Privacy policy

Your Microsoft account

You sign in through Microsoft’s device code page in your own browser, so your password never reaches the launcher. Microsoft gives the launcher a token for Xbox Live, which it exchanges with Xbox and Minecraft services for your Minecraft profile (name, UUID, skin and cape) and a game token.

The tokens are stored only on your computer, encrypted with your operating system’s keychain. On a Linux system without a keychain they are stored unencrypted in the launcher’s folder. Signing out removes them.

What stays on your computer

Instances, mods, worlds, backups, screenshots, settings and play time live in the launcher’s folder on your computer. None of it is uploaded.

Services the launcher talks to

Microsoft, Xbox Live and Minecraft services, to sign you in and check that you own the game. Mojang’s servers, to download the game, its libraries, assets and Java, and to show skins and capes. The Skybox release list, to download Skybox Client. Fabric, Forge, NeoForge and Quilt, to download loaders. Modrinth, to search for and download content, and to recognise mod files by their hash; requests identify the launcher by name and version. GitHub, to check for and download launcher updates.

When you open a server’s status or join it, the launcher connects to that server the way the game does. When you choose to upload a log, it is sent to mclo.gs and gets a public link; logs can contain your username and folder paths, and the launcher asks first.

This website

skybox.hamaj.dev is hosted by Vercel, which keeps standard server logs. The site sets one cookie, only to remember the language you chose. There are no analytics, ads or third-party trackers.

Children

The launcher uses your existing Microsoft account and does not collect information from anyone, including children.

Changes

If this policy changes, the new version will be published on this page with a new date.