Misaka Launcher

Privacy Policy隐私政策

Last updated: 20 October 2026 · Applies to the Misaka Launcher desktop application 最后更新：2026 年 10 月 20 日 · 适用于 Misaka Launcher 桌面应用

1. Summary1. 摘要

Misaka Launcher runs entirely on your computer. There is no account system, no telemetry and no analytics. Credentials obtained during sign-in are stored on your machine and are never sent to any server operated by this project. Misaka Launcher 完全在你本机运行。没有账号系统、没有遥测、没有统计。登录获得的凭据只保存在你的机器上，不会发送到本项目运营的任何服务器。

2. What the launcher handles2. 启动器处理哪些数据

• Microsoft account data. When you choose “Sign in with Microsoft”, the launcher performs an OAuth 2.0 authorization-code flow with PKCE in your system browser. The resulting Microsoft access token and refresh token, the Xbox Live and XSTS tokens derived from them, and the Minecraft access token are stored locally so you do not have to sign in again on every launch. 微软账号数据。 选择「使用微软登录」时，启动器在你的系统浏览器中完成 OAuth 2.0 授权码（+ PKCE）流程。得到的微软访问令牌与刷新令牌、由此派生的 Xbox Live / XSTS 令牌，以及 Minecraft 令牌，都只保存在本机，以免每次启动都要重新登录。
• Player profile. The player name, UUID and skin that the Minecraft services endpoint returns for that account, used to display your profile and to start the game. 玩家档案。 Minecraft 服务端返回的玩家名、UUID 与皮肤，用于展示个人信息与启动游戏。
• Offline and third-party accounts. If you add an offline account, only a username and a locally generated UUID are stored. If you sign in to a third-party skin site, the session token issued by that site is stored locally. 离线账户与第三方账户。 添加离线账户时只保存用户名与本机生成的 UUID；登录第三方皮肤站时，只在本机保存该站点签发的会话令牌。
• Local settings and logs. Launcher settings, instance configuration and log files, all kept in the launcher's own data directory. 本地设置与日志。 启动器设置、实例配置与日志文件，均保存在启动器自己的数据目录中。

3. What is not collected3. 不收集什么

• Your password. Sign-in happens on Microsoft's own pages; the launcher never renders a password form. 你的密码。登录发生在微软自己的页面上，启动器从不渲染密码表单。
• Your email address, contacts, calendar or any other Microsoft account data. 你的邮箱地址、联系人、日历或任何其他微软账号数据。
• Usage statistics, crash telemetry, device identifiers or advertising identifiers. 使用统计、崩溃遥测、设备标识或广告标识。
• Any data sent to servers operated by this project — no such servers are used for account data. 任何发往本项目运营服务器的数据 —— 本项目没有用于账号数据的服务器。

4. Where data is stored4. 数据保存在哪里

Everything is stored in the launcher's data directory on your computer. On Windows, account tokens are encrypted with DPAPI (per-user encryption). On other platforms the account file is protected by operating-system file permissions. Deleting an account in the launcher deletes its stored tokens; deleting the data directory removes everything the launcher ever stored. 全部数据都保存在你电脑上启动器的数据目录中。Windows 上账号令牌使用 DPAPI（按用户加密）保护；其他平台依靠操作系统文件权限。在启动器中删除账户会同时删除其令牌；删除数据目录即清除启动器保存过的一切。

5. Logs5. 日志

The launcher writes local log files to help diagnose crashes. Authorization codes, access tokens, refresh tokens and passwords are redacted before anything is written; the game's command line is redacted as well. Log files are rotated by size and age. You can delete them at any time. 启动器会写本地日志以便排查崩溃。授权码、访问令牌、刷新令牌与密码在写入前即被脱敏，游戏命令行同样会被脱敏。日志按体积与天数轮转，你可以随时删除。

6. Network connections6. 网络连接

The launcher contacts the following services, only for the stated purpose: 启动器只会为下列目的访问这些服务：

• login.microsoftonline.com — Microsoft sign-in (authorization code + PKCE, loopback redirect).微软登录（授权码 + PKCE，回环回调）。
• user.auth.xboxlive.com, xsts.auth.xboxlive.com — Xbox Live authentication.Xbox Live 认证。
• api.minecraftservices.com — obtaining the Minecraft token, verifying game ownership, reading the player profile.获取 Minecraft 令牌、校验正版拥有情况、读取玩家档案。
• Mojang's public metadata and asset endpoints, plus community mirrors — downloading and verifying game files.Mojang 的公开元数据与资源地址，以及社区镜像 —— 下载并校验游戏文件。
• api.modrinth.com, api.curseforge.com — mod, modpack and resource pack search, only when you use the download center.模组 / 整合包 / 资源包检索，仅在你使用下载中心时访问。
• github.com — the launcher's own update check, if enabled.启动器自身更新检查（若启用）。
• A mod-sync server, only if you configure one yourself; it is disabled by default and points at 127.0.0.1.模组同步服务器，仅当你自行配置时才会连接；默认关闭且地址指向 127.0.0.1。

7. Third-party services7. 第三方服务

Signing in with Microsoft, downloading from Modrinth or CurseForge, and using a third-party skin site are subject to those providers' own privacy policies. This project does not control them and does not receive any data from them. 微软登录、从 Modrinth / CurseForge 下载、使用第三方皮肤站，均适用各自提供方的隐私政策。本项目既不控制这些服务，也不会从中获取数据。

8. Children8. 未成年人

The launcher is not directed at children under 13. Sign-in requires a Microsoft account, which is subject to Microsoft's own age requirements. 本启动器不面向 13 岁以下儿童。登录需要微软账号，适用微软自身的年龄要求。

9. Changes9. 变更

If this policy changes, the updated version will be published on this page with a new “last updated” date. Because the launcher stores nothing remotely, changes only ever affect what is written locally on your machine. 本政策如有变更，会更新本页内容与文首的「最后更新」日期。由于启动器不在远端保存任何数据，变更只会影响写在你本机上的内容。

10. Contact10. 联系方式

Questions or requests about this policy can be raised at github.com/MisakaMikoto19/MisakaLauncher/issues. 关于本政策的疑问可提交至 github.com/MisakaMikoto19/MisakaLauncher/issues。