Privacy Policy

This policy explains what data the Cyrene Launcher application and this website (together, “the Service”) collect, why, and what we do with it. The short version: we collect the minimum needed to run accounts and presence, we never see your passwords, and we don't sell anything.

1. What we collect

• Sign-in profile. When you sign in with Discord or GitHub we receive your public profile from that provider: display name, avatar, and (if the provider shares it) email address. We never see or store your provider password. Your display name and avatar are refreshed from the provider each time you sign in.
• Email and password. If you register with an email address, we store the address and a salted scrypt hash of your password. The password itself is never stored and cannot be recovered from the hash.
• Registration address. We record the network (IP) address an account was created from, and check it against existing accounts, to enforce one account per person.
• Launcher telemetry. When the launcher is linked to your account it periodically reports its version, operating system name, and a last-seen timestamp. This powers the online indicator and helps us support old versions. No game data, file paths, or hardware identifiers are collected.
• Account records. Account status, role, the invite code you redeemed (if any), and session data needed to keep you signed in.
• Technical logs. Our hosting provider (Vercel) keeps standard request logs, including IP addresses, for a limited time for security and abuse prevention.

2. What we don't collect

• No passwords — authentication is handled entirely by Discord/GitHub.
• No game saves, chat logs, or in-game behavior.
• No advertising identifiers, no tracking pixels, no third-party analytics.

3. How we use it

Data is used solely to operate the Service: signing you in, linking your launcher, showing online status, enforcing registration rules, and moderating abuse. We do not sell, rent, or share your data with anyone, except as required to host the Service (our database and hosting providers) or by law.

4. Cookies

We use a single session cookie to keep you signed in. No advertising or cross-site tracking cookies are set.

5. Storage and security

Data is stored in a managed PostgreSQL database. Launcher tokens are stored only as cryptographic hashes — the plain token never leaves your machine, where it is encrypted at rest. Access to production data is limited to project maintainers.

6. Your rights

You can view your data on your profile page. To delete your account and all associated data, contact us on Discord — deletion is permanent and processed within a reasonable time. Signing out of the launcher revokes its token immediately.

7. Changes

We may update this policy as the Service evolves. Material changes will be announced on the website.