The short answer
Yes, the build on our site is safe. But do not take that on faith: here is exactly what safety means for an APK download, what we check, and how to spot a dangerous copy anywhere else.
The build discussed here is the one on the Lovely Craft: the current build, ~44 MB, package com.lovelycraft.pistontrap.
What we verify before publishing
Every build on the download page clears the same gauntlet. The file is scanned for malware, its signature is checked for tampering, and then our reviewer installs it on real Android phones and plays it for hours. Version, size and permissions are read from the actual file, not copied from a description. The full protocol is on our how we review page.
Permissions: what is normal
the game asks for storage (your worlds have to live somewhere) and network access (for multiplayer sessions). That is the complete list a block builder needs. Treat any copy that asks for contacts, SMS, microphone or location as hostile and delete it.
Red flags in the wild
Fake copies usually arrive as mod menus promising free premium blocks, or as re-uploads on forums with names like lovely-craft-mod-unlimited.apk. They are the number one source of infected game files on Android. If a file is not the ~44 MB XAPK with package com.lovelycraft.pistontrap, do not install it.
The honest risks
No download is zero-risk. Sideloading bypasses Play Protect's front door, so your safety net is the source. Stick to verified sources, keep a backup of your worlds, and you get all of the game with none of the drama. This site always describes the exact file you are getting, byte for byte.