Privacy Statement
Last updated 10 September 2026
This statement explains what Simon Jacobsen collects when you use ash, why, and what we do not collect. It applies to the ash launcher, the ash client and this website.
What we collect
When you sign in
ash signs you in through Microsoft. We receive your Minecraft profile UUID and username. We use the UUID to identify your ash account and to show the right cosmetics in game.
We never receive your Microsoft password. Sign-in happens on Microsoft’s own pages, in your browser.
Authentication tokens
The tokens that keep you signed in are stored on your own computer, in the operating system credential store. They are not transmitted to us and we cannot read them. Signing an account out of ash deletes them.
Settings and preferences
If you turn on settings sync, we store your ash settings so they follow you between machines. Settings specific to one machine — memory allocation, file paths, window size — stay on that machine and are never sent to us.
Purchases and entitlements
If you buy something, we record which items your account is entitled to. Payments are handled by our payment provider; we do not receive or store your card details.
Diagnostics
ash writes log files on your computer to help diagnose problems. They stay on your computer unless you choose to send one to us. Tokens and credentials are removed from logs as they are written, not afterwards.
What we do not collect
- Your Microsoft password.
- Your Minecraft worlds, saves or screenshots.
- Which servers you play on, or what you do on them.
- Your chat messages.
- Anything from your computer outside ash’s own directories.
ash contains no advertising, no third-party analytics and no behavioural tracking. We do not sell personal data, and we do not share it for advertising.
Why we are allowed to process it
We process your profile UUID and username because we need them to provide ash to you — without them there is no account. We process purchase records to meet our legal and accounting obligations. Settings sync is optional, and we process those settings only because you turned it on; you can turn it off at any time.
Who else is involved
- Microsoft authenticates you. Their handling of your data is governed by the Microsoft Privacy Statement.
- Mojang provides the game files ash downloads, directly to your computer.
- Our hosting and payment providers process data on our instructions only, and may not use it for their own purposes.
We do not otherwise disclose your data, except where we are legally required to.
How long we keep it
We keep your account data for as long as your account exists. If you delete your account we erase it, other than records we must keep for legal or accounting reasons. Diagnostic logs you send us are deleted within 90 days.
Security
Data is encrypted in transit. Access is limited to people who need it. Authentication tokens stay on your own machine in the OS credential store, which is the main reason a compromise of our systems cannot be used to sign in as you.
Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email contact@ashlauncher.com and we will respond within 30 days. If you are unhappy with our response you may complain to your local data protection authority.
Children
ash is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has provided us data, email us and we will delete it.
Changes
If we change this statement we will post the new version here and update the date above. If a change materially affects how we use your data, we will tell you in ash before it takes effect.
Contact
Simon Jacobsen — contact@ashlauncher.com
Not an official Minecraft product. Not approved by or associated with Mojang or Microsoft.