新亭泪皮肤站 Privacy Policy

Publication and Effective Date: As indicated by the version date displayed on this page

This Privacy Policy (the "Policy") explains how 新亭泪服务运营及开发组 ("we", "us", or "our") processes personal information in connection with the operation of 新亭泪皮肤站 (the "Site"), its texture services, and the associated User Center. It also explains how you may access, correct, or request the deletion of your personal information, and how you may delete your account.

This Policy describes the features currently provided by the Site and expressly identifies Java Edition account linking as a feature that is not yet available. The Site does not collect your game account information in advance merely because this Policy describes a linking feature that you have not used or that has not been released. The Site does not currently provide account balance top-ups, withdrawals, or skin trading; require identity documents, bank card numbers, or precise location information; or conduct advertising profiling or cross-site marketing tracking. Before making material changes to our operations, we will update the relevant disclosures and obtain separate consent where required by law.

1. Categories of Personal Information We Process

Category	Information	Purpose
Account information	Email, nickname, password hash, registration time and IP address, email verification status, and account status	Create and maintain accounts, verify identity, recover passwords, and handle account issues and disputes
Profile and preferences	Avatar, interface language, dark mode, points, check-in records, permissions, and ban status	Display profiles, retain preferences, and manage site benefits and permissions
Player profiles and textures	Minecraft player names and UUIDs; skin and cape files; texture names, types, file hashes, visibility, descriptions, and upload and modification times	Link player profiles, store and distribute textures, and provide public and private texture features
Site activity	Wardrobe, favorites, notifications, reports, appeals, and communications with support or administrators	Provide features you choose to use, handle complaints, and maintain community order
Device and security information	Session state, request IP address and time, basic browser-provided information, errors, and security events	Maintain sign-in, prevent abuse, troubleshoot, and protect accounts and systems
Associated service information	Account identifiers, nicknames, permissions, player profiles, and short-lived authorization credentials used for user-center sign-in	Provide associated sign-in and player profile display without disclosing your site password
Bedrock account linking	Xbox account identifier (XUID), Xbox player name when returned by the service, selected site player name and UUID, and link creation and update times; for in-game codes, also the code hash, expiry, and use time	Verify control of the Bedrock gaming identity, create a link, identify the corresponding player on connected community servers, and prevent duplicate links
Java Edition account linking (not yet available)	Planned collection, after your authorization, of your official Java profile UUID and player name, together with the selected site player profile, link, and timestamps	Verify control of the Java profile and associate it with a site player profile; this linking collection does not take place before the feature becomes available
Game account authorization process	Authorization callbacks, temporary anti-impersonation verification information, and short-lived credentials needed for Microsoft, Xbox, and applicable Minecraft authentication	Complete the current identity verification and prevent account substitution or reuse of authorization results
Legal document acceptance records	User ID, document type, display version, version identifier, acceptance entry point, and time	Record the versions presented to and accepted by you

Site passwords are stored solely as irreversible hashes and are not retained in readable plaintext. Microsoft passwords are entered on Microsoft's own sign-in pages. The Site's game account linking feature does not require you to submit or disclose your Microsoft password to us. The processing of credentials used for account linking is described in Sections 3 and 7.

2. Sources of Personal Information

We obtain personal information from the following sources:

1. Your submissions during registration, uploads, reports, appeals, or profile changes;
2. Information generated by site features, such as user IDs, player UUIDs, file hashes, points, and action timestamps;
3. Information automatically generated by browser and server requests, such as IP addresses, request times, and error records;
4. Administrator decisions based on reports, appeals, and platform rules, such as case status, permission changes, and notifications;
5. Identity information returned by Microsoft or Xbox after you choose game account linking and authorize it. Once Java linking is available, Minecraft services will also return your own profile. For Bedrock in-game linking codes, the connected server obtains the verified Xbox identity through Floodgate / Geyser and sends the information needed for linking to this site.

Please do not include information unrelated to the Site's functions, such as identity document numbers, residential addresses, telephone numbers, or passwords, in nicknames, texture descriptions, or reporting materials. You should not submit another person's personal information without permission.

3. Purposes of Processing

We use personal information solely for the following purposes:

• Provide registration, sign-in, player linking, textures, wardrobe, favorites, notifications, and user-center sign-in;
• Send email verification, password reset, account security, and service change notices;
• Detect unusual activity, protect accounts and systems, and fix faults;
• Handle reports, infringement notices, appeals, and user requests;
• Fulfill legal obligations, respond to lawful requests from competent authorities, or protect lawful rights.

We do not sell personal information, use account email addresses to send commercial marketing messages that you have not elected to receive, or use private textures for advertising or model training. If we introduce additional processing purposes or the processing of sensitive personal information, we will provide separate and clear disclosures.

Microsoft Authorization and Game Account Linking

Game account linking is initiated at your discretion. After you select a player profile belonging to you on the Site, you are redirected to Microsoft to select an account and confirm authorization. The Site establishes the link only after authorization and identity verification have been completed successfully. You may cancel the authorization process without altering an existing link. Your decision not to use this feature does not affect ordinary Site functions, except for server identity association functions that depend on an account link.

Bedrock Edition linking uses the Xbox account identifier to identify the same gaming identity. The player name is used only for supplementary display and does not, by itself, establish control of an account. Bedrock Edition also supports the server-issued linking code method; both methods require verification of the gaming identity. Signing in to the Site through Microsoft and linking a game account are separate operations. Completing Microsoft sign-in does not, by itself, establish a link to a Bedrock Edition account or an official Java Edition profile.

The current Microsoft authorization process for Bedrock Edition linking requests only the permissions necessary to complete Xbox sign-in. It does not request continuing offline access or actively retrieve the contents of your mailbox, contacts, friends list, chat history, or purchase records. General permission descriptions displayed on the authorization page do not indicate that the Site collects all information covered by those descriptions. Obtaining an Xbox identity does not establish that you have purchased a particular edition of the game.

Java Edition account linking is not currently available. Subject to approval of the required API access and release of the feature, we intend to obtain the UUID and player name of your own Java Edition profile, upon your authorization, for the purpose of establishing a link. The relevant credentials are intended to be used solely to complete that verification, rather than to maintain access to the game on your behalf. We will review and update the actual scope of processing before release. This disclosure does not represent that API approval has been obtained. Neither an Xbox identity nor a player name obtained through a public lookup is treated as proof of control of an official Java Edition profile.

4. Public and Private Information

Nicknames and public textures' names, images, descriptions, upload times, and associated statistics are visible to visitors and may be obtained by search engines, game clients, or other users. Player names and UUIDs are provided as part of normal texture services and associated user-center features.

Game account linking records are not published as a public directory of accounts. You may view your own links on the relevant linking page. Personnel with administrative permissions and community servers authorized to connect to the Site may use the relevant information to the extent necessary for identity association, security, and troubleshooting. Player names, UUIDs, and textures actually used on a server may nevertheless be visible to other players or game clients through ordinary game functions.

Private textures do not appear in the public texture library. We process private content only as necessary to provide services, maintain security, handle valid complaints, or fulfill legal obligations.

Once you withdraw public access to content or delete it, we can discontinue further distribution. However, we cannot control copies that others have lawfully downloaded, captured, or cached before that action.

5. Cookies and Browser Storage

The site currently uses cookies mainly for account and interface features:

Name	Purpose	Type and duration
BS_SESSION	Identify the current session and maintain sign-in and form state	Necessary cookie; expires after 120 minutes of inactivity by default
XSRF-TOKEN	Validate site requests and prevent cross-site request forgery	Necessary cookie; generally renewed and expired with the current session
remember_web_*	Maintain sign-in when you choose "Remember me"	Functional cookie; expires when you sign out or clear browser data
locale	Remember interface language	Functional cookie; 120 minutes by default

Your browser may cache static files required for public pages and publicly available textures to improve loading performance. You may remove these items through your browser's site data settings.

Game account linking uses your site session to hold temporary authorization verification information and your selected player profile. Microsoft's sign-in pages may use their own cookies, as described in the Microsoft Privacy Statement. Clearing site cookies does not sign you out of Microsoft or remove an existing link.

The current version does not use non-essential cookies for advertising tracking, remarketing, or cross-site profiling. If analytics or marketing tools are introduced in the future, we will provide an independent choice before those tools are loaded. Continued browsing will not be treated as consent.

If third-party human verification is enabled by the administrator, the relevant page will explain its provider and information processing before use. If you do not agree to that verification method, contact the email address below for account assistance.

6. Disclosure, Sharing, and Entrusted Processing

We do not sell personal information. To provide the services currently available, information may be disclosed or processed in the following circumstances:

1. Xintinglei User Center. After you authorize it, the user center may receive the account identifier, nickname, permissions, player name, and UUID needed for sign-in and profile display. It does not receive your site password.
2. Email services. The configured email service processes recipient addresses, message content, and delivery status when sending verification, password reset, or important notices.
3. Infrastructure services. Providers maintaining servers, databases, file storage, backups, reverse proxies, or CDNs may process data as necessary for hosting, security, and recovery.
4. Legal circumstances. We may disclose the minimum information permitted by law in response to valid lawful requests from competent authorities, or when necessary to address infringement or security incidents and protect lawful rights.
5. Microsoft, Xbox, and Minecraft identity services. When you choose Microsoft linking, your browser connects to Microsoft sign-in services, and the site exchanges information needed for the current authorization and identity verification with Microsoft / Xbox. Once Java linking is available, this will also involve Minecraft authentication and profile services. Those services process account sign-ins, network requests, and authorization records under their own rules. We do not send them your site password, QQ linking information, wardrobe, or private textures for game account linking. Their independent processing rules and contact channels are in the Microsoft Privacy Statement.
6. Connected community game servers. A Bedrock server can submit a verified XUID and player name to generate a linking code, and query the corresponding site player UUID and name by XUID to identify the joining player. Once Java identity association is available, we plan to query the corresponding player profile after the server authenticates the official Java login. This association does not give game servers your Microsoft authorization tokens, site password, or email address.

Service providers entrusted to process information on our behalf may do so only in accordance with our instructions and agreements. They may not independently use that information for advertising or purposes unrelated to the services. Independent service providers, including Microsoft, process information in accordance with their own privacy rules and are not entrusted parties acting solely on the Site's instructions. If we introduce additional independent recipients or change the scope of information sharing, we will disclose the recipients, processing purposes and methods, and categories of information involved, and obtain separate consent where required by law.

7. Retention Periods

We retain personal information for the shortest period necessary to fulfill the relevant processing purpose:

• Account details, player links, and preferences are retained while the account exists;
• Active Bedrock links remain until you unlink or we process a deletion request. Unlinking deletes the current relationship. Linking codes are valid for five minutes and can be used once. Their hashes, associated identities, and timestamps are stored separately from active links. Expiry does not mean immediate deletion of the record; you may request removal of records that are no longer needed;
• Access tokens and Xbox credentials in the current Microsoft Bedrock linking flow are used only while the server handles the current request. They are not written to the linking database or given to the browser. We do not request or retain refresh tokens for ongoing access. Session authorization verification data is valid for ten minutes and is retrieved and removed when the callback is handled. Unfinished session data is removed with session cleanup and is not used for later access to your game account;
• Textures and descriptions remain until you delete them, an administrator lawfully removes them, or the service ceases;
• Sign-in and authorization credentials expire according to their validity periods; expired or revoked records are periodically cleaned up;
• Reports, appeals, and communications remain until the matter and relevant dispute periods have ended;
• Legal document acceptance records remain with the account and are deleted upon account deletion;
• Security logs remain as necessary for troubleshooting, security, and legal obligations;
• Backup copies are overwritten during normal backup rotation.

Where continued retention is required by law, a dispute remains unresolved, or retention is necessary to protect the lawful rights and interests of others, we will retain only the information necessary for those purposes and restrict its use for other purposes. Aggregated statistics that can no longer be associated with an individual may continue to be retained.

8. Storage Locations and Cross-Border Processing

Account databases, texture files, and operational records are stored in the server and backup environments in which the operator deploys the services. The application does not currently integrate overseas advertising or behavioral analytics platforms.

If you elect to link a game account through Microsoft, the process connects to Microsoft's and Xbox's global services. Once Java Edition linking becomes available, it will also involve Minecraft services. Microsoft may process account sign-ins, network requests, authorization credentials, and identity verification information outside your country or region. The recipients are Microsoft and its affiliated entities providing the relevant services, and the processing purposes are account authorization and identity verification. The categories of information involved are described in Section 6. Information concerning storage and processing locations, the exercise of rights, and contact channels is provided in the Microsoft Privacy Statement. We do not represent that this processing takes place exclusively within China.

Where processing requires additional disclosures, separate consent, or other statutory procedures, we will fulfill the applicable requirements before commencing that processing. Neither this Policy nor an authorization granted through Microsoft substitutes for other procedures required by law. We will also update the relevant disclosures before introducing additional cross-border processing involving hosting, email, verification, CDN, or other services.

9. Your Rights

After signing in, you may directly access or modify your nickname, email address, password, avatar, language, dark mode preference, player profile links, texture visibility, and wardrobe contents. For matters not supported by the interface, you may submit a request to the contact email below to:

• Access or obtain a copy of the personal information we hold about you;
• Correct or supplement information that is inaccurate or incomplete;
• Delete information that is no longer necessary, whose processing purpose has been fulfilled, or that has been processed contrary to our agreement;
• Withdraw consent to processing based on your consent;
• Delete your account;
• Obtain an explanation of the applicable processing rules or the reasons for declining a request.

To prevent unauthorized access to information or deletion of an account, we will verify the relationship between the requester and the relevant account, ordinarily through a signed-in session or the linked email address. We will not request identity documents without justification. Withdrawal of consent does not affect processing completed before withdrawal, or processing necessary to provide services you have requested, protect security, or fulfill legal obligations.

You can unlink a Bedrock account on the Bedrock account linking page after verifying your current site password. Subsequent queries will no longer return the old link. Existing server sessions, caches, and saved progress are not immediately deleted or automatically migrated; reconnection is handled under server rules. You may also revoke the site's app authorization in your Microsoft account's app permissions management. This is separate from unlinking and does not automatically delete a stored site link. Please unlink on the site as well or contact us.

Deleting a game account link does not delete your Microsoft / Xbox account, official Java profile, or game entitlement. It also does not automatically remove a third-party association used to sign in to the site. Java linking is not yet available; unlinking and information deletion channels will be provided when it launches.

10. Account Closure and Deletion

You may delete your account on the profile page after verifying your password, or submit a deletion request to the contact email below. Deletion terminates the current session, removes the main account record and Site player profiles, and prevents further sign-in to that account. Please unlink any game accounts before deleting your Site account. If your account has already been deleted or you cannot access the linking page, please contact us so that we can verify your request and delete residual game account links and linking-code records that are no longer necessary.

We cannot control copies of public content already obtained by others. Records needed for unresolved reports, rights disputes, security incidents, or legal obligations may be retained to the extent necessary and deleted or anonymized when their purpose ends. Download any textures you wish to keep before deleting your account.

11. Protection of Minors

The Site has not established a process for verifying a guardian's identity and obtaining the guardian's consent online. Users under fourteen years of age may not register independently. If we become aware of information submitted without guardian consent, we will verify the circumstances and delete the relevant account and information.

Users under eighteen years of age should use the Site under the guidance of a guardian and should not disclose their real name, school, residential address, telephone number, or similar information in public nicknames, texture descriptions, or reporting content.

12. Security Measures and Incident Response

We implement measures appropriate to the scale of the services and the nature of the information, including access controls, protection of data in transit, secure credential storage, permission verification, backups, and security logging. Administrators may access backend data only to the extent necessary to perform their administration, security, and complaint-handling responsibilities.

In the event of a disclosure, alteration, or loss of personal information, we will promptly take steps to contain the risks, investigate the causes, and implement remedial measures. Where statutory notification requirements apply, we will notify affected users through Site announcements, linked email addresses, or other effective means, and report the incident to the competent authorities as required by law.

13. Amendments to This Policy

Editorial corrections, formatting changes, and clarifications that do not affect user rights will be published on this page. We will provide prominent notice before changes take effect that introduce additional categories of information, alter processing purposes, add independent recipients, involve cross-border processing, or materially affect your rights.

When we change this page, signed-in users will need to confirm it again. If you disagree with the new version, you may sign out and stop using features that require sign-in. Browsing public pages alone does not constitute acceptance of the update.

14. Contact Information

Entity Responsible for Personal Information Processing: 新亭泪服务运营及开发组
Website: https://skin.xintinglei.cn
Privacy, deletion, and complaints email: support@xintinglei.cn

When contacting us, please provide your account email address or nickname, details of your request, and information that enables us to verify your identity. We will respond within five working days. If the complexity of the matter requires an extension, we will explain the reasons. You may also lodge a complaint with a competent personal information protection authority or bring proceedings before a court of competent jurisdiction in accordance with law.