Privacy Policy

Last updated: 2026-05-15.

CobbleStudio is a small alpha-stage tool by Christopher Boe Jensen. This policy explains exactly what we collect, why, and how to make us forget you. We collect very little.

What we collect

When you sign in we store:

  • Your email address. Used to send sign-in links and account-related notices. We don't email you marketing.
  • Your Discord user ID (only if you sign in with Discord). Identifies your account across sessions.
  • A session cookie so you stay signed in. HTTP-only, secure, expires after 1 week of inactivity.

When you build:

  • Your projects. The voxel data, the materials you pick, and the build steps you take — stored so they're there when you come back. Tied to your account.

When you use the app:

  • Anonymous usage events via PostHog. Which tools you click, how often you undo, how long sessions are. Helps us figure out what to keep, cut, or improve.
  • Session recordings (optional, opt-in). If you opt in at the consent screen or in Settings, PostHog records your screen for debugging. Passwords and email inputs are masked. You can opt out anytime.
  • Errors. If the app crashes, we log the stack trace and the URL you were on. No personal data goes into error logs.

What we don't collect

  • Marketing tracking cookies.
  • Your IP address beyond what Vercel and Cloudflare see in normal web hosting logs (kept ~30 days for security).
  • Your Minecraft account information. CobbleStudio doesn't talk to your Minecraft client.
  • Anything not listed above.

Who we share with

To run the service we send data to:

  • Supabase — our database + auth provider. Stores your account and projects.
  • Resend — sends our auth emails. Sees your email address and the email body.
  • PostHog — receives usage events and (if opted in) session recordings.
  • Vercel — hosts the app. Sees your IP + browser headers per normal web hosting.
  • Cloudflare — our DNS + domain registrar.
  • Discord — only if you sign in with Discord OAuth, in which case Discord sees the fact that you signed in.

We do not sell your data. We do not share it with advertisers.

Your rights

You can:

  • Download everything we have about you. Settings → "Download my data." Returns a JSON file with your account info, projects, and consent record. PostHog behavioral events are not yet in the automated export — email us and we'll send them manually.
  • Delete your account. Settings → "Delete my account." Immediate and irreversible. Cascades to all your projects and feedback.
  • Opt out of session replay anytime. Settings → toggle. Stops immediately.
  • Update your email. Currently you'd need to email us; in-app email change is on the roadmap.

Retention

  • Account + projects: kept until you delete your account.
  • Auth logs (sign-in attempts, failures): ~90 days by Supabase.
  • PostHog events: ~1 year on the free tier we use.
  • Session recordings: ~30 days on the free tier.
  • Hosting logs (Vercel, Cloudflare): ~30 days.

Children

CobbleStudio isn't designed for users under 13. If you're under 13, don't sign up. We don't knowingly collect data from kids.

EU users

You have rights under GDPR. The list above covers them: access (download), deletion (delete account), rectification (email us), portability (JSON download), objection (session-replay toggle). For unresolved complaints, you can contact your local data protection authority.

Changes

We update this policy when our data practices change. The "Last updated" date at the top reflects the latest change. Material changes get emailed to you.

Contact

Questions about this policy: cbj@optoceutics.com.

Unofficial. Not affiliated with Mojang AB or Microsoft Corporation. Block textures © Mojang AB / Microsoft, used for in-tool preview only.

← Back to sign in