Privacy Policy
Effective October 20, 2026
1. Who we are
BedrockBuddy is operated by InPvP Inc, a Delaware corporation at 8 The Green, STE B, Dover, Delaware 19901, USA (“we”, “us”). This policy covers bedrockbuddy.com and the BedrockBuddy apps for iOS and Android. InPvP Inc is the controller of the personal data described here.
Questions: [email protected] or bedrockbuddy.com/support. We do not sell your personal data.
2. What we collect
Sign-in
- Xbox: your Xbox user ID (XUID), gamertag and the age group Microsoft gives us (Adult, Teen or Child). On the website we also ask Microsoft for your email address and name, and Microsoft gives us a refresh token. The app asks for your Xbox identity only: no email and no refresh token.
- Sign in with Apple (iOS app and website): your Apple user ID, the email Apple shares (which can be a private relay address), your first name if you share it, and an encrypted Apple token we keep only so we can revoke your Apple sign-in when you delete your account. Signing in with the same Apple ID in the app and on the website opens the same account.
- Email sign-in (app and website): your email address and the 6-digit sign-in codes we email you. We keep only a one-way hash of each code; a code expires after 10 minutes and works once.
- Android app: offers Xbox and email sign-in. BedrockBuddy does not offer Google sign-in.
- Accounts without Xbox: an Apple or email account has no gamertag and no public profile until you link your Xbox account. Linking moves its saved things and Bits to your Xbox account.
- Sessions: a sign-in token for the website or app.
Player pages, skins and previous gamertags
We only fetch your skin and gamertag (both public data) when you sign in and agree to our Terms of Service. No data is taken from the in-game InPvP servers. Player pages exist only for players who have signed in to inpvp.net or bedrockbuddy.com. Players who have never signed in are not shown or counted as skin wearers. If you sign in to bedrockbuddy.com, your page also shows the Xbox gamertags you have used while signed in: each time you sign in, we check your current gamertag with Xbox and record a change with its date. This history is public by default.
- To hide it, sign in and go to Settings > Privacy, where you choose who sees your skins, previous gamertags and activity.
- Players under 18 start with everything private, and can share with friends at most.
- Anyone can ask us to hide a player's history through support, even without an account.
Things you make and post
- Generations: the prompts you write, the skins you start from, and the skins, builds and avatars made for you, with how many you made each day and week.
- Uploads: addons, maps, resource packs and skin packs, with their icons, screenshots, descriptions and versions; seed screenshots; profile bio and screenshots. We remove image metadata (EXIF, including location) from upload icons, gallery and description images. Other images are stored as you sent them, so remove location data first if your device adds it.
- Community: who you follow, likes, comments, reviews, video links, wishlists, blocks and reports.
- Messages: messages and images you send other players (section 3).
- Support and creator applications: tickets and attachments you send us, and if you apply to the creator migration program: your creator name, Discord username, optional email, profile links, download totals, notes and a one-way hash of your IP address.
Minecraft Marketplace (website, Xbox sign-in)
When you sign in with Xbox on the website, we read which Marketplace items and subscriptions your account owns and its Minecoin balance, and check again about once a day for up to 90 days after your last sign-in. We never read this for accounts Microsoft lists as under 18. We also record the Marketplace pages and items you view, share or press “Get” on, and your searches. You can stop it by removing our access in your Microsoft account app permissions.
Bits and purchases
- Wallet: your Bits balance and history: weekly Bits, packs bought, what you spent Bits on, and refunds.
- Website purchases: are processed by PayNow. We receive the order and its status, not your full card details.
- App purchases: are made with Apple In-App Purchase in the iOS app and Google Play Billing in the Android app, and managed through RevenueCat. We receive your subscription status, trial and renewal dates and purchases, never your payment details.
Device, notifications and usage
- App: a random ID created when the app is installed (for fair-use limits), your app version and platform (iOS or Android), your push notification token and notification settings.
- No app tracking SDKs: the iOS and Android apps contain no third-party analytics, crash reporting or advertising SDKs, and do not read your device's advertising ID (Apple IDFA or Google advertising ID).
- Website notifications: if you turn them on, your browser's push subscription.
- Email updates: if you opt in, we use the email address from your Microsoft account to send you news. You can opt out at any time.
- Our own analytics: pages visited, time on page, referring site, campaign tags, country (from your IP address), device type, screen size, language and whether you are signed in. We do not store your IP address or full browser string. A random visitor ID is kept in your browser only if you allow analytics storage.
- Ad click attribution (website): if you arrive from one of our Google or YouTube ads, a first-party cookie keeps the ad click ID and campaign tags for 90 days, and our server tells Google when that visit leads to a sign-up, download or purchase, so we can measure our ads. We skip this for accounts under 13, when your browser sends Global Privacy Control, and where consent is required but not given.
- Google Analytics and Inspectlet (website): Google Analytics measures usage. Inspectlet records how pages are used (clicks, scrolls and page changes) so we can find problems.
- Security: one-way hashes of IP addresses, timestamps and request details, to stop abuse and enforce bans.
In the app, seed and ore finding reads your world file on your device; the world is not uploaded. Items you save offline in the app stay on your device.
3. Messages and safety checks
- Who can message: only players Microsoft lists as 13 or older, with a linked Xbox account. Child accounts, accounts with no age on file and accounts without Xbox cannot send or receive messages.
- Requests: players who follow each other can message directly. Anyone else first sends a request with one message, which can be accepted, declined or blocked. After a decline, a new request cannot be sent for 30 days.
- Every message: passes a word filter and a rate limit, and links are limited to BedrockBuddy and a few partner sites.
- Safety checks: when a conversation includes a player who is not a known adult, each message is checked before it is delivered: first by our own rules, then by Anthropic's machine learning models, which see the message and up to six earlier messages from the conversation. If the check cannot run, the message is not sent. Messages that fail are held and sent to our staff for review, and repeat offenders are muted.
- Images: every image sent in a message is checked by Google Cloud Vision before the other player sees it, and images that fail are deleted.
- Staff access: staff read messages only when they are reported or held by a safety check, together with the messages around them.
4. How we use it
- To run BedrockBuddy: your account, player pages, catalogs, downloads, generators, messages, Bits and subscriptions.
- To make what you ask the generators for, keep generation fair with daily and weekly limits, and improve our models, including by training them on prompts and results.
- To keep players safe: check uploads, images, generated content and messages; apply age-based protections; handle reports.
- To prevent fraud, cheating and abuse, and to enforce our Terms and Acceptable Use Policy.
- To answer support requests and send the notifications and emails you choose.
- To understand how BedrockBuddy is used and fix problems.
- To meet legal obligations.
Legal bases (EEA and UK): performing our contract with you (running your account and the features you use), our legitimate interests (safety, security, improving BedrockBuddy and measuring usage), your consent (optional email, analytics storage, personalised ads, notifications), and legal obligations.
6. Ads
- Website: Aditude and its partners show ads, including a short video while some downloads start and a short ad before each generation on a free account. They may use cookies, device identifiers, your IP address and ad interactions to show and measure ads. Personalised ads run only where you allow them in our consent settings.
- Younger players: accounts Microsoft lists as under 18 skip the video ad before downloads and the ad before generations. Other ads on the website can still appear for them.
- Best Buddy: subscribers see no ads on the website, and the ad script does not load for them.
- iOS and Android apps: show no ads, contain no ad SDKs, do not use your device's advertising ID and do not track you across other companies' apps or websites.
- Opting out: use the Privacy Choices link in the footer, or the DAA and NAI opt-out tools.
8. Children and teens
BedrockBuddy is for a general audience, and the iOS and Android apps are rated for ages 9 and up. Players under 13 can only sign in with Xbox through a Microsoft child account that a parent has set up and approved in Microsoft Family Safety; Microsoft refuses the sign-in otherwise. We do not ask for a date of birth. We use the age group Microsoft gives us (Adult, Teen or Child), and accounts that sign in with Apple or email have no age on file and cannot use messages or see mature skins.
What we collect from children and why
- Account: Xbox user ID, gamertag and age group (or the email address for email sign-in), to run the account and apply the protections below.
- What they make and post: prompts, generated skins, builds and avatars, uploads, follows and likes, to provide those features. Players under 13 cannot post comments, guestbook notes or reviews.
- Purchases: Bits balance, purchase and subscription records from Apple, Google Play, PayNow and RevenueCat, to deliver what was bought. Store purchases need the store account, which a parent can set to require approval.
- Device: a random install ID (stored by our servers only as a one-way hash), app version, platform and push token, for fair-use limits and notifications.
- Safety: reports, safety check results and one-way hashes of IP addresses, to keep players safe and stop abuse.
The apps do not ask for location, contacts, camera or microphone access. Photos are shared only when a player picks one to attach to a support request.
No ads or tracking in the apps
- The iOS and Android apps show no ads and contain no advertising, third-party analytics or crash reporting SDKs.
- The apps do not read the advertising ID and do not track players across other companies' apps or websites. The bedrockbuddy.com pages shown inside the apps do not load Google Analytics or Inspectlet.
- We do not sell children's data, and we never read Minecraft Marketplace inventory for players under 18.
Messages, comments and other players
- Messages: only between linked Xbox accounts Microsoft lists as 13 or older. Child accounts, accounts with no age on file and accounts without Xbox cannot send or receive them. How they are limited and checked is in section 3.
- Comments, guestbook notes and reviews: need a linked Xbox account and are public on the page they are posted on. Anyone can read them, but only accounts Microsoft lists as 13 or older can post them. Players under 13 and accounts with no age on file can read but not post. Before posting, every comment, note and review passes a word filter, a limit on links and a rate limit; they are not reviewed by a person first. Players can report each comment, reply, note and review to our staff. One reported by 3 or more players is hidden until staff review it. A project's creator and our staff can hide comments, and players can block other players.
- Build chats: are private between the player and the generator. Other players cannot see or join them.
- Players under 18: start with private settings and can share with friends at most, never see mature skins, and get notifications about messages and replies without the message text.
Parents' rights
A parent or guardian can review the personal information we hold about their child, ask us to delete it, and ask us to stop collecting more, by emailing [email protected] or opening a support ticket. We will check that the request comes from the parent or the account holder before acting, and reply within 30 days. The account can also be deleted at once in the app under Me > Delete account (section 10), and a parent can remove BedrockBuddy's access to a Microsoft child account in Microsoft Family Safety.
COPPA: we do not knowingly collect personal information from children under 13 beyond what is needed for them to use BedrockBuddy. If you believe a child under 13 is using BedrockBuddy without a parent's consent, contact us and we will delete the account.
9. How long we keep it
- Account, generations, uploads, messages, wallet and community activity: until you delete them or your account.
- Published content: stays in the catalog after you delete your account, without your name, unless you ask us to remove it.
- Prompts and results used to improve our models: may be kept after you delete your account, without your account details.
- Skin history and previous gamertags: kept for player pages until hidden by the player or on request.
- Sessions: website Xbox sessions end after 7 days; app sessions and website Apple or email sessions after 90 days without use. Microsoft refresh tokens are kept for at most 90 days after your last sign-in. Email sign-in codes are deleted when used or after 10 minutes.
- Push: app push tokens are deleted when they stop working or you delete your account; website push subscriptions expire after 90 days.
- Analytics: per-visit records are deleted after 90 days; visitor IDs (with consent) after 400 days without a visit; after that only totals are kept.
- Marketplace: records of each inventory check are deleted after 90 days, and Marketplace activity linked to your account after 180 days.
- Reports, support tickets, safety records and bans: kept as long as needed to keep players safe, handle disputes and meet legal obligations.
- Purchase records: kept as tax and accounting law requires.
10. Deleting your account
- In the app: Me > Delete account.
- On the website: sign in and go to bedrockbuddy.com/delete-account.
Deleting takes effect immediately. It removes your account, sign-in tokens, push tokens and subscription record, and the generation history, private skins and Bits of an app account, and revokes your Apple sign-in. Published content stays without your name. Your bedrockbuddy.com profile (bio, screenshots, follows) and anything else we hold are removed when you send a Delete my account ticket; we handle these within 30 days.
Deleting does not cancel a Best Buddy subscription. Cancel it in your device's Settings > your name > Subscriptions on iOS, in the Google Play Store app under Payments and subscriptions > Subscriptions on Android, or with Manage on bedrockbuddy.com/bits for a website subscription.
11. Your rights
Depending on where you live, you can ask us to:
- give you a copy of your data, or send it to you in a machine-readable format;
- correct or delete it;
- restrict or object to how we use it, including for our legitimate interests;
- withdraw consent at any time, without affecting what was done before.
California (CCPA/CPRA) and other US states: you can know what we collect, delete it, correct it, and opt out of the “sale” or “sharing” of personal data for ads using Privacy Choices in the footer. We do not sell personal data for money, and we will not treat you differently for using these rights.
To use any of these rights, email [email protected] or open a support ticket. We may need to confirm it is your account. In the EEA or UK you can also complain to your local data protection authority.
12. Security and transfers
Data is encrypted in transit. Microsoft and Apple tokens are encrypted at rest and used only by our servers. InPvP Inc is based in the United States, and our providers may process data in the United States and other countries. Where data from the EEA, UK or Switzerland is transferred, we rely on safeguards such as the European Commission's standard contractual clauses.
13. Changes
We may update this policy. The effective date at the top shows the latest version, and we will tell you on BedrockBuddy or in the app before material changes take effect.
14. Contact
InPvP Inc, 8 The Green, STE B, Dover, Delaware 19901, USA. Email [email protected], or open a ticket at bedrockbuddy.com/support.
See also: Privacy Policy · Terms of Service · Acceptable Use Policy
