Privacy Policy

Last updated 7 November 2026

1. Who is responsible

the Catalyst Client team is the controller of the personal data described here. Contact us about privacy at catalystclientsupport@gmail.com.

2. The launcher and client

Kept only on your computer (in the .visuals-launcher folder in your home folder, and the game folder): your settings, theme, memory and window choices, play time and session history, session pictures, battle pass progress, custom sounds and images, and installed mods. We do not receive any of it. You can delete it at any time from Settings or by deleting the folder.

Microsoft sign-in: you sign in on Microsoft's page. The launcher stores the resulting tokens and your Minecraft name and ID on your computer, and uses them only to talk to Microsoft, Xbox and Mojang services and to start the game as you - the game then uses them to join servers, as it does from Minecraft's own launcher. They never reach us. Microsoft's privacy statement applies to that.

Your Catalyst account: signed in, our server keeps your Minecraft name and ID, your coins and what you own, your friends, clan and messages, and what you wear. What you wear is shown to other Catalyst players: their game asks our server what the players around them wear, and draws it on you - only items your account owns, nothing else about you. Basis: providing what you asked for (Article 6(1)(b) GDPR). Kept while you use the account; delete it yourself at any time.

Redeeming a code sends the code and a random install ID (made by the launcher the first time you redeem, stored on your computer) to our server. We store the code's fingerprint with that install ID and the time, so a code cannot be used twice from the same install. Legal basis: providing what you asked for (Article 6(1)(b) GDPR). Kept for as long as the code exists.

Catalyst Bot on Home: a question you type is sent, with your last few questions and answers, through our server to Anthropic (Claude) to answer it. Not your name, not your account - and neither we nor the bot keep it after answering. Anthropic does not use it to train its models. The quick questions under the bot are answered on your computer and sent nowhere. Basis: providing what you asked for (Article 6(1)(b)).

Mods from Modrinth: when you browse or install mods, the launcher talks to Modrinth's servers directly, so Modrinth sees your IP address. Its own privacy policy applies; we receive nothing.

3. Catalyst Designs (this website)

• Designs you submit from the launcher: the image, your Minecraft name, the kind of design and the date. Used to review and show it. Basis: providing the service (Article 6(1)(b)). Kept until you ask us to remove it or we take it down; rejected designs are kept so a review mistake can be undone, and removed when we clear the queue or you ask. Before it is saved, the image and display name are checked automatically by Anthropic (Claude) for content that isn't allowed; a design that fails is refused and not stored, and every design that passes is still reviewed by a person. Basis: our legitimate interest in keeping the site safe (Article 6(1)(f)).
• Votes: a random ID in a cookie and which designs it voted for - never your name or IP address. Basis: our legitimate interest in fair voting (Article 6(1)(f)). Kept while the design is on the site.
• Reviewer sign-in: a session cookie for team members only.
• Server logs: our hosting and database providers log requests (IP address, browser, time) to run and protect the service. Basis: legitimate interest in security. Kept for the providers' standard periods, usually days to weeks.

Do not put personal information (like your real name) in a display name or design.

4. Cookies

Only these, each needed for something you ask the site to do - none for tracking, analytics or ads. Because they are strictly necessary, the site doesn't ask for consent with a banner:

• catalyst_voter - a random ID so one browser votes once per design. About a year.
• catalyst_voted - remembers on this browser that it has voted, so the page can show it. About a year.
• catalyst_session and catalyst_signed_in - keep the store signed in after the launcher opens it. Seven days, or until you sign out.
• catalyst_admin - only for reviewers, while signed in. Twelve hours.
• catalyst-recent (stored in your browser, never sent to us) - the store items you looked at last.

Fonts are served from this site itself, so visiting sends nothing to Google or other font services.

5. Who we share data with

We do not sell or rent personal data, and there is no advertising or analytics. We use these providers to run the service, under data processing terms:

• Netlify - hosts this website (United States).
• Supabase - stores Catalyst accounts, submissions, votes and redeem codes (servers in Frankfurt, Germany).
• Anthropic - checks submitted designs and answers Catalyst Bot questions (United States); keeps nothing for training.
• A payment provider - once payments open, it will process payments; we will name it here first.

Where a provider handles data outside the European Economic Area, the transfer is protected by the EU's Standard Contractual Clauses or an adequacy decision such as the EU-US Data Privacy Framework. We may also disclose data if the law requires it.

6. Your rights

Under the GDPR you can ask us to:

• tell you what we hold about you and give you a copy;
• correct it, or delete it;
• restrict how we use it, or object to uses based on legitimate interest;
• give it to you in a portable format.

Deleting your account: in the launcher, open Settings, then Account, and press Delete next to Catalyst account. To make sure it is you, the launcher asks for an email address and we send a six-digit code there; the address is used for that one email and not kept. With the code, your coins, items, battle pass, friends, clan membership, messages and designs are deleted from our server at once, and every sign-in of that account stops working. What the launcher keeps on your computer you delete yourself, from Settings or by deleting its folder. Server logs our providers keep run out on their own.

For anything else, write to catalystclientsupport@gmail.com. We answer within one month; tell us your Minecraft name so we can find your data. You can also complain to your local data protection authority - in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

7. Children

After you sign in with Microsoft, the launcher asks for your country and the month and year you were born. The answer stays on your computer - it is not sent to us. The launcher also reads the age group Microsoft gives your account (child, teen or adult) and whether its family settings allow chat and multiplayer; these stay on your computer too.

If you are under your country's age in the table below, or Microsoft lists your account as a child's, the launcher does not sign you in to a Catalyst account at all. We keep nothing about you on our server, so friends, chat, clans, the store, rewards and designs stay off; playing, mods and skins work as always, and the rest opens on its own once you reach that age. Under the age of majority, a parent or guardian makes any purchase. Countries not listed use 16.

If you think a child has given us personal data, delete the account from the launcher, or contact us and we will delete it.

8. Security

Data on our servers is only reachable through our own server code; the database refuses direct access, uploaded designs are private until approved, and redeem codes are stored only as fingerprints. No system is perfectly secure, but we will tell you and the authorities about a breach where the law requires.

9. Changes

If Catalyst starts collecting something new, this policy changes first, and the date at the top changes with it. See also our Terms of Service.