Privacy Policy

Last updated 12 September 2026

This policy explains what AshFall ("we", "us") collects when you visit this website, buy a licence, and use the AshFall loader and client (the "Software"), and what we do with it. It is written to be read; if anything is unclear, ask us.

1. This website

This website sets no cookies of its own, runs no analytics, and loads no third-party scripts except Paddle's checkout script on the purchase page. Our web server keeps standard access logs (IP address, requested page, browser identification, time) for security and debugging, rotated after 30 days.

2. Buying a licence

Checkout is provided by Paddle, the merchant of record. Paddle collects your email address, country, postal code where required for tax, and payment details, and processes them under Paddle's privacy policy. We never see your card number.

From each purchase we receive: the Paddle order and customer identifiers, your email address, your country, the amount and tax, and the Discord user ID you enter on our purchase page. We use these to create your licence and to answer support requests about the order.

3. The loader and the client

The Software is licensed per person and per machine, and enforcing that requires the loader to identify the machine and the account it is running for. When you sign in and while the client runs, the loader sends us:

• your Discord account identifier and Minecraft account identifier (UUID) and username;
• a machine identifier derived from hardware and operating-system characteristics;
• your IP address;
• operating system, Java and client version, and basic hardware configuration;
• licence status, session start and end times, and records of licence transfers and machine resets.

The exact hardware characteristics used are not published, and may change, because publishing them would defeat their purpose. This collection cannot be switched off: a licence cannot be validated without it, so the Software cannot be used if you withhold it (terms, section 4.6).

The client does not read, store or transmit your Minecraft or Microsoft credentials to us. Account sessions the client manages on your behalf are held encrypted on your own machine (terms, section 4.10).

The client does not collect your chat messages, keystrokes, screen contents, files, or anything from other programs.

4. What we use it for

• Creating, validating and enforcing licences, including the one-machine rule and transfer limits.
• Detecting shared, resold, pirated or tampered licences and loaders.
• Providing support and processing refunds under the refund policy.
• Operating, securing and improving the Software.

We do not use this data for advertising, do not build profiles for marketing, and do not sell or rent it to anyone.

5. Who else sees it

• Paddle, for payment, tax, receipts and refunds.
• Discord, if you interact with us through it; Discord's own privacy policy applies to what you post there.
• Our hosting provider, which stores the licence server and its data on our behalf.
• Optional features of the client that talk to third-party services (for example music or lyric lookups) exchange data with those services directly under their policies, only while you have that feature enabled.

We disclose data beyond this only where the law requires it.

6. How long we keep it

Licence records, including the identifiers they are bound to, are kept for as long as the licence exists and for a period after it is revoked or transferred, so that a revoked licence cannot be re-issued and a transfer cannot be reversed. Session and access logs are kept for 90 days. Purchase records are kept for as long as tax law requires.

7. Your rights

Depending on where you live you may have the right to access, correct, or delete personal data we hold, or to object to or restrict its processing. You can exercise these by contacting us as below. Note that deleting the identifiers a licence is bound to means the licence can no longer be validated, which ends your ability to use the Software; and that we may retain what is needed to enforce a revocation or to comply with tax law.

8. Security

Data in transit between the loader, the client, this website and our servers is encrypted with TLS. Access to the licence server is restricted to the people who operate it. No system is perfectly secure; if we learn of a breach affecting your data we will tell you.

9. Children

The Software and this website are not directed at children under 13, and we do not knowingly collect data from them. Purchases require you to be 18 or to have a parent or guardian's consent.

10. Changes

We will update this page when what we collect or how we use it changes, and update the date at the top. Continued use of the Software after a change is acceptance of it.

11. Contact

, or the AshFall Discord.