Vaultcraft Launcher privacy
Development disclosure · Published November 11, 2026 · Applies to the separate Windows Launcher 1.0 application, not to the Vaultcraft website or Discord admissions.
Who operates the launcher?
Vaultcraft is an independent Minecraft Java Edition community. Our current website is vaultcraft.org. For support, account requests, or privacy questions, use the Vaultcraft Help Center or our community Discord. The launcher is in development and is not publicly released as a finished product.
Microsoft authentication and ownership checks
Vaultcraft Launcher opens Microsoft's login flow in your system browser using OAuth 2.0 authorization-code authentication with PKCE. Passwords are entered with Microsoft, not into the Vaultcraft Launcher interface. The launcher exchanges authorization details with Microsoft's, Xbox's and Minecraft's authentication services and checks whether the signed-in account is entitled to play Minecraft: Java Edition. We do not provide a license bypass, cracked-account mode, or offline authentication bypass.
The current Minecraft Services AppID is pending approval. Authentication cannot be treated as successful while that permission is denied.
Information stored on your Windows device
- When sign-in succeeds, an OAuth refresh token is stored locally using the operating system credential manager; the launcher uses it to refresh the game session.
- The local launcher account file contains the Minecraft profile name and UUID.
- Game and Fabric versions, client mod files, cached release metadata, game logs and checked file hashes are stored in the dedicated launcher data directory.
These local sign-in tokens are not sent to Meridian or the Vaultcraft website. Minecraft and Microsoft services process authentication according to their respective policies. The launcher may pass a short-lived game authentication token to the Java game process so it can authenticate with Minecraft Services.
Diagnostics and support
The launcher can create a diagnostic ZIP locally. Its default technical summary covers launcher version, OS version and architecture, disk-space availability, and the installed game/release status. Optional recent Minecraft logs may be added to a local ZIP after a separate prompt; log contents can include server addresses and player-generated text, so review them before sharing.
A future Meridian diagnostic upload may send only a technical report after explicit opt-in. This upload service is not enabled for public use as of this disclosure; do not assume uploading works until its storage, retention, moderation and deletion process is documented and tested. No automatic upload of game chat, game logs, passwords or Microsoft refresh tokens is designed into Launcher 1.0.
Website and community accounts are separate
The Vaultcraft website uses Discord for member login and in-game Minecraft UUID verification for admissions. That process does not receive the launcher application's Microsoft sign-in credentials. For data collected by the site, admissions, Discord features and Meridian, see the general Vaultcraft Privacy Policy.
Control and retention
Launcher account data, game installations, diagnostic ZIPs and cached downloads are stored locally on your computer unless you choose to share a report. You can request help identifying and removing local launcher data through Vaultcraft support. Any future server-side diagnostic retention policy will be documented before intake is enabled. Existing website/account records follow the separate website privacy policy.
Security and third-party services
Release manifests are designed to require Ed25519 signature verification and file downloads are checked against declared SHA-256 digests. Full release certification, Windows code signing, and live Minecraft game authentication remain pending. No application can guarantee absolute security. Microsoft's and Minecraft's authentication services, and Cloudflare's website infrastructure, have their own applicable privacy terms.
Vaultcraft is an independent project not affiliated with or endorsed by Mojang Studios, Microsoft or Xbox.