Privacy policy

Last updated: 22 August 2026

This page explains what data minecraftmods.es collects, what it is used for, who else can see it and what you can do about it. It is written from what the site's code actually does, not from a template: if something is not listed here, it is not collected.

Draft: do not publish yet

The controller's identifying details are missing. They are marked in red throughout the page and must be filled in before this policy is considered final.

1. Who the controller is

The data collected on minecraftmods.es is processed by:

Controller: [[RESPONSABLE: pendiente]]
Tax ID (NIF / CIF): [[NIF: pendiente]]
Address: [[DOMICILIO: pendiente]]
Contact email: [[CORREO DE CONTACTO: pendiente]]
Website: https://minecraftmods.es

The four details above are still pending. This policy must not be published without them.

2. What data is collected and why

Each entry states exactly what is stored. Nothing outside this list is collected.

User account: Username, email address and password. The password is never stored in the clear: we store a bcrypt hash of it, which cannot be reversed, which is why a forgotten password is reset and not recovered. We also store the sign-up date and the date of your last login. This is used to create your account, sign you in and link your favourites and ratings to you.
Blog comments: Name, email address (optional and never published), the comment text and, to curb spam and abuse, your IP address and browser (user agent). Comments are reviewed before they are published.
Email newsletter: Your email address and, as proof that it was you who subscribed, the IP address, the browser and the page you subscribed from, together with the sign-up, confirmation and unsubscribe dates. The subscription is not active until you confirm it from a link we send you.
Favourites and ratings: The mods you mark as favourites and the scores and comments you leave, linked to your account. If you are not signed in, favourites are stored only in your browser and never reach our servers.
Our own analytics: We record page views and some events on mods, such as clicking download. For each visit we store the path, the page type, a session identifier, the time spent, the IP address, the browser, the page you came from and whether the visit looks like a bot. This tells us which content gets read and which does not.
Searches within the site: Of what you type into our search box we store only the term, how many results it returned, the page language and the date. No IP address, no browser, no session identifier: those records cannot be linked to a person. They tell us what people look for and fail to find, so we can fill the gaps in the catalogue.

3. Legal basis

Performance of a contract: Creating and keeping your account, and the favourites and ratings that depend on it.
Your consent: The newsletter and the third-party analytics and advertising cookies. You can withdraw it at any time — cookies from the "Cookie preferences" link in the footer, the newsletter from the unsubscribe link in any of its emails — without affecting anything processed before you did.
Legitimate interest: Comment moderation, site security and our own analytics, used in aggregate to understand what works and what does not.

4. Cookies and consent

The first time you visit, a notice appears with three options: accept all, reject or customize. Your choice is stored in your own browser, not on our servers.

We use Google Consent Mode v2, which controls these six categories:

ad_storage: Storage for advertising purposes. Denied until you accept it.
ad_user_data: Sending data to Google for advertising purposes. Denied until you accept it.
ad_personalization: Advertising personalised to your interests. Denied until you accept it.
analytics_storage: Audience measurement. On by default; turned off with "Reject" or from "Customize".
functionality_storage: Preferences such as language or dark mode. On: without it the site cannot remember how you left it.
security_storage: Security and fraud prevention. On.

You can change your choice at any time from the "Cookie preferences" link in the footer of any page on the site: it reopens the same notice with your current choice already selected, and whatever you save takes effect immediately, without reloading. You can also block or delete cookies from your browser settings.

5. What your browser stores

Besides third-party cookies, the site stores this on your own device. It is not sent to our servers.

token (local storage): Keeps you signed in. Deleted when you sign out.
theme (local storage): Whether you prefer light or dark mode.
cookie_consent (local storage): Your cookie choice, with the notice version and the date you made it.
minecraftmods_favorites (local storage): The mods you mark as favourites while not signed in.
NEXT_LOCALE (cookie): The language you want to read the site in.

The admin panel, which is not public, additionally stores the identifier of the selected site.

6. Third-party services that load on the site

When you open a page, your browser also connects to these services, each with its own privacy policy.

Google Tag Manager and Google Analytics 4: Audience measurement, using container GTM-MZHR36NL. What they do depends on what you chose in the cookie notice.
Google AdSense: Advertising. If you accept advertising cookies, ads may be personalised to your interests; if you reject them, non-personalised ads are shown. You can review your preferences in Google's ad settings.
YouTube: Videos on mod pages and series do not load on their own: a thumbnail is shown and the player is only mounted when you click, inside a window that destroys it when closed. Until then YouTube receives nothing about your visit. The domains used are youtube.com and youtube-nocookie.com.
CurseForge: Technical data and images for the mods come from CurseForge. Your browser requests the images directly from their servers (media.forgecdn.net).
Google Fonts: The site's typefaces are requested from fonts.googleapis.com and fonts.gstatic.com.
Share buttons: The WhatsApp, X (Twitter), Facebook and Reddit buttons are ordinary links. There is no pixel or SDK from those networks on the site: they only receive the page address when you click, and by then you are already on their site.

7. How long data is kept

Account: For as long as you keep it open. If you delete it, your favourites and ratings go with it.
Comments: For as long as the post remains published, unless you ask us to remove them earlier.
Newsletter: Until you unsubscribe. A record of the unsubscribe is kept so we do not write to you again.
Our own analytics: In detail, for as long as needed to produce the statistics; after that it is kept in aggregate form.
Searches: Indefinitely, because they identify nobody.

8. Who else sees your data

We do not sell or hand over personal data. Only the providers needed to run the site have access to it: the server hosting, the email delivery service and the Google services listed in the previous section.

Google may process data outside the European Economic Area. Those transfers rely on the European Commission's standard contractual clauses and on the EU-US Data Privacy Framework.

9. Your rights

You can exercise these rights at any time by writing to the contact email in section 1, saying which one you are exercising and enclosing something that lets us check it is really you:

Access: Find out what data we hold about you and what we do with it.
Rectification: Correct data that is wrong or incomplete.
Erasure: Ask us to delete it.
Objection: Object to us processing it.
Restriction: Ask us to keep it but not use it.
Portability: Receive it in a common format so you can take it elsewhere.

If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.

10. Minors

You must be at least 14 years old to create an account or subscribe to the newsletter, which is the age from which Spanish law allows you to consent on your own. If you are younger, ask a parent or guardian to do it for you. If we find an account belonging to someone under 14 without that authorisation, we will delete it.

11. Security

The site is always served over HTTPS. Passwords are stored hashed and cannot be recovered, only reset. Access to the database is limited to the people who administer the site.

12. Changes to this policy

If what we do with data changes, we will update this page and the date at the top. If the change affects cookies, the notice will appear again so you can decide afresh.

13. Contact

For any question about this policy or about your data, write to [[CORREO DE CONTACTO: pendiente]].