoint, a counter may be keyed by IP address, email address, login identifier, or a combination of these. - Cloudflare Turnstile CAPTCHA tokens when Turnstile is enabled. - A CSRF token and other session data stored in your session cookie.

Technical and server information - When you visit the Service, our web server and operating system may record your IP address, requested URL (including query strings such as search terms or player names), request method, response status and size, timestamp, referring page or origin, and browser user-agent. The application itself does not maintain a separate analytics database, but server access and error logs may contain this information depending on the deployment configuration. Search terms are used to return results and are not stored in a separate search-history database. The application does not maintain view or download counters; server logs may record the related page or API requests. - All public requests to PizzaCube.net pass through Cloudflare's network and reach our origin server through a Cloudflare Tunnel. Cloudflare processes connection and request data in order to proxy, cache, filter, and protect the Service, and it maintains its own logs and traffic statistics under its own policies. The origin server itself is a machine we operate and has no publicly reachable inbound port. - The application may log usernames, email addresses, or account identifiers in error and security messages.

Browser storage - A temporary sessionStorage entry named pizzacube_publish_skin may contain the skin image data, title, and arm model while you move from the editor to the publish page. It is browser-side storage for the current tab and is not an account record.

Information obtained from third-party services

When you request a player skin, we send the requested Minecraft username to Mojang's public APIs and retrieve the player's public profile and skin data. We store the canonical username, Mojang UUID, skin image, arm model, source format, and the time it was fetched. We only contact Mojang when the requested player is not already stored, or when a stored entry is refreshed automatically after 30 days or on explicit request.
If Turnstile is enabled, our server sends the Turnstile response token and your IP address to Cloudflare for verification. Cloudflare also processes browser and device signals when the Turnstile widget loads.
Google Fonts receives requests for font files when pages load from fonts.googleapis.com and fonts.gstatic.com.
Resend, our transactional email provider, receives the recipient email address, the sender address, the subject, the message content including any verification or password-reset link, and delivery metadata for the account emails we send.
Cloudflare Email Routing receives messages sent to [email protected] and forwards them to a Microsoft Outlook mailbox, so Cloudflare and Microsoft receive the sender address, message headers, body, and attachments of mail you send to that address.

Information we do not request

The application does not ask for your real name, street address, telephone number, payment card details, government identification number, precise geolocation, or biometric identifiers. You should not post this information in public areas. If you include personal information in a public profile, skin title, tag, or comment, it may become publicly available.

2. How We Use Information

We use information to:

Create and maintain accounts.
Verify email addresses and allow login.
Authenticate users, protect accounts, and manage sessions.
Send password-reset and password-change notices.
Store, process, display, and organize drafts and published skins.
Generate previews and convert uploaded images into the 64×64 PNG format used by the Service.
Display public profiles, published skins, tags, comments, replies, likes, and favorites.
Create and display in-site notifications.
Allow users to like, favorite, download, and open published skins in the editor.
Provide player-skin lookup and caching through Mojang's APIs.
Enforce rate limits, detect suspicious login attempts, and prevent spam, abuse, and security incidents.
Respond to support, privacy, copyright, and moderation requests.
Maintain, troubleshoot, and improve the Service.
Comply with legal obligations and protect the rights, safety, and security of PizzaCube, our users, and others.

We do not currently sell personal information in exchange for money, use targeted advertising, or run third-party analytics or cross-site behavioral tracking.

3. Publicly Available Information

PizzaCube is a community website. Some information is intended to be public.

The following may be visible to anyone who visits the Service:

Your username.
Your profile picture.
Your About Me text.
Your published skins, including the skin image, title, tags, arm model, upload date, and like count.
Your comments and replies, including the comment text, your username, profile picture, and timestamps.
Your Favorites tab, if you have left it public. Favorites are public by default and can be made private in your profile settings.
Public profile statistics, such as the number of published skins.

The following are not displayed publicly by the Service:

Your email address.
Your password or password hash.
Your login IP history.
Your private drafts.
Your notifications.
Your Favorites tab when it is set to private.

Published skins are downloadable and can be opened in the editor. Comments and profile information may be copied, indexed, or archived by other people, search engines, or third parties. Deleting content from PizzaCube does not guarantee that every external copy will disappear.

Do not publish information you want to keep private.

4. Third-Party Services

We use the following third-party services to operate PizzaCube.

Cloudflare Turnstile

Turnstile is an optional CAPTCHA and bot-detection service. When it is enabled, it may appear on registration, password-reset, resend-verification, and suspicious-login pages. Our server sends the Turnstile response token and your IP address to Cloudflare's verification endpoint. Cloudflare also processes client-side signals such as IP address, TLS fingerprint, user-agent header, site key, and origin. Cloudflare may use cookies or similar technology as part of bot detection. Cloudflare acts as a service provider for these checks, but its processing is also governed by its own privacy notice and Turnstile Privacy Addendum.

Google Fonts

Pages load typefaces from Google Fonts at fonts.googleapis.com and fonts.gstatic.com. Google receives the request for those font files, which may include your IP address, browser information, and referring origin. Some HTML emails also reference Google Fonts; if your email client loads remote content, it may request fonts from Google. We do not use Google Fonts for analytics or advertising. Google's handling of that information is governed by Google's privacy policy.

Mojang and Microsoft

When you search for or open a Minecraft player's skin, we query Mojang's public APIs and retrieve the player's public profile and skin. The request comes from our server, not directly from your browser. We store the public username, UUID, skin image, arm model, and the time it was fetched. Once a player's skin is stored we serve it from our own database instead of contacting Mojang again, except when a stored entry is refreshed automatically after 30 days or when a refresh is explicitly requested. Mojang and Microsoft are not affiliated with PizzaCube and do not operate or endorse the Service. Their handling of information is governed by their own policies.

Email delivery (Resend)

We send account-related email through Resend, a transactional email delivery service, using its SMTP relay. Resend receives the recipient's email address, the sender address we use (such as [email protected]), the subject, the message content including any verification or password-reset link, and delivery metadata such as message identifiers, timestamps, sending-domain information, and information about whether a message was delivered, bounced, or reported as spam. We currently send transactional account emails only, not marketing or promotional email. Resend processes this information as our service provider under its own privacy policy and our agreement with it. If a message cannot be delivered, you may be unable to verify your account, log in, or reset your password, and we do not currently offer an alternative delivery channel.

Email forwarding and the contact mailbox (Cloudflare Email Routing and Microsoft Outlook)

[email protected] is not a mailbox on a server we run. Inbound mail to that address is accepted by Cloudflare Email Routing, filtered, and forwarded to a Microsoft Outlook mailbox that we read and manage. Cloudflare processes the message envelope, headers, and content in order to receive, filter, and forward it, and Microsoft stores the forwarded message in the Outlook mailbox. Messages you send to [email protected] are therefore handled by Cloudflare and Microsoft as well as by us, under their own privacy policies. We keep that correspondence for as long as we need it to handle your request and to keep records of privacy, copyright, abuse, and moderation matters. Do not send your password, verification or password-reset links, or other secrets by email; we will never ask you for them.

Cloudflare network, Cloudflare Tunnel, and hosting

PizzaCube.net is served from a physical server that we own and operate ourselves in a private location, not from a third-party cloud hosting or colocation provider. Our application data — accounts, password hashes, skins, comments, tags, notifications, likes, and favorites — is stored in SQLite database files on that server, and we do not use a third-party managed database or object-storage service.

Public traffic does not connect to that server directly. Requests to PizzaCube.net pass through Cloudflare's network and are delivered to the server over an outbound Cloudflare Tunnel connection, and the server does not accept direct inbound connections from the public internet. Cloudflare therefore acts as our reverse proxy, TLS endpoint, cache, and network-security provider. In that role Cloudflare processes connection and request data such as IP addresses, requested URLs and query strings, headers, timestamps, response codes, and error information, and may block, challenge, cache, or rate-limit requests. Cloudflare's handling of that data is governed by Cloudflare's own terms and privacy policy. Because the origin server is our own equipment, physical control of the hardware, operating-system access controls, and filesystem permissions are the primary safeguards for stored data.

International transfers

Our service providers — Cloudflare, Resend, Google, Microsoft, and Mojang — are based in and process data in the United States and other countries. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from those where you live. Where required, we and our providers rely on the transfer safeguards those providers make available, such as standard contractual clauses.

No advertising or analytics providers

Aside from ordinary request logging and the standard network, cache, and security statistics that Cloudflare provides to us for our own domain, the Service does not currently include third-party analytics, advertising networks, social media tracking pixels, or data brokers. If that changes, we will update this policy before or when the change takes effect.

Legal, safety, and business disclosures

We may disclose information if we believe in good faith that disclosure is required by law, legal process, or a government request; is necessary to investigate fraud, abuse, security incidents, or violations of our Terms; is necessary to protect the rights, safety, or property of PizzaCube, our users, or the public; or is necessary in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law. We do not sell personal information as part of our ordinary operations.

5. Cookies and Similar Technologies

PizzaCube uses a small number of cookies and browser-side storage features.

First-party cookies

Name	Purpose	Typical lifetime	Settings
`pizzacube_session`	Stores your login session, CSRF token, flash messages, and related session data.	Configured by the operator; the default is 12 hours.	HttpOnly; SameSite=Lax; Secure outside development.
`pizzacube_remember`	Keeps you signed in on a device when you select "Remember me on this device."	Up to 14 days.	HttpOnly; SameSite=Lax; Secure outside development.

The CSRF token used to protect forms and API requests is stored as part of your session rather than as a separate cookie.

Browser storage

sessionStorage may store pizzacube_publish_skin, containing the skin image data, title, and arm model while you move between the editor and publish page. It is cleared when the browser tab or session ends and is not used for tracking.

Third-party storage

Cloudflare Turnstile may use cookies or similar technology when enabled, as described in Cloudflare's Turnstile Privacy Addendum.
Google Fonts requests are made directly to Google. We do not control any cookies or storage that Google may use in connection with those requests.
Because all requests to PizzaCube.net pass through Cloudflare, Cloudflare may set short-lived security cookies (for example, __cf_bm) and use similar technologies for bot management, rate limiting, and protection of the Service. These are set by Cloudflare rather than by us and are governed by Cloudflare's cookie and privacy documentation.

We do not use first-party advertising cookies, cross-site tracking cookies, or third-party analytics cookies. If you disable cookies, you may not be able to log in or use account features.

6. Data Retention

We keep information for as long as we need it for the purposes described in this policy, unless a longer period is required or permitted by law.

Category	Retention
Account, email, password hash, profile, and Favorites privacy setting	Until you delete your account, except for the anonymized account record described below.
Login timestamps, current and previous login IP addresses, and login count	Until the values are replaced by a later login or your account is deleted.
Private drafts	Until you delete them or your account is deleted. Private drafts are always removed during account deletion.
Published skins and comments	Until you or an administrator delete them, or until your account deletion choice removes them. Retained content may remain under "Deleted User."
Likes and favorites	Until you remove them, the related skin is deleted, or your account is deleted.
Notifications	Until the recipient deletes their account or the associated comment or skin is deleted. Read status is stored until the notification is removed.
Consumed verification and password-reset token records	Until the associated account is deleted; the application does not currently run a separate automatic purge job for these records. Only token hashes, not usable tokens, are stored.
Shared tags and tag usage counts	Tags are global records and are not deleted merely because an account is deleted. Usage counts are not automatically decremented when a skin is removed.
Mojang player-skin cache	Public Mojang profile and skin data is cached in the player-skin database. There is no limit on the number of cached players and entries are not automatically deleted. A cached player is served from our database instead of contacting Mojang. Entries older than 30 days are refreshed in the background, which replaces the stored skin data with the player's current skin.
Failed-login tracker	Up to 10 minutes in process memory, or until a successful login clears the record.
Rate-limit counters	For the duration of the applicable rate-limit window and the backend's retention settings.
Server access and error logs	Written to the journal or log files on our own server under our system logging configuration. We do not currently enforce an automatic log-retention period, so logs may persist until they are rotated, cleared, or the server is rebuilt.
Database backups	Backups may be created during maintenance and stored on the same server or another device under our control. They may be retained until replaced or deleted. We do not currently run an automatic backup-deletion schedule.
Support, privacy, copyright, abuse, and moderation correspondence sent to [email protected]	In the forwarded Outlook mailbox, and in any related account or moderation records, until the matter is resolved and any record-keeping need has ended.
Resend, Cloudflare (including Email Routing and Tunnel), Microsoft (contact mailbox), Google Fonts, and Mojang	According to each provider's own retention practices and our agreements with them, where applicable.

Account deletion

You can delete your account from your profile settings while logged in. Deletion requires your password and confirmation that you understand it cannot be undone. You can choose what happens to your published content:

Keep my published skins and comments - Your account is anonymized. - Your username and email address are released and may be registered again by someone else. - Your published skins and comments remain available under the name "Deleted User." - The internal account record and identifier may remain so that retained content can still be linked to an author record, but the record no longer contains your username, email address, password, profile picture, bio, login IP history, or active login credentials.

Keep my published skins, but delete my comments - Your published skins remain under "Deleted User." - Your comments are removed. If one of your top-level comments has replies from other users, the comment may remain as a "This comment was deleted." placeholder so the discussion thread stays intact. The placeholder retains an internal link to the deleted account record.

Delete my published skins and comments too - Your published skins are removed. - Comment threads attached to those skins are removed, along with related notifications, likes, and favorites. - Your own comments on other users' skins are removed. As with the option above, a top-level comment with replies may remain as a "This comment was deleted." placeholder so the replies are not orphaned. - A "This comment was deleted." placeholder is removed when its last reply is deleted.

In all three cases, we also remove your private drafts, your own likes and favorites (including likes and favorites of Mojang player skins), your notification inbox, your role links, and consumed token records. We clear your password, email, username, profile picture, bio, About Me text, login IP history, login count, and active status. Your session is invalidated. Notifications that other users received about your comments or skins may remain in their inboxes; after deletion, those notifications refer to you as "Deleted User" or show a deleted-comment excerpt.

Retained public content may still be copied or cached by third parties, search engines, or other users. Backups created before deletion may continue to contain the deleted information until those backups are replaced or deleted. We cannot guarantee immediate deletion from every backup or external copy.

7. Data Security

We use safeguards that include:

Argon2id password hashing. Plaintext passwords are not stored.
Email verification before login and before publishing or editing account features that require a verified account.
Single-use, expiring email verification and password-reset tokens, stored as hashes after use.
Session regeneration at login to reduce session-fixation risk.
Password changes and password resets that invalidate existing sessions.
CSRF protection for forms and state-changing API requests.
HTTP security headers, including a Content Security Policy, HSTS in production, frame protection, and a restrictive referrer policy.
Rate limiting on authentication, account, publishing, commenting, and other endpoints.
Optional Cloudflare Turnstile CAPTCHA and failed-login tracking.
Hosting the origin server on hardware we control with no publicly reachable inbound port; traffic arrives through an outbound Cloudflare Tunnel, which limits direct exposure of the server to attack.
Input validation, image normalization, upload-size limits, and outbound host allowlists.
Access controls that limit drafts, notifications, and account settings to the authenticated owner.

No method of transmission or storage is completely secure. We cannot guarantee that the Service will never be compromised, that data will never be lost, or that every stored file is encrypted. The application stores data in SQLite databases on a server we operate ourselves and relies on physical control of that hardware, operating-system access controls, and filesystem permissions for part of its protection; the application does not add a separate layer of database encryption. Because we run the server ourselves rather than relying on a managed platform, we are also responsible for applying operating-system, network, and application updates, and a delay in doing so would increase risk. If we become aware of a security incident, we will investigate and provide notifications where required by applicable law.

8. Children's Privacy

PizzaCube is not intended for children under 13. Only users who are 13 years old or older may create an account. If we learn that an account was created by someone who does not meet this age requirement, we may restrict access and/or remove the account and associated content.

If you are a parent or guardian and believe that a child under 13 has created an account, contact us at [email protected] so that we can review the account and remove it as appropriate.

9. Your Privacy Rights and Choices

You can use account settings to:

Update your About Me text and profile picture.
Make your Favorites tab private or public.
Change your password.
Delete your account and choose what happens to your published content.

You can request access to, correction of, or deletion of personal information by contacting us at [email protected]. We may need to verify your identity before acting on a request. Some information may be retained where necessary to preserve content relationships, comply with law, resolve disputes, prevent abuse, or maintain backups.

If you are an Indiana resident and the Indiana Consumer Data Protection Act applies to PizzaCube, you may have rights to confirm whether we process your personal data, obtain access to or a copy of certain data, correct inaccuracies, request deletion, obtain a portable copy, opt out of targeted advertising, the sale of personal data, or profiling, appeal a denied request, and exercise your rights without discrimination. PizzaCube does not currently sell personal data in exchange for money or use targeted advertising or profiling for those purposes. To exercise a right, contact us at [email protected]. If we deny a request, we will provide appeal information where required.

Other U.S. state privacy laws may provide similar rights if PizzaCube meets their applicability thresholds and other requirements. We do not currently provide a self-service data-export tool; access and correction requests are handled manually.

If you believe a child under 13 has provided personal information, see Section 8.

10. Changes to This Privacy Policy

We may update this policy as the Service changes, as we add features, or as legal requirements evolve. The updated policy will be posted on PizzaCube.net with a new "Last updated" date and, where appropriate, a new effective date. If a change is material, we may also notify account holders by email or by a notice on the Service. We do not currently operate a separate automated policy-change notification system.

Your continued use of the Service after an updated policy takes effect means you acknowledge the updated policy.

11. Contact

For privacy questions, requests, or concerns, contact:

PizzaCube Privacy Contact
[email protected]

Please include "Privacy Request" in the subject line. If you are a parent or guardian contacting us about a child, please include "Child Privacy" in the subject line.

This address is not hosted on our own mail server. Mail sent to it is received by Cloudflare Email Routing and forwarded to a Microsoft Outlook mailbox (see Section 4), so those providers also handle your message.