Last updated October 12, 2026
Privacy Policy
Modboxd (“we”, “us”) is a place to log the Minecraft modpacks you’ve played, rate and review them, and keep lists. This page explains what we collect, what we don’t, and what you can do about it.
The short version
- You sign in with Google. We learn which Google account you are and nothing else: not your email address, name or photo.
- We never see or store a password.
- What you put on Modboxd (your profile, logs, ratings, reviews and lists) is public.
- No advertising, no analytics, no tracking cookies, and we don’t sell or share your data.
What we collect
From Google, when you sign in
When you choose “Continue with Google”, we ask Google for one thing: confirmation of which Google account is signing in. Google answers with an identifier, a long number that is unique to your account. We store that identifier so we can recognise you next time.
We request only Google’s openid permission. We do not receive, and so cannot store, your email address,
your name, your profile picture, your contacts or anything else in your Google account. We never see your Google password.
How we use it: only to sign you in to your own Modboxd account. Who we share it with: nobody. It is not shown to other members, not sold, and not used for anything else.
What you add yourself
- The username you pick, and an optional display name and bio.
- The packs you log, with any status, completion, hours, dates and hardcore flag you add.
- Your ratings, reviews, lists, favourites, likes, and who you follow.
Cookies
We set two cookies, both strictly necessary for signing in. Neither is used for tracking, and scripts on the page cannot read them.
| Name | Purpose | Lasts |
|---|---|---|
mbx_session | Keeps you signed in | 30 days, or until you sign out |
mbx_oauth | Links your return from Google to the sign-in you started | 10 minutes |
We do not use your browser’s local storage, and there are no third-party scripts on the site. Cloudflare, which protects the site (see below), may set a security cookie of its own to tell people from automated traffic.
Technical data
Like every website, our server sees your IP address in order to send you pages. We use it to limit abusive request rates; it is held in memory for a few minutes and is not saved to our database or linked to your account. Our server keeps no log of the pages you request. Requests reach us through Cloudflare (see below), which keeps its own records.
What other people can see
Modboxd is a public site. Anyone, signed in or not, can see your username, display name, bio, favourites, the packs you’ve logged and what you recorded about them, your backlog, your ratings, reviews and lists, and who you follow and are followed by.
There is no public stream of members’ activity. When you log something, the people who follow you can see it on their own home page. Which reviews and lists you have liked is not shown to others; only the totals are.
Don’t put anything in your profile or reviews that you wouldn’t want to be public.
Other services involved
- Cloudflare sits between you and Modboxd. It provides our domain, the encrypted connection and protection against attacks, so every request to the site passes through it, and it sees your IP address and which pages you ask for. Cloudflare’s privacy policy covers what it does with that. Email sent to our contact address is also forwarded to us by Cloudflare.
- Amazon Web Services hosts our server and database, and stores the server’s backups.
- Google handles sign-in. When you use it, Google knows you signed in to Modboxd, under Google’s own privacy policy. You can withdraw Modboxd’s access at any time in your Google Account settings, under third-party connections.
- CurseForge supplies modpack information. When you search or browse, our server asks CurseForge for matching packs. It sends your search words but nothing that identifies you.
- Images. Pack artwork and screenshots are loaded by your browser straight from CurseForge’s image servers, and pictures inside a pack’s description may come from other hosts its author chose. As with any image on the web, those servers see your IP address. We tell your browser not to say which page it came from.
- Links to CurseForge, and to authors’ pages lead to sites we don’t control.
How long we keep things
- Your account and what you’ve added: until you remove it or delete your account.
- Sign-in sessions: 30 days from when you signed in. Unfinished sign-in attempts: 10 minutes.
- Backups: a snapshot of the server is taken every day, and each one is kept for seven days.
Your choices
- You can change your display name, bio and favourites, edit or remove any log, rating or review, and edit or delete your lists at any time.
- Deleting your account. Go to Settings and choose “Delete account”. Your profile, logs, ratings, reviews, lists, likes and follows are removed straight away, along with our record of which Google account you signed in with. It cannot be undone. Copies in backups, if any, are gone when those backups expire.
- Depending on where you live, you may also have the right to ask for a copy of your data, to have it corrected, or to complain to your data protection authority. Write to info@modboxd.com and we will help.
Why we are allowed to do this
Where data protection law asks for a legal basis: we handle your account and content to provide the service you signed up for, and we handle IP addresses briefly because we have a legitimate interest in keeping the site available and safe.
Children
Modboxd is not meant for children under 13, or under the age at which you can agree to this yourself in your country if that is higher. If you are younger than that, please don’t create an account. If we learn that we hold an account for a child under that age, we will delete it.
Where your data is kept
Our server is in the United States (Ohio), with Amazon Web Services. If you use Modboxd from elsewhere, your data is transferred there.
Security
We hold very little, on purpose. Sign-in sessions are stored only in hashed form, and the site is served over an encrypted connection. No system is perfectly secure, so we cannot promise that nothing will ever go wrong.
Changes to this policy
If we change what we collect or how we use it, we will update this page and its date before the change takes effect.
Contact
Modboxd, info@modboxd.com.