Discord Download

Privacy Policy

Last updated: 19 Oct 2026

Operator and data controller: nezávislý projekt Hiro Client (kontakt níže) / independent Hiro Client project (see contact below)

Website hiroclient.eu

The website uses no advertising or third-party analytics. For security (protection against attacks and bots) we process your IP address, browser headers and, when verification is required, a simple browser-environment fingerprint. This data is only used to protect the site, is kept in server memory for a short time and is never sold. A message sent through the contact form (name, email, text) is used only to reply. The site runs behind Cloudflare, which processes traffic under its own terms.

Client and online features

When you log in, online features process:

  • Your Minecraft username and UUID. Your Minecraft access token goes only to Mojang's servers, never to us.
  • Presence: UUID, the server address you are playing on (or "menu"/"singleplayer") and the client version. Sent roughly every 30 seconds and kept only in server memory, not in the database.
  • UUIDs of players in your tab list, so the client can find other Hiro users. The server only returns matches for the players asked about, never a full list.
  • Friends, privacy settings, shared profiles (only when you share one) and chosen cosmetics and tints.
  • Your last known IP address (admin only, used to handle abuse, overwritten at next login).

Chat

Chat is end-to-end encrypted (X25519, HKDF-SHA256, AES-256-GCM). Your private key stays on your computer. The server stores only the public key and ciphertext and cannot read messages. Deleted messages are removed from the server.

Crash reports

After a game crash the launcher sends (on by default, can be turned off in Launcher Settings): launcher and Minecraft version, OS name, exit code, a short summary and the tail of the game log, the newest crash report and hs_err file. Before sending, the launcher scrubs tokens, UUIDs, your Windows user name and paths, your player name, email addresses and IPv4 addresses. Reports are sent only while logged in. We keep crash reports for 90 days.

What we do not send

No hardware or GPU telemetry, no analytics and no usage tracking.

Third-party services

The launcher and client talk directly to: Microsoft/Xbox Live and Mojang (login, skins, capes), Modrinth (mods), FabricMC and Adoptium (Fabric loader, Java), mc-heads.net (head images), Google Fonts (font) and jsDelivr (Twemoji). Depending on features you use, also lrclib.net, api.lyrics.ovh and iTunes Search (lyrics and album art), Spotify (only if you connect it) and Twitch/YouTube/Kick/TikTok (only if you set up Stream Chat). These services have their own privacy policies.

Payments

Cosmetics are currently offered through a Discord ticket. We tell you the payment details at purchase. We never store card details on our servers.

Your rights

You have the right to access, rectification, erasure, restriction, portability and objection, and to lodge a complaint with a supervisory authority. Send requests through the contact below.

Children

Minecraft requires a Microsoft account, and the Service is meant for users who may lawfully hold one. If you believe a child has sent personal data without parental consent, contact us and we will delete it.

Contact