Last updated: 10 November 2026
This privacy policy explains how Addon's Studio ("the app", meaning the web app and this website), made by WarpZone, accesses, collects, uses, shares, protects and deletes data. We collect as little as we can, we don't ask for your name, and we never sell your data.
Your account
Signing in is optional. Without an account you're a guest: the app uses a random, anonymous ID and your projects stay in your browser on your device. Players aged 13 and over can create an account to back up their projects and to buy a plan, so these follow them to another device or browser. You can sign in with:
- Email and password. We store your email address and your password only as a salted, scrambled (hashed) copy that can't be turned back into your password. We use your email only to sign you in and to answer you if you contact us. We don't send marketing.
- Google. Google tells us your Google account ID and email address. We don't receive your Google password or contacts, and we don't store your name or photo.
Players under 13 can't create an account: they always use the anonymous ID, and we never ask children for an email address.
What stays on your device
Your projects, textures, models, sounds and recordings, and addons you import are saved in your browser's storage on your device. Addons you export are saved where you choose, and anything you share yourself stays with you. Clearing this site's data in your browser (or removing the installed app) deletes what's stored there.
Cloud backup of your projects
If you're signed in, the app backs up your projects to your account, including their textures, models, animations, structures and any sounds or recordings you added to them, so you can get them back on another device. Backups are stored with Cloudflare (our server provider), encrypted at rest, and only your account can access them. You can turn cloud backup off in Manage. Deleting a project deletes its backup.
What we collect, and why
- Account details: a random account ID and a hashed recovery code for everyone. If you choose to sign in: your sign-in email (or Google account ID and email) and a hashed password if you use one. Guests and players under 13 only have the random ID and recovery code. Account IDs aren't linked to any advertising or hardware ID.
- Project backups, if you're signed in and cloud backup is on (see above).
- Your age range (under 13, 13 to 17, or 18+) from the question when you first open the app, to turn the AI and accounts off for under-13s. We don't store your birth year.
- Purchases: for anything you buy, what you bought, when, and the order and subscription numbers from Paddle (our payment company), plus your Paddle customer number so you can manage your subscription. This is so we can give you what you paid for and handle refunds. Paddle handles your payment details; we never see your card.
- AI usage: the date, which AI model was used and how much it cost, to keep the free and paid plans fair.
- Rewards and invites: rewarded ads you chose to watch (when, and what they unlocked), bonus templates you unlocked, your invite code, who invited you (if anyone) and whether that invite counted, and the free AI uses these gave you.
- The last day you used the app, so we can count how many players use it each day. Counts like "addons exported today" are kept only as daily totals that aren't linked to anyone.
- Your internet address is used to work out your country (it isn't stored) and, in scrambled form only, to stop abuse such as mass sign-ups. The scrambled form is deleted within 2 days.
We don't collect your contacts, location (beyond country), phone number, your photos or hardware IDs.
Microphone
The app only uses your microphone when you tap Record in a Sound, after it explains why and you allow it in your browser. Recordings are saved in your project on your device and go into your own addon. If you're signed in with cloud backup on, they're included in your project's backup. They're never shared with anyone or used for anything else. You can turn microphone access off at any time in your browser's site settings.
The AI assistant
Before you first use the AI, the app asks you to agree. When you use it, your message, any files or pictures you attach, and the settings of the thing you're working on are sent to our server and then to Anthropic, the company that makes the Claude AI, only to write a reply. We don't keep your messages. Anthropic acts as our service provider: it doesn't use them to train its AI and keeps them only for a limited time for safety (see Anthropic's privacy policy). If you tap "Report this reply", we keep that message and reply so we can check it. Please don't type personal information into the AI.
The AI is only available to players aged 13 and over. Each item's helper only changes that item. Its changes are made straight away and can be wrong, so check them and tap Undo if you don't like them.
Website analytics
This website and the app use Cloudflare Web Analytics to count page views. It doesn't use cookies, doesn't track you across sites and doesn't build a profile of you: we only see totals, such as how many people opened a page and from which country.
Ads
On this website: our guide and gallery pages can show ads from Google AdSense. They're non-personalised: they're chosen from the page you're reading and your general location, not from your interests or history. Google may still use cookies or similar storage to limit how often you see an ad and to stop fraud. In the EU, UK and Switzerland, Google asks for your consent first. See how Google uses information from sites that use its services. The home, plans, legal and account pages, and the app itself, never show these ads.
Rewarded videos in the app: free players aged 13 and over can choose to watch a short video ad for a reward (AI uses, a bonus template or a gallery boost). Nothing plays unless you tap to watch. The video is shown by AppLixir inside a separate window from our website, so it can't see your account or projects. We only send AppLixir a random one-time code, which it sends back to our server when the ad finishes so we can give you the reward. AppLixir and its advertisers receive your internet address and basic device information, like any website, and may ask for consent where the law requires it (AppLixir's privacy policy is on applixir.com). Players under 13 never see these ads.
We never give advertisers your name, email, account or projects.
Invites and partner links
If you share your invite link and a friend joins with it, we link their account to yours only to give you the reward. To stop self-invites, we briefly compare the networks the link was shared from and opened on, in scrambled form only (deleted within 2 days). Some links (for example to Minecraft server hosts) are partner links that may earn us a commission; we only count clicks, and the other site's privacy policy applies once you're there.
The public gallery
If you're 13 or over, signed in, and choose to publish an addon, these become public on our website: the addon file, its title, description, category and pictures, the display name you choose (never your email or real name), the date and the download count. Before we review it, an automatic check by our AI provider, Anthropic, reads the addon's text, files and pictures to flag anything against the rules. You can withdraw your addon at any time in the app. When anyone reports an addon, we keep the report and a scrambled form of the reporter's network (to stop repeat reports) until it's dealt with.
Online tools the app opens
Some editors load free tools from other websites, the same way a web browser would:
- Blockbench (web.blockbench.net) for 3D models and animations, and Snowstorm (snowstorm.app) for previewing particles. The model or particle you're editing is loaded into the tool inside the app and saved back to your project; we don't receive it.
- Mojang's official sample packs on GitHub (raw.githubusercontent.com), downloaded when you start a mob from a vanilla one or add the Player.
- Google Fonts (fonts.gstatic.com), for the symbol and emoji fonts the app needs to draw some text.
Like any website, these services can see your internet address when the app connects to them. Their own privacy policies apply.
Who we share data with
We only share data as described above, with:
- Google: Google sign-in, if you choose it.
- Paddle (paddle.com): sells our plans and packs on our website as our reseller (Merchant of Record). When you buy on the website, you give Paddle your email, payment and billing details, and Paddle handles them under Paddle's privacy policy. We tell Paddle your random account ID so your purchase reaches your account.
- Anthropic: AI replies and the gallery's automatic check, as our service provider.
- Cloudflare: runs our server, database and project backups, and counts page views (Web Analytics), as our service provider.
- Google AdSense and AppLixir: show the website's ads and the rewarded videos you choose to watch, as described under Ads.
- Authorities, only if the law requires it, or a buyer of the app if it's ever sold (we'd tell you first).
We don't sell personal data, and we don't let the services we use sell it.
Children
The app is made for players aged 13 and over, and asks everyone's age when they first open it. Players under 13 don't sign in or give an email address, and get no AI, no cloud backup, no rewarded ads and no publishing, and we keep no account details for them beyond the anonymous ID. Bonus templates are free for them. Our public website pages can't know a visitor's age, so the ads there are always non-personalised. Parents can email warpzoneaddon@gmail.com to delete their child's data.
How we protect data
Everything the app sends to our server, Google and Anthropic is encrypted in transit (HTTPS). Passwords are stored only as salted hashes (PBKDF2), and recovery codes and internet addresses only in scrambled form. Project backups are encrypted at rest. Sign-in attempts are rate-limited, and resetting your password signs out your other devices. Access to our server is limited to the developer.
How long we keep data
- Your account, sign-in details, plan, purchase records and project backups: while your account exists. Signing out keeps them; deleting your account removes them. A project's backup is removed when you delete the project.
- AI usage records and reported AI replies: 12 months.
- Rewarded ad records: 30 days. Unlocked bonus templates and invite links: while your account exists.
- Published addons: while they're in the gallery (removed or rejected addons are deleted within 30 days).
- Scrambled internet addresses: up to 2 days (gallery reports: until the report is dealt with).
- Daily totals (such as page views or exports per day) aren't linked to anyone and are kept.
Deleting your account and data
You can delete your account and data at any time:
- In the app: Manage → Delete my data.
- On the web: Delete your data, using your recovery code, or by email.
Deleting removes your account and everything linked to it straight away: your email or Google link, password, project backups, plan link, AI uses, usage records and reports, unlocked templates, your invite code, and your gallery addons and display name. The only thing we keep is a record that your past purchases were already used, with no link to you and no order number, so they can't be claimed twice (fraud prevention). We delete those records after 3 years. Paddle keeps its own records of your payments under its privacy policy. Deleting your account cancels your subscription straight away.
Your rights
Wherever you live, you can ask us what data we hold about you, to correct it or to delete it, by emailing warpzoneaddon@gmail.com (include your Player ID from Manage → Move to a new device, or Recovery code if you're signed in). We'll reply within 30 days.
EU, UK and Switzerland: we use your data to provide the app you asked for (contract) and to prevent fraud and abuse (legitimate interests). You can object to processing and complain to your local data protection authority. Our server providers may process data outside your country; they use standard safeguards such as the EU Standard Contractual Clauses.
US states: we don't sell personal data or share it for targeted advertising.
Australia: we handle personal information in line with the Australian Privacy Principles. You can complain to the Office of the Australian Information Commissioner (oaic.gov.au) if you're not happy with our reply.
Changes to this policy
If we change this policy, we'll update the date at the top. Big changes will also be shown in the app.
Contact
WarpZone (developer of Addon's Studio), New South Wales, Australia. Email warpzoneaddon@gmail.com.