Who is responsible for your data
- Controller
- Francisco Alexis Juárez Conca (Poxi)
- Tax ID (NIF)
- 29572752L
- Address
- Alcoy (Alicante), Spain
- Contact
- [email protected]
PoxiLauncher is a personal project run by an individual in Spain. For anything about your data, write to the email above.
On this website
This website has no forms, no sign-up, no analytics, no ads, no tracking cookies and no third-party content: even the fonts are served from here. The only things processed are:
- Server logs: the IP address, date and time, requested page and browser of each visit. They keep the website secure and help detect abuse. Legal basis: legitimate interest in the security of the service (art. 6.1.f GDPR). Deleted after 30 days.
- Cloudflare: the website is served through Cloudflare (protection and network delivery), which acts as a processor and handles your IP to protect the website from attacks.
- If you email us: your email address and your message, only to reply to you.
When you click Download or the code links, you go to GitHub, which processes your data under its privacy statement.
In the app: what data and why
You don’t need a PoxiLauncher account to play Minecraft. The social features (friends, chat, packs, the group world and “Join”) do need one, and then the following is stored:
- Your account: username, your password hashed with bcrypt (we never see it), when you signed up and the app version you use. So you can sign in and so we can run the service.
- Your profile: whatever you choose to add (display name, photo, banner, “about me”, status, colors). Your friends can see it.
- Your friends: your friends list, requests, the nicknames you set and who you’ve blocked.
- Messages: what you write in the chat (text, GIFs, stickers, invites, screenshots and clips). Only the members of each chat can see them.
- Minecraft: the packs you share (the list of Modrinth mods, not the files) and the group worlds uploaded so anyone in the pack can host them.
- Your status: whether you’re online and which instance or server you’re playing. Only your friends can see it, and it isn’t stored on disk.
- Reports: if you report someone or are reported, a copy of the message and the reason, so it can be reviewed.
- Technical data: the IP address of each connection (including when your friends join your game), only while it lasts and to limit abuse (sign-in attempts, spam). It isn’t stored in your account. We don’t store or look at what happens in your game.
What never reaches our server: your Microsoft session (stored encrypted on your PC), your Minecraft passwords, your instances, your mods, or the screenshots you don’t share.
Why we can process it
To provide the service you ask for when you create an account (art. 6.1.b GDPR) and our legitimate interest in keeping it secure and free of abuse (art. 6.1.f GDPR).
Minimum age
You must be 14 or older to create an account (art. 7 LOPDGDD).
Who we share it with
- Your friends: as described above.
- Cloudflare: the network the app’s connection to the server goes through (protection and delivery). It acts as a processor.
- KLIPY: when you search for a GIF, the search (not your account) is sent from our server to KLIPY.
- The app downloads Minecraft, Java and mods directly from Mojang, the loaders and Modrinth. Discord presence goes from the app to your Discord, on your PC.
We don’t sell your data or use it for advertising.
International transfers
- Cloudflare (Cloudflare, Inc., USA): may process data outside the European Economic Area. It is certified under the EU-U.S. Data Privacy Framework and also applies the European Commission’s standard contractual clauses.
- KLIPY: only receives the text you search for in GIFs, sent from our server, without your account or your IP.
- GitHub (GitHub, Inc., USA): only when you click Download or go to the code, under its own policy.
How long we keep it
- Your account, profile, friends and messages: until you delete your account.
- Chat screenshots and clips: deleted automatically after 30 days.
- Resolved reports: 12 months, to prevent repeated abuse.
- IP of app connections: only while the connection lasts.
- Website server logs: 30 days.
Your rights
You can access, correct, export, restrict, object to or ask us to delete your data.
- Delete your account yourself: in the app, My account → Danger zone. It’s deleted along with your friends, your messages and your photos.
- For anything else: email us at [email protected].
- If we don’t answer properly: you can file a complaint with the Spanish Data Protection Agency (aepd.es).
Changes to this policy
If anything important changes, we’ll update it here and the app will let you know.