You can read, download and buy everything on Pective's Cozy Collection without an account and without being asked for anything. Signing in is optional and only exists so you can like products and leave comments.
There is no advertising network, no analytics product and nothing here that follows you around the web. What is collected is listed below in full, and none of it is sold or shared for advertising.
Two pages carry something embedded from somebody else, and both are named in full further down: the Discord server preview on the front page and the content page, which loads with the page, and the YouTube players on the content page and on product pages, which do not load until you press one.
What is never collected, for members and visitors alike: your password, your email address, your payment details, your date of birth, your address, or any profile of you across other sites. Microsoft checks your password when you sign in; this site never sees it, and never receives it.
Pective's Cozy Collection is the data controller for everything described on this page, and is based in the Netherlands. That means this site is run under the General Data Protection Regulation and Dutch implementing law, wherever in the world you happen to be reading it from.
Pective's Cozy Collection is run by an individual in the Netherlands rather than by a registered company, so there is no Chamber of Commerce number or business address to publish. Nothing is sold directly from this site: paid products are bought from the third-party store their button links to, and that store is the seller for the purposes of the sale. Should that change, the trading name, address and registration number appear here before anything is sold.
The way to reach a person about any of this is no public contact address is set for this site yet.
The law requires a stated reason for each use of personal data rather than a single blanket one, so here they are, in the same order as the sections below.
Where a use rests on legitimate interests you may object to it, and the objection will be answered rather than filed. Where it rests on a contract, the way to end it is to delete the account, which erases everything at once.
Two of the companies below are American, and this has to be said plainly rather than left for you to work out: using this site means some data is processed outside the European Economic Area.
Both operate under the safeguards the GDPR requires for transfers of this kind, which today means the EU-US Data Privacy Framework and the standard contractual clauses that sit behind it. If you would rather none of your data reached either company, the site is fully readable without signing in, and never signing in is a complete answer.
When a download, buy or preview button is used, your browser sends the product's identifier so a counter on that product can be incremented. It is a single number per product. No identifier for you, no address and no timestamp is stored alongside it, so the count cannot be traced back to any individual visit.
The hosting platform records ordinary web server logs for every request: the IP address it came from, the page requested, the time, the response status and the browser's user-agent string. This happens at the platform level for operational and security reasons and is retained on the platform's own schedule. It is used to keep the site running and to investigate abuse, not to profile anyone.
To stop automated abuse of sign-in, commenting and the click counter, the server keeps a short-lived count of requests per IP address in memory. Nothing is written to a database, and the counters are discarded within minutes.
Your light or dark theme choice is stored in your own browser's local storage under pcc-theme. It never leaves your device and is not readable by this site's server. Clearing your site data removes it.
Signing in uses your Microsoft account. You are sent to Microsoft, you authenticate with them, and they send this site back a token confirming that you did. Your password and any two-factor code are entered on Microsoft's site, not this one. They are never transmitted to, seen by, or stored by Pective's Cozy Collection. That is the whole reason sign-in is done this way.
This site then asks Microsoft's Xbox services for your gamertag and the address of your gamerpic. The gamertag is the only name shown next to your comments. Your Microsoft account name is never displayed on this site. If your account has no Xbox profile on it, or that lookup is unavailable, you appear as “Member” and you are told why.
This is the complete list of columns on a member record:
Microsoft access tokens are not stored. They exist for the few seconds of the sign-in and are then discarded, and no refresh token is requested at all, so this site can never act as you against Microsoft or Xbox afterwards.
Messages are private between the two people in them, and no page on this site shows them to anybody else. They are not encrypted end-to-end, and it would be dishonest to imply otherwise: they are ordinary rows in the site's database, which Pective's Cozy Collection administers and could therefore read directly, and which the hosting provider stores. Treat them as private correspondence on a small site rather than as a secure channel - do not send anything through them you would not send by email.
Signing in sets one cookie, pcc_member_session, which holds a signed member id and an expiry. It holds no personal data. It is HttpOnly, SameSite=Lax and Secure, and expires after thirty days.
Two more cookies exist only during the few seconds of a sign-in, pcc_oauth_state and pcc_oauth_verifier, and are deleted the moment you return. The site owner's own sign-in uses a separate cookie, pcc_admin_session.
There are no other cookies, and no advertising or analytics cookies at all. No consent banner is shown because every cookie here is strictly necessary for a sign-in you chose to start.
Running the site means other companies handle some of the data above. These are the only ones:
Fonts are compiled into this site at build time and served from this domain, so loading a page sends no request to Google Fonts or any other font host. Four things are the exception, and each is named above: an Xbox gamerpic loads from Microsoft, a Minecraft head from mc-heads.net, any image inside a product's README from wherever its author put it, and the Discord preview from Discord. In each case that host sees the request and therefore the address it came from. Everything else on every page is served from this domain.
This site has no chatbot, no assistant and no feature that sends anything you write to a language model. Your comments are checked by a filter that runs on this server and is a set of rules in this site's own source code, not a machine learning service: nothing you type is sent to an AI provider, and no comment is used to train anything.
AI coding tools were used while building and maintaining this site, and product descriptions may have been drafted or edited with their help. That means AI touched the code and the copy. It does not mean any visitor or member data was given to an AI provider, and none has been.
Members cannot upload files. The only files stored are product icons and screenshots uploaded by the site owner through the admin, and they live in a public storage bucket.
That is deliberate and necessary, because a browser has to fetch a product image without signing in, but it has a consequence worth stating plainly: anyone who knows or guesses a file's URL can open it. Nothing private is ever put there.
When a product is deleted from the admin, its icon and every one of its gallery images are deleted from that bucket in the same action, before the database row goes. Deleted means deleted, not hidden.
There is a button for it on your account page, and it does exactly what it says. Deleting your account removes the member record, every comment you have written and every like you have given, in a single database operation. There is no soft-delete, no archived copy and no thirty-day window in which it could be restored.
You can also delete any individual comment from that page, at any time, without deleting the account.
Server logs held by the hosting platform are outside this and expire on the platform's own schedule.
Depending on where you live you may have the right to ask what personal data is held about you, to have it corrected or erased, to object to its processing and to receive a copy of it.
For most of that you do not need to ask anyone: your account page shows everything held about you and the delete button erases it. For anything else, or for a copy in a portable format, write to no public contact address is set for this site yet. A request of this kind is answered within one month, which is the deadline the law sets rather than a target.
If you believe your data has been handled improperly you have the right to complain to a supervisory authority. Because this site is run from the Netherlands, that is the Autoriteit Persoonsgegevens, and you may also complain to the authority for the country you live in. Complaining does not require asking here first, though it is usually faster to.
Minecraft has a young audience, so this needs saying plainly.
Accounts on this site are for people aged 16 or over. If you are under 16, a parent or guardian has to agree to the terms before you make one. Everything except an account works without one: the whole catalogue can be read, browsed and downloaded by anybody, at any age, without signing in or being asked for anything.
This site does not knowingly create an account for a younger person without that permission, and it does not ask any visitor for their date of birth, so it has no way to check beyond taking your word for it. If you are a parent or guardian and believe a child has created an account here without your agreement, write to no public contact address is set for this site yet and it will be deleted, along with everything on it, without argument.
Comments are filtered automatically for abuse, obscenity and contact details, and posting a phone number, an email address or a link is refused outright, which is as much for the safety of younger members as it is against spam.
If this policy changes, the date at the top of the page changes with it. If the change is material, members are asked to accept the updated terms the next time they visit rather than being opted in quietly.
Questions about this page: no public contact address is set for this site yet.