01The short version
- We keep only what StrixV5 needs to work: your account, your license, hashes of your hardware, and short-lived logs.
- No ads, no analytics, no tracking pixels, no fonts or scripts from other sites.
- We do not sell your data. Three outside services are used on your behalf: Mojang's, to check your Minecraft account, Resend, to deliver our emails, and OxaPay, to take payments.
02Your website account
- Account name, which staff and you can see.
- Password, stored only as a salted scrypt hash. We cannot read it.
- Sign-in sessions: a random token in a cookie, kept on our side only as a hash, for up to 30 days.
- Your license key, encrypted, so you can read it again on your account page.
- Email address, for password resets and our answers. It counts as yours once you open the link we send to it; until then it is kept as unconfirmed. Links in our emails work once and expire (48 hours to confirm, 1 hour to reset a password).
- Join date and the licenses on your account.
- Messages you send us through the contact page: the email address you give, the message, your account name if you were signed in, and our answers. They are deleted 90 days after we close them.
03Payments
- Orders. When you buy a plan we keep the order: your account, the plan, the price, its status, the license it gave and OxaPay's payment ID. We keep them as long as your account exists, and for as long as tax or accounting rules need us to.
- OxaPay runs the payment page. It receives the amount, our order ID and, if your account has one, your email address for the receipt. What you enter on its page and your wallet or transaction details are handled by OxaPay under its own privacy policy.
- We never see or store card numbers, wallet keys or seed phrases.
04The launcher and your license
- Hardware hashes. When you activate a key, the launcher sends SHA-256 hashes of a few hardware identifiers. We get the hashes, not the identifiers, and use them only to recognise your devices.
- License log. Activations, downloads and failed checks are logged with the time and your IP address, to spot keys that are being shared. These entries are deleted after 90 days.
- Your key is stored as a hash in the license database.
05In-game features
- Minecraft account. Cosmetics, friends, chat and config sharing need to know who you are in game. Your client proves it the same way it does when joining a server: our server asks Mojang's session server to confirm your name and gets your account ID. We never see your Microsoft login.
- Which server you play on is never sent to us. The client sends a one-way hash, so players on the same server can find each other while we cannot tell which server it is.
- Friends and chats. Your friend list and settings are kept while you use them. Chat messages are deleted after 30 days.
- Shared configs keep the settings you chose to share, their name and tags, and your Minecraft name unless you share anonymously. On/off states and keybinds are never part of a config.
07How we use it
Only to run StrixV5: to sign you in, check your license, deliver the launcher and its features, run the in-game features, stop abuse such as key sharing, and answer you when you contact us. We do not use your data for advertising or profiling.
08Who can see it
The owner and the admins they name can see account names, email addresses, contact messages, licenses and their status, and the device count on each key. They cannot see passwords or hardware hashes. Every staff action is logged and reviewed by the owner.
Emails we send go through Resend, which receives the address, the subject and the text of each email in order to deliver it. Payments go through OxaPay, as described above. Otherwise we share data only when the law requires it. Our server is run by a hosting provider who stores it but does not use it.
09Security
Passwords are hashed, keys are hashed or encrypted, traffic is encrypted, and the features the launcher downloads are signed so a tampered server cannot push code to you. No system is perfect; if we learn of a breach that affects you, we will tell you.
10Your rights
You have the right to ask for your personal data to be deleted, at any time. Send the request through the contact page, signed in to the account it is about, or from the email address confirmed on it. We delete the account and the data tied to it; deleting an account also ends any license on it.
You can also ask us to show you what we hold about you, or to correct it. Some records may be kept for a limited time where we need them: the license log until it expires on its own, to prevent abuse, and order records for as long as tax or accounting rules require.
11Children
StrixV5 is not meant for children under 13. If you believe a child under 13 has an account, contact us and we will remove it.
12Changes to this policy
If what we collect or how we use it changes, we will update this page and its date, and say so on the site when the change matters.
13Contact
Privacy questions or requests: write to us on the contact page.