LumaBlossomlumablossom
Back to Home

Privacy Policy for LumaLauncher

Last updated: February 18, 2026

This Privacy Policy explains how LumaBlossom ("We", "Us", or "Our") collects, uses, and discloses information about you when you use our services, including LumaLauncher, LumaAuth, and our website (together, the "Services").

We are a personal project operated by LumaBlossom, based in Berlin, Germany.

1. Information We Collect

1.1 Personal Information

We may collect the following personal information:

  • Name / Username
  • Email address
  • Information provided by Microsoft through Minecraft OAuth (such as Minecraft username, UUID, and profile data)

1.2 Technical Data & Tracking

We may collect technical and usage data, including:

  • Cookies – small files stored on your device to improve functionality and user experience.
  • Local Storage – used to store session and preference data.
  • Sessions – used to keep you logged in.
  • Traffic & Usage Data – anonymous analytics data such as page views, interactions, and basic device information.

We use Google Analytics to help us understand how users interact with our Services.

1.3 Device Permissions

Our application may request access to:

  • File / Photo access – for uploading custom Minecraft skins or avatars.

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Services.
  • Authenticate users via LumaAuth and Microsoft OAuth.
  • Allow profile customization (skins, avatars).
  • Send technical messages and support responses.
  • Send newsletters or updates only if you explicitly opt in.
  • Analyze usage and improve performance and features.

We do not show ads and do not sell your data.

3. Legal Basis (GDPR)

As we operate in the European Union, we process your data under the following legal bases:

  • Consent – for newsletters and optional analytics.
  • Contractual necessity – to provide authentication and launcher services.
  • Legitimate interest – for improving security and performance.

4. Age Restriction

Our Services are intended for users aged 18 and older only.

We do not knowingly collect data from minors.

5. Data Storage & Retention

Your data is stored in databases hosted on EU servers.

We keep your data only as long as necessary to provide the Services.

You may request account deletion at any time, and your data will be permanently removed within a reasonable period.

6. Third-Party Services

We may share limited data with trusted third parties, including:

  • Microsoft (Minecraft OAuth) – for authentication.
  • Google Analytics – for anonymous usage analytics.
  • Hosting providers – for server and database hosting.

These providers only process data on our behalf and under strict agreements.

7. Data Sharing

We do not sell or rent your personal data.

We may disclose data only:

  • If required by law or legal process.
  • To protect our rights, users, or Services.

8. Your Rights (EU / GDPR)

If you are in the EU, you have the right to:

  • Access your data.
  • Correct your data.
  • Delete your data ("right to be forgotten").
  • Withdraw consent (for newsletters or analytics).
  • Request a copy of your data.

You can exercise these rights by contacting us.

9. Security

We take reasonable technical and organizational measures to protect your data.

However, no system is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time.
When we do, we will update the "Last updated" date and may notify users through the website or launcher.

11. Contact Us

If you have any questions or requests regarding this Privacy Policy, contact us: