In short
- Your accounts, settings and game files stay on your computer. None of it is sent to Qore.
- The launcher talks to Microsoft to sign you in, to Mojang for the game, to Modrinth for mods and to the few other services listed below, only to do what you ask.
- No usage statistics, no crash uploads, no ads, no tracking. We don't sell or share your data.
- We hold no personal data about you on our servers in this version.
- Deleting the launcher's data folder removes everything it kept.
01 Who we are
Qore Launcher ("the launcher") is a desktop app published by Qore Games, 9 rue des colonnes, Paris, France ("Qore", "we", "us"). We are the controller, under the EU General Data Protection Regulation (GDPR), for the processing this policy describes.
You can reach us at games@qore.group.
This policy covers the launcher only. The games and servers you play through it, and the services it connects to (listed in section 3), have their own policies.
02 What stays on your computer
The launcher keeps the following on your computer, and nowhere else:
- Your accounts list: each account's Minecraft username, UUID, skin and cape addresses, and which account is active. No passwords: you sign in on Microsoft's own page in your browser, so the launcher never sees yours.
- Sign-in tokens (a Microsoft refresh token and a Minecraft access token): encrypted, with the key kept in your system's keychain (Windows Credential Manager, macOS Keychain, or the Secret Service on Linux). Where your system has no keychain, they are kept in a file only your user account can read.
- Your settings and instances: game files, mods, worlds, screenshots, logs and crash reports.
- Caches (game metadata, icons), the window's position and the launcher's own log.
- In developer mode, if you turn it on: your local servers, their worlds and logs, snapshots, test clients and the Dev MCP token.
None of this is sent to Qore. Removing an account from the launcher deletes its tokens. Deleting the launcher's data folder (Settings › About shows where it is) removes all of it.
03 What leaves your computer, and to whom
To do its job, the launcher connects straight from your computer to the services below. Each of them sees your IP address, as with any connection on the internet, and handles what it receives under its own privacy policy.
| Recipient | When | What they receive |
|---|---|---|
| Microsoft and Xbox Live login.microsoftonline.com, user.auth.xboxlive.com, xsts.auth.xboxlive.com | When you sign in, and when your sign-in is refreshed. | The sign-in exchange (OAuth). You sign in on Microsoft's own page; the launcher never sees your password. |
| Mojang (Minecraft services) api.minecraftservices.com | When you sign in, when your sign-in is refreshed, and before you play. | Your Minecraft token, to check that you own the game and to get your profile (name, UUID, skin). |
| Mojang (downloads) piston-meta.mojang.com, libraries.minecraft.net, resources.download.minecraft.net | When a version of the game, or Java, is installed or updated. | Plain file downloads. |
| Eclipse Adoptium api.adoptium.net | Only when Mojang has no Java for your system. | A Java download. |
| Fabric and Quilt meta.fabricmc.net, maven.fabricmc.net, meta.quiltmc.org, maven.quiltmc.org | When you install these mod loaders. | Requests for their metadata, and file downloads. |
| Modrinth api.modrinth.com, cdn.modrinth.com | When you browse, install or update mods, modpacks, resource packs, shaders and data packs. | Your searches and filters; the SHA-1 and SHA-512 hashes of the mod, resource pack and shader files in your instances, to recognize them and find their updates; downloads. |
| Qore api.qore.games | When the Home and Servers screens load. | Requests for the list of Qore's games and the news. No account data. |
| Minecraft servers | For the servers in your list, Qore's games, and when you join one. | A status ping, which shows the server your IP address, as the game's own server list does; DNS SRV lookups to find the server. |
| Discord the Discord app on your computer | While the game runs, if "Discord status" is on (it is by default; Settings › Privacy turns it off). | What you're playing (the instance's name, the game version, the server), sent to the Discord app on your computer through its local connection, which shows it on your Discord profile. |
| PaperMC, Mojang, Fabric, Modrinth and GitHub fill.papermc.io and the hosts above | Developer mode only: when you create dev servers, add plugins or set up Foreman. | File downloads. |
| AI agents you connect | Developer mode only, and only if you connect an agent to the Dev MCP (on your computer, with its token). | Whatever the agent asks the Dev MCP for: server consoles, logs, files, test clients. The agent's own provider and terms apply. |
Every request the launcher makes carries the same User-Agent, qore-launcher/<version> (+https://qore.games), which holds no personal data.
Their own policies apply to what these services receive: Microsoft's (for Microsoft, Xbox and Mojang), Modrinth's, Discord's and GitHub's; for the Eclipse Foundation (Adoptium), PaperMC, Fabric and Quilt, see their websites.
04 What we don't collect
- No usage statistics. There is a "Usage data" setting in Settings › Privacy. It is off by default, and in this version nothing is sent even if you turn it on: the feature isn't built yet. Before it sends anything, this policy will say exactly what.
- No crash uploads. Crash reports and logs stay on your computer. We only see one if you send it to us.
- No ads, no tracking. We don't sell your data, and we don't share it with anyone.
- No Qore account. You sign in with your Microsoft account only. There are no Qore accounts, friends or online presence in this version.
05 Legal bases
Most of what the launcher does never reaches us: it happens on your computer, or between your computer and the services in section 3. Where the GDPR applies to what we do, we rely on:
- Our contract with you (Article 6(1)(b)): running the launcher as you ask, which means signing you in, installing and starting the game, finding mods and their updates on Modrinth, and showing your servers' status.
- Our legitimate interests (Article 6(1)(f)): showing Qore's games and news on the Home and Servers screens (you can hide Qore's games in Settings › Home), showing what you play on Discord (on by default, off in Settings › Privacy, "Discord status"), and answering you when you write to us.
- Your consent (Article 6(1)(a)): for anything that stays off until you turn it on and sends data, such as usage statistics once they exist. You can withdraw it at any time, in the same place.
Developer mode and the AI agents you connect to it are your own choice: what an agent reads goes to that agent and its provider, not to us.
06 How long data is kept
- On your computer: until you delete it. Removing an account deletes its tokens; deleting the data folder removes everything.
- On our servers: we hold no personal data about you in this version. The requests for Qore's games and news carry no account data.
- When you write to us: we keep your message, and whatever you send with it (a log, a crash report), only as long as we need to help you and follow up.
- With the services in section 3: their own retention rules apply.
07 International transfers
We don't transfer your data anywhere: the launcher connects straight from your computer to the services in section 3. Some of them are run from outside the European Union, notably from the United States. They handle what they receive, and any transfer of it, under their own policies and safeguards.
08 Your rights
Under the GDPR and French law, you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing (including processing based on our legitimate interests), to receive it in a portable format, to withdraw your consent at any time, and to give instructions about what happens to it after your death.
Since the launcher keeps your data on your computer, you can see, change and delete most of it yourself: remove an account, change a setting, or delete the data folder. For data a service in section 3 holds (your Microsoft account, Discord, Modrinth), ask that service.
For anything else, write to games@qore.group. We answer within one month, and may ask you to show that the request is yours.
If you think we haven't respected your rights, you can complain to the CNIL (Commission nationale de l'informatique et des libertés), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr, or to the data protection authority of the country where you live.
09 Children
The launcher doesn't ask for anyone's age, and it collects nothing about anyone, children included. To play, a child needs a Microsoft account that owns Minecraft: Java Edition; Microsoft's own rules for children's accounts apply to that account.
10 Security
- Your password never reaches the launcher: you type it on Microsoft's page.
- Sign-in tokens are encrypted, with the key in your system's keychain; without a keychain, they're in a file only your user account can read.
- Downloads are checked before they're used.
- In developer mode, the Dev MCP only listens on your own computer (127.0.0.1), and an agent needs its token to use it.
No system is perfectly secure. Keep your computer up to date, and protect your Microsoft account with a strong password and two-step verification.
11 Changes to this policy
When the launcher changes what it sends or to whom, we update this page before that version ships, and change the date at the top. That includes features the launcher doesn't have today, such as usage statistics. If a change needs your consent, nothing is sent until you give it.
12 Contact
Questions about this policy or your data:
Qore Games
9 rue des colonnes, Paris, France
games@qore.group