Lunaris
← Back
Privacy Policy
Effective September 2026.
1. What this covers
This policy describes what Lunaris — the launcher, the website at lunarisdlc.xyz, and the account/license system behind them — collects, why, and what it doesn't do. It's not affiliated with Mojang or Microsoft.
2. What we collect
| Data | Why |
|---|---|
| Username & password | Your account login. Passwords are salted and hashed (PBKDF2) — we never store or see the plain password after registration. |
| License key & plan | Tracks what you're entitled to and when it expires. |
| Hardware ID (HWID) | A device fingerprint generated on first launch, used to enforce the one-device-per-license limit described in the Terms. |
| IP address | Recorded on login, registration and mod launch, for abuse prevention (rate limiting, HWID bans) and security logging. |
| E-mail (free key requests only) | Used once, to send the requested license key. Not tied to an account unless you later register with that address. |
| Session token & a random web ID | Kept in your browser's localStorage, never on our servers beyond the session record — this is what keeps you logged in on the website. |
3. What we don't do
- No ad networks, no third-party analytics, no tracking pixels.
- We don't sell or rent your data to anyone.
- No payment data is collected right now — Lunaris DLC is free, and card processing (Stripe) is disabled until that changes. If it's re-enabled, payment details go straight to the processor; we never see or store card numbers.
The only third party the site talks to is Google Fonts, to load the typefaces used on this page.
4. Retention
Account data is kept for as long as your account exists. Security logs (failed logins, rate-limit hits, banned HWIDs) are kept as long as needed to detect abuse. Free-key requests are recorded to enforce the one-key-per-e-mail limit even after the key itself expires.
5. Your choices
- Reset your device lock yourself from the dashboard (once every 30 days).
- Ask us to delete your account and associated data by contacting support — see below.
- Clearing your browser's local storage logs you out of the website; it doesn't touch your account.
6. Changes to this policy
If what we collect changes materially, we'll update this page before the change takes effect.
7. Contact
Questions about your data: write to [email protected] or reach us on Discord.