Privacy Policy

Effective 4 November 2026

SkyMe is a free, open-source Fabric mod for Hypixel SkyBlock, made by one hobby developer (“we” and “us” in this policy). This page explains what the mod, this website (skyme.dev) and SkyMe’s small API server (api.skyme.dev) do with data. We wrote it to match what the code really does.

In short

No accounts, no sign-up, no email addresses, no analytics, no ads and no tracking cookies.
Almost everything SkyMe does happens on your own computer and stays there.
A few optional online features send only what they need: cape sharing (your Minecraft UUID and the cape you picked), Crystal Hollows waypoint sharing (a lobby, a place and its coordinates, nothing about you) and Hypixel lookups when you have no API key of your own (the player or profile being looked up).
Your Minecraft login token is only ever sent to Mojang / Microsoft, never to us.
We never sell data or share it with anyone for advertising.

What stays on your computer

Your settings, HUD layout, trackers, saved chat history, protected items, waypoints, the capes you add and everything else SkyMe remembers are stored in your Minecraft folder (mostly config/skyme/). They are never uploaded. If you enter a Hypixel API key, it is kept in config/skyme/api-keys.json and sent only to Hypixel’s own API. Features such as the Scam Screener check chat with local rules; nothing leaves your PC.

SkyMe does not send crash reports, usage statistics or any other telemetry.

What SkyMe’s server receives

SkyMe has one small server, api.skyme.dev, which runs on Cloudflare Workers. Only the features below talk to it.

Hypixel data without your own API key

If you have no Hypixel API key of your own and the option “Use SkyMe’s API server when you have no key” is on (the default), features such as the Profile Viewer, Party Finder stats, the museum overlay and the dungeon score ask SkyMe’s server for Hypixel data, and only when you use them. The server receives the Minecraft UUID or SkyBlock profile id being looked up, adds SkyMe’s own Hypixel key and passes the request to Hypixel. Hypixel’s answer (public SkyBlock data) is cached for up to one hour so Hypixel isn’t asked again and again; nothing else is stored. Your own API key, if you set one, is never sent to our server.

Crystal Hollows waypoint sharing

With “Share With SkyMe Players” or “Get Places From SkyMe Players” on, SkyMe players in the same Crystal Hollows lobby share the places they found. The mod sends the lobby’s server name (for example mini123AB), when that lobby closes, the place and its coordinates. No player name, UUID or login is sent. So that each person counts once when places are voted on, the server keeps a one-way hash of the reporter’s IP address, mixed with a random value that exists only for that lobby. Everything about a lobby is deleted automatically one hour after it closes.

Cape sharing

Every SkyMe cape is shared: picking one sends it to the server so other SkyMe players can see it (there are no capes only you can see):

Your Minecraft name, used only to confirm with Mojang that the request really comes from your account (see Your Minecraft account). It is not stored.
Your Minecraft UUID, which Mojang returns, and the cape you picked. The server stores your UUID together with that cape.
An uploaded cape image, if you wear your own picture or a library cape. Only the image data of the PNG is kept (text, EXIF and other extra data are removed), at most 8 MB. Images are public to anyone who has their link, and other SkyMe players see the cape on you in game.

To show other players’ capes, the mod asks the server about the players around you by their UUIDs. Those lookups are not stored.

To stop people from changing capes too fast, the server briefly remembers when a UUID last changed its cape (one minute) and which one-time login challenges were already used (about two minutes).

Cloud-saved records

With “Cloud Save My Records” on (the default, in /skyme → API), the bests only SkyMe knows are kept on the server: dungeon splits, Kuudra splits, slayer kill times, F7 terminal times and your Limbo time. A new install gets them back, and other SkyMe players see them in the Profile Viewer.

Your Minecraft UUID, your SkyBlock profile id and these times are sent and stored. Anyone who asks the server with your UUID and profile id can read them. No name or login is sent.
Your game signs each save with the key it also signs chat with, so nobody else can save records for you. Your access token isn’t used.

Turning the option off stops all requests for this feature; records already saved stay on the server. To stop abuse, the server briefly remembers when a UUID last saved (one minute) and which one-time challenges were used (about two minutes).

Shared item looks

Looks you set with /skyme custom (dye, trim, helmet skin, name, glint, model) are kept on the server under the item’s own SkyBlock UUID, so other SkyMe players see them on that item and the look stays with it when it changes hands. The server stores the item UUID, the look, the Minecraft UUID of who saved it and when, and which customized pieces a player is wearing. Your game signs each save with its chat key, so nobody else can save looks under your name. No name, IP address, key or log is stored. Resetting a look in /skyme custom deletes it from the server.

IP addresses

Like any website, the server sees your IP address when the mod connects. It is used only as the key for Cloudflare’s rate limits (and, hashed, for the waypoint votes above). SkyMe’s server code writes no logs, and request logging (Workers observability) is switched off.

Your Minecraft account

The cape feature uses your Minecraft login only with Mojang’s and Microsoft’s own services, the same way Minecraft itself does:

api.minecraftservices.com to list the official capes your account owns and to change your active Mojang cape, only when you pick one of them or “No Mojang cape”.
sessionserver.mojang.com to prove to SkyMe’s server who is setting a cape, exactly like joining a Minecraft server. Our server then asks Mojang whether that check passed.
textures.minecraft.net to load official cape textures when they are shown.

Your access token is only ever sent to these Mojang / Microsoft hosts. SkyMe’s server never receives it.

Discord Rich Presence

Discord Rich Presence (on by default) shows what you’re doing in SkyBlock as your Discord status, for example your current island and an automatic line such as your slayer quest. You choose the lines in /skyme: location, purse, bits, motes, stats, held item, SkyBlock time, profile, your own custom text or nothing.

SkyMe talks only to the Discord app running on your own computer, over its local connection. SkyMe itself makes no internet request for it and does not read your Discord account. Discord then shows the status on your profile according to your Discord privacy settings and handles it under Discord’s Privacy Policy. To stop it, turn off Discord Rich Presence in /skyme, or turn off activity sharing in Discord.

Other services SkyMe downloads from

Some features download public data, the same sources the mods SkyMe is based on use. These are read-only downloads: SkyMe sends nothing about you except a SkyMe/<version> user agent, but, as with any download, the service sees your IP address and handles it under its own policy.

Hypixel (api.hypixel.net): bazaar prices, item and election data, and, with your own key, the data a feature looks up.
GitHub: update checks and the community data files of SkyHanni and NotEnoughUpdates.
Price and item data: hysky.de, api.azureaaron.net, api.eliteskyblock.com and the public SkyBlock API repository used by the SkyBlock Item List mod.
SkinMC (skinmc.net): the public cape library and the Community capes, only when you use them in the capes menu.
Font sites (Google Fonts, dafont, Fontshare, GitHub): only when you ask the font installer for a font.

Wiki links open in your browser only when you click them.

Update checks

With “Check for Updates” on (the default), SkyMe looks up the latest version number on GitHub (Jestriker/SkyMe-releases) and, if needed, on this website (/downloads/latest.json), about once per launch and once a day on SkyBlock. The new version is downloaded only when you click [Update now]. Nothing is sent except the SkyMe user agent.

This website

This is a static site hosted on Cloudflare. It sets no cookies, uses no analytics or advertising and loads no third-party scripts or fonts; its security policy only allows the site’s own files. Request logging is switched off on our side. Cloudflare, as the host, processes connection data such as your IP address to deliver and protect the site, and may receive network-error reports from your browser, under Cloudflare’s Privacy Policy.

SkyMe Tools (members)

SkyMe Tools (/app/) is a members-only part of this website, by invitation while it is being tested. It is separate from the mod: the mod never uses it. If you are a member, this is what it keeps:

Your email address and role, added by the admin who invited you. No email is ever sent to you by SkyMe Tools.
Your passkeys’ public keys (the private key never leaves your device) and a name you give each one.
Signed-in browsers: a one-way hash of the session cookie, when it started and was last used, your country, the first part of your IP address (for example 203.0.113.0/24) and your browser’s user agent, so you can see and end your sessions.
An activity log for security: sign-ins, failed sign-ins, invites and admin changes, with the time, country and the first part of the IP address.
What you save: portfolio entries, price alerts, which news you want pushed (new Fire Sales, Taylor’s new bundle, new store bundles), and the push subscriptions of devices you turn notifications on for (the address your browser’s push service gives, used only to send your alerts and the news you picked).
Daily counters of assistant questions and player lookups, to enforce the daily limits.

The assistant. Your question, the conversation shown on the page and matching passages from SkyMe’s research notes are sent to Cloudflare Workers AI to write the answer. SkyMe doesn’t store questions or answers; the page keeps the conversation in your browser tab only.

Player lookups. When you look up a player, the name goes to Mojang (or the caching mirror mowojang.matdoes.dev when Mojang doesn’t answer) to find the UUID, and the public SkyBlock profile comes through SkyMe’s Hypixel lookup server described above. Nothing about the lookup is stored.

Cookies. SkyMe Tools sets one cookie, __Host-skyme_s, which keeps you signed in. It is strictly necessary for the service you asked for and is never used for tracking. The pages store small display preferences (for example a page’s filters) in your browser.

What we never collect

Passwords or payment details. Email addresses only for invited members of SkyMe Tools.
Your Minecraft or Microsoft login token.
Your chat, your inventory, your Hypixel API key or your settings.
Analytics, telemetry, advertising identifiers or tracking cookies.

We don’t sell data, share it for advertising, or combine it into profiles of players.

How long data is kept

Your shared cape (UUID and cape choice): Until you change it, pick “no SkyMe cape” or turn off cape sharing.
Uploaded cape images: As long as someone wears them. An image nobody uses any more is deleted right away.
Cape change times and used login challenges: About one to two minutes.
Crystal Hollows waypoints and the hashed IP votes: Until one hour after the lobby closes.
Cached Hypixel answers: Up to one hour.
Shared item looks: Until the look is reset or replaced.
SkyMe Tools account (email, passkeys, portfolio, alerts, news choices, devices): Until you or the admin remove the account. Sessions end after 7 days unused or 30 days at most.
SkyMe Tools activity log and daily counters: 180 days for the log, 30 days for the counters.
IP addresses in rate limits: Only the short-lived counters of Cloudflare’s rate limiting (one minute windows); not logged by us.

Turning things off and deleting data

These online features have their own switch in /skyme: “Use SkyMe’s API server when you have no key”, the two Crystal Hollows sharing options, “Cloud Save My Records”, Discord Rich Presence and “Check for Updates”.
To remove your cape from the server, pick “no SkyMe cape”: the server forgets your cape, and its image is deleted if nobody else uses it. Reset an item’s look in /skyme custom to delete it. Please do this before uninstalling if you want them gone, since uninstalling alone doesn’t contact the server.
SkyMe Tools members can sign out other browsers, remove passkeys, portfolio entries, alerts, news choices and devices themselves, and ask for the whole account to be deleted.
Uninstalling SkyMe stops everything. Your local files stay in config/skyme/ until you delete that folder.

You can also ask us to see or delete what the server holds about your Minecraft account, or to remove a cape (see Contact). Since we only know your UUID, we may ask you to make the change in game, which proves the account is yours. Depending on where you live, you may have further rights over your personal data, such as to access, correct or object to its use; we will help with any such request for the little data we hold.

Where data is processed

SkyMe’s server and website run on Cloudflare’s global network, so requests may be handled in a data centre outside your country.

Children

Many Minecraft players are young. The mod has no accounts, doesn’t ask for anyone’s age and doesn’t collect names, contact details or anything else meant to identify a person; the only things linked to a Minecraft account are the UUIDs of shared capes, looks and records. SkyMe Tools accounts exist only for people the admin invites. A parent or guardian who wants a cape removed can contact us as described below.

Changes to this policy

If SkyMe starts handling data differently, this page is updated first and the effective date above changes. For bigger changes we will also mention it in SkyMe’s release notes.

Contact

Questions, deletion requests and reports: open an issue at github.com/Jestriker/SkyMe-releases/issues. Issues there are public, so only include your Minecraft name or UUID and never anything private.