Privacy Policy

Last updated 25 September 2026

1. Who is responsible

the Catalyst Client team is the controller of the personal data described here. Contact us about privacy at the team's contact address (being set up - it will be listed here).

2. The launcher and client

Kept only on your computer (in the .visuals-launcher folder in your home folder, and the game folder): your settings, theme, memory and window choices, play time and session history, session pictures, daily reward and battle pass progress, coins and items, custom sounds and images, and installed mods. We do not receive any of it. You can delete it at any time from Settings or by deleting the folder.

Microsoft sign-in: you sign in on Microsoft's page. The launcher stores the resulting tokens and your Minecraft name and ID on your computer, and uses them only to talk to Microsoft, Xbox and Mojang services. Microsoft's privacy statement applies to that.

Redeeming a code sends the code and a random install ID (made by the launcher the first time you redeem, stored on your computer) to our server. We store the code's fingerprint with that install ID and the time, so a code cannot be used twice from the same install. Legal basis: providing what you asked for (Article 6(1)(b) GDPR). Kept for as long as the code exists.

Catalyst Bot on Home: a question you type is sent, with your last few questions and answers, through our server to Anthropic (Claude) to answer it. Not your name, not your account - and neither we nor the bot keep it after answering. Anthropic does not use it to train its models. The quick questions under the bot are answered on your computer and sent nowhere. Basis: providing what you asked for (Article 6(1)(b)).

Mods from Modrinth: when you browse or install mods, the launcher talks to Modrinth's servers directly, so Modrinth sees your IP address. Its own privacy policy applies; we receive nothing.

3. Catalyst Designs (this website)

• Designs you submit: the image, the display name you type, the kind of design and the date. Used to review and show it. Basis: providing the service (Article 6(1)(b)). Kept until you ask us to remove it or we take it down; rejected designs are kept so a review mistake can be undone, and removed when we clear the queue or you ask. Before it is saved, the image and display name are checked automatically by Anthropic (Claude) for content that isn't allowed; a design that fails is refused and not stored, and every design that passes is still reviewed by a person. Basis: our legitimate interest in keeping the site safe (Article 6(1)(f)).
• Votes: a random ID in a cookie and which designs it voted for - never your name or IP address. Basis: our legitimate interest in fair voting (Article 6(1)(f)). Kept while the design is on the site.
• Reviewer sign-in: a session cookie for team members only.
• Server logs: our hosting and database providers log requests (IP address, browser, time) to run and protect the service. Basis: legitimate interest in security. Kept for the providers' standard periods, usually days to weeks.

Do not put personal information (like your real name) in a display name or design.

4. Cookies

Two, both needed for what you ask the site to do, none for tracking or ads:

• catalyst_voter - a random ID so one browser votes once per design. About a year.
• catalyst_admin - only for reviewers, while signed in. Twelve hours.

Fonts are served from this site itself, so visiting sends nothing to Google or other font services.

5. Who we share data with

We do not sell or rent personal data, and there is no advertising or analytics. We use these providers to run the service, under data processing terms:

• Netlify - hosts this website (United States).
• Supabase - stores submissions, votes and redeem codes (servers in Frankfurt, Germany).
• Anthropic - checks submitted designs and answers Catalyst Bot questions (United States); keeps nothing for training.
• A payment provider - once payments open, it will process payments; we will name it here first.

Where a provider handles data outside the European Economic Area, the transfer is protected by the EU's Standard Contractual Clauses or an adequacy decision such as the EU-US Data Privacy Framework. We may also disclose data if the law requires it.

6. Your rights

Under the GDPR you can ask us to:

• tell you what we hold about you and give you a copy;
• correct it, or delete it;
• restrict how we use it, or object to uses based on legitimate interest;
• give it to you in a portable format.

Write to the team's contact address (being set up - it will be listed here). We answer within one month. Because we hold no accounts, tell us what identifies your data (for example the display name and date of a submission). You can also complain to your local data protection authority - in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

7. Children

Catalyst is not meant for children under 13. If you are under 16, ask a parent or guardian before submitting a design or buying anything. If you think a child has given us personal data, contact us and we will delete it.

8. Security

Data on our servers is only reachable through our own server code; the database refuses direct access, uploaded designs are private until approved, and redeem codes are stored only as fingerprints. No system is perfectly secure, but we will tell you and the authorities about a breach where the law requires.

9. Changes

If Catalyst starts collecting something new, this policy changes first, and the date at the top changes with it. See also our Terms of Service.