The short version
- Your
.jarand.mrpackfiles are read in your browser and never uploaded. - To identify mods we send SHA-512 fingerprints of the files, not the files or their names.
- There are no accounts, no ads, and no tracking cookies. We don't sell or share data for advertising.
- We count how the site is used with anonymous events. Your browser's "do not track" setting switches that off.
- Feedback is sent only when you press send, and contains only what you choose to include.
Your mod files
When you pick a mods folder, .jar files, or a .mrpack, your browser calculates a SHA-512 fingerprint (hash) of each file locally. To identify the mods, Modshift sends these fingerprints, the Minecraft version, and the loader you choose to our server, which looks them up on Modrinth. Modrinth receives the request from our server, not from your browser.
File names, folder paths, file contents, worlds, configs, and the name of your .mrpack are never sent. Scan results live only in your open browser tab and are gone when you close it.
Shared plan links
When you press "Share plan", the link carries public Modrinth project and version IDs and each mod's status. The detailed list sits after the # in the link, a part that browsers never send to any server. Our server only sees the summary (target version, loader, readiness percentage, and mod count), which it uses to draw the link preview. Anyone you give the link to can see the plan.
Usage analytics
We use PostHog, hosted in the EU, to understand which features are used, for example how many mods a scan had or which Minecraft version was chosen. Events go through our own domain and are configured so that:
- no cookies, local storage, or other identifiers are stored on your device;
- there is no session recording, heatmap, or automatic click capture;
- each scan gets a random ID that isn't linked to you or to other scans;
- events contain counts, versions, loaders, and public Modrinth project IDs, never file names, fingerprints, or paths;
- IP addresses are discarded by PostHog and not stored with events.
If your browser sends a Do Not Track or Global Privacy Control signal, analytics is not loaded at all.
Feedback and reports
The Feedback form, "Tell us what this is" for unknown files, and comments on replacement suggestions send what you type to a private Telegram chat that only the Modshift team reads. An unknown file's name is included only when you report that file. A contact address is optional and used only to reply to you. "Request a migration path" and replacement report reasons are counted as anonymous analytics events.
Please don't include personal details you don't want us to see. We delete feedback on request.
Hosting and logs
Modshift runs on Vercel. Like any web host, Vercel processes your IP address and browser details to deliver pages and keeps short-lived technical logs for security and troubleshooting. Mod icons are loaded through our domain, so your browser doesn't contact Modrinth's image servers directly.
Stored on your device
If you switch between light and dark theme, your choice is saved in your browser's local storage under modshift-theme. Nothing else is stored.
Services we use
- Vercel: hosting.
- Modrinth: mod metadata, requested by our server.
- PostHog (EU): anonymous usage analytics.
- Telegram: delivery of feedback you send.
Modshift is not affiliated with Mojang, Microsoft, or Modrinth.
Children
Modshift doesn't ask for personal information and isn't designed to collect it. If you're under 16, please leave the contact field in the feedback form empty.
Your rights and contact
You can ask what we hold about you, or ask us to delete it. Because analytics is anonymous, in practice that means feedback you sent us. Write to modshift.team@gmail.com or use the Feedback button.
If this policy changes, the date at the top changes with it.