Privacy statement

The short version

Vitra runs on your computer. It has no accounts of its own and no analytics, ads or telemetry. It talks to the services it needs to install and launch Minecraft, only when you use the feature that needs them, and to one server of its own, api.xan.gripe, which runs the Vitra badges and capes. That server, and the Discord status, can be turned off in Settings.

What stays on your computer

• Sign-in tokens from Microsoft, Xbox Live and Minecraft. They are encrypted, and the key is kept in Windows Credential Manager.
• Your profile details: Minecraft name, UUID, skin and cape, so they can be shown in the app.
• Settings, instances, worlds, mods, skins and your server list.
• Logs, for troubleshooting. Access tokens are removed from launch records before they're written.
• Memories: the pictures Vitra takes of the game window at big moments (when Memories is on, Settings → Launcher), with the world or server, the advancement, biome or mob, and in Fabric 26.3 where you stood. They are never uploaded; delete them on the Memories page.

Apart from what Vitra badges and capes need (below), none of this leaves your computer.

What is sent where

• Microsoft and Xbox Live (login.microsoftonline.com, user.auth.xboxlive.com, xsts.auth.xboxlive.com), when you sign in or a sign-in is refreshed. You enter your password on Microsoft's own website, never in Vitra.
• Mojang / Minecraft services (api.minecraftservices.com), to get a Minecraft token, check that you own the game, read your profile, change your skin, cape or name when you ask it to (and check whether the names you try are free), and get your account's chat-signing key for Vitra cosmetics.
• Mojang's download servers, for game files, Java runtimes, the version list and the update news on the home screen.
• Modrinth (api.modrinth.com, cdn.modrinth.com), when you browse or install mods, modpacks, resource packs and shaders, or check for updates. Modpacks may also download files from GitHub or GitLab when the pack lists them there.
• Mod loader sites (Fabric, Quilt, Forge and NeoForge), for loader versions and files.
• OptiFine (optifine.net), to show your OptiFine cape, which is looked up by your player name. When you choose Edit, Vitra opens OptiFine's cape editor after a Mojang session check, so OptiFine never receives your token.
• Skin search: player names you search go to Mojang's public profile API, and skin links you paste are downloaded from the site in the link.
• xan.gripe, to check for a newer Vitra. Only a small version file is downloaded, and an update is only installed when you choose to.
• Vitra badges and capes (api.xan.gripe, run by Vitra's developer). This is on unless you turn off Vitra badges and capes in Settings → Launcher. To prove the account is yours, Vitra sends your player name and UUID with the chat-signing key Mojang gives every account, never your token or password. While you play a Fabric 26.3 instance, the game tells it about once a minute that you're on Vitra, and asks which players in your tab list use Vitra, by their UUIDs; those UUIDs are only looked up, not stored. A cape you upload is stored there and shown to other players. The home screen also asks how many people use Vitra and how many are playing right now (just two numbers; nothing about you is sent).
  
  What the server keeps about you: your UUID, your player name as Vitra sent it, when you last played on Vitra, your Vitra cape and the capes you uploaded. Vitra players in game can see whether you use Vitra and whether you're playing on it right now; anyone can see which Vitra cape a player wears. It stays until you delete it (see below).
• Discord, when Discord status is on (Settings → Launcher) and the Discord app is running. Vitra tells the Discord app on your computer that you're using Vitra, which version, what you're playing and, if Show the server you're on is on, that server's name and player count. Discord shows this on your profile to the people who can see your activity, under Discord's own privacy settings. The player count comes from the same status request the Servers page sends.
• Minecraft servers on the Servers page, which receive a standard status request, the same one the game's multiplayer screen sends, so Vitra can show player counts and ping.

These services receive what any connection includes, such as your IP address, and handle it under their own privacy policies. When you launch the game, Minecraft itself connects to Mojang and to the servers you join.

What is never collected

• Your Microsoft password.
• Usage statistics, crash reports or device identifiers. The developer's server only gets the badge and cape data described above.
• Anything for advertising. Vitra has no ads and shares no data with advertisers.

Removing your data

Signing out in Vitra deletes that account's tokens from your computer. Uninstalling Vitra and deleting its data folder (%APPDATA%\app.vitra.launcher) removes everything else, along with your game folder if you moved it in Settings. You can also revoke Vitra's access to your Microsoft account at any time at account.live.com/consent/Manage.

To delete what Vitra's server keeps about you, open Settings → Launcher and choose Delete next to Your Vitra cosmetics data. Your record, your Vitra cape and the capes you uploaded are removed at once; a deleted cape image can stay in caches for up to a day.

Changes

If Vitra starts handling data differently, this page will be updated first and the date above will change.

Contact

Vitra is a personal, non-commercial project. Questions can go to @xan.pl on Instagram.