Safety

Privacy and data

Exactly what the launcher sends, when, and how to switch it off.

This page is the complete list. There is no other telemetry, no analytics SDK, no crash reporter that sends without asking, and no advertising identifier anywhere in the launcher.

What is sent, and when

EventWhenWhat is in it
Launch report When the launcher starts, before any game boots A random installation id, the launcher version, the operating system and architecture, and the country your IP resolves to. It also carries the Minecraft name and UUID of the signed-in account unless you turn that off.
Install report Once, when a version finishes installing The installation id, the Minecraft version, and the loader.
Summary report Occasionally, when the launcher is open The installation id and aggregate counts such as total launches. No per-session history.
What is never sent

Your session token or any credential. Your worlds, screenshots, chat or server addresses. Your file paths, your mods folder, or the contents of any file. The list is enforced in code: the payload is checked before it is queued, and a payload containing anything shaped like a token or a key is refused and logged rather than sent.

Turning it off

  • Usage data — Settings → Privacy. Off means nothing is queued at all, not queued and unsent.
  • Account name in the launch report — a separate switch. With it off, the report says the account was withheld, so the server can tell "this player said no" apart from "nobody is signed in".
  • Crash reports — the launcher analyses your crash log locally and shows you the result. Sending it anywhere is a separate, deliberate action you take per crash.

The assistant

The assistant in the corner of the launcher runs on the launcher's own model access, so there is no account of yours and no key to paste. When you ask it something, it is sent:

  • your question;
  • the name of the page you are looking at, so "why is this empty?" has a chance of making sense;
  • the last few turns of the conversation, capped.

It is not sent: your files, your account, your screen, your server list, your worlds, or anything else about your machine. Scan explanations send the findings and the matched strings, never the jar. Both have their own switches in Settings → Privacy.

Where your data lives

Everything the launcher knows is in %APPDATA%\DonutLauncher: settings, accounts, instances, play statistics, scan history and accepted terms. Deleting that folder resets the launcher completely. Nothing is mirrored to a server, so there is no copy to delete elsewhere.

Your data, in full

The launcher has a diagnostics action that writes a report to a file you choose — system information, the channel list and the tail of the launcher log. It is a file on your disk. You decide whether to send it to anybody, which is the only way a support request should work.