Privacy policy

Draft (GDPR) — to be reviewed before public launch. Last updated 2026-10-07.

Controller

The operator of NextCraft (Austria, EU). Contact details: see the imprint.

What we process and why

• Conversions in your browser (Model → World, Image → art): files stay on your device. Nothing is uploaded unless you press “Convert on server”, “Copy import code” or use Photo → 3D.
• Uploads and results on our servers: to perform the conversion you asked for (Art. 6(1)(b) GDPR). Deleted automatically after 7 days. Shared builds (import codes) are kept for 7 days unless you publish them in the gallery.
• Photo → 3D: the photo is sent to our AI provider (Tripo or Meshy) as a processor under a data processing agreement (Art. 28 GDPR).
• Reports: the content you report and a salted hash of your IP address, to handle abuse (Art. 6(1)(f)).
• Accounts (optional): e-mail address, and your Minecraft name/UUID if you link a Microsoft account, to provide the account features.
• Server logs: IP addresses for security, kept up to 14 days (Art. 6(1)(f)).

No tracking

We use no advertising or analytics cookies. A session cookie is set only when you log in.

Your rights

Access, rectification, erasure, restriction, portability and objection (Art. 15–21 GDPR), and the right to complain to the Austrian Data Protection Authority (dsb.gv.at).