Who this is about
BestClient is a Minecraft launcher and client made for the bestpvp.eu server. This page explains exactly what the launcher sends, what the server at client.bestpvp.eu stores, and what you can ask to have removed.
For anything on this page, write to [email protected].
What is stored on our server
Only what the features you use need to work. When you sign in through the launcher, the following is written to our database:
- Your Minecraft account UUID and username. The UUID identifies you; the username is what your friends see.
- A session token, kept as a hash rather than as the token itself. A random value so the launcher does not have to sign in again on every request. It expires after 30 days.
- Your friend list and pending friend requests - pairs of UUIDs.
- The server address you are currently on, and a timestamp. This is what makes a friend show as online and lets you see where they are. It is overwritten each time it updates and is treated as offline after 90 seconds.
- Which version of the launcher you are running. One version string, overwritten each time. It tells us whether an update has reached people before we change something that depends on it.
- Your total playtime in BestClient, one number of hours, and whether you chose to hide it. It is overwritten after each game, and it is what your friends see next to your name unless you hide it.
- Your party, while you are in one. Who is in it and which server the leader has picked. It is deleted when the party breaks up.
- The hat you are wearing, if you pick one, so other BestClient players can see it.
- Whether you have BestClient Plus, until when, and how you got it. If you redeemed a key, that key is marked as used with your name against it.
Sent without your name
Two things are sent whether or not you sign in. Neither carries your username, your UUID or anything else that says who you are, and neither is stored with your IP address.
- Error reports, if the game crashes. On by default, and you can switch them off in the launcher under Settings, Privacy. A report holds the Minecraft and launcher versions, the Java version and renderer, the mods you had installed with their versions, what the launcher made of the crash, and the lines of the crash log that describe it. Before it is sent, the launcher removes your Minecraft name, sign-in tokens, the user folder name in file paths, IP addresses and UUIDs, and the server removes them again on arrival. We use the reports to find crashes that affect many players and to write fixes the launcher can offer when the same crash happens again.
- Which mod files you have. Each time the launcher starts, it sends the fingerprint (SHA-1) and file name of every jar in your mods folder, so our server can check them against the public mod index and remember the answer. It is how the launcher tells a real mod from a modified one. The list says which files exist among players, never who has them.
Things you can choose to send us
None of this is sent unless you turn it on or ask for it.
- Settings sync. If you switch it on, your launcher settings, mod configuration, keybinds and game options are copied to our server so another machine of yours can read them back. We store them as your launcher sent them and we do not open them. You can delete the copy from the launcher at any time, and it is not needed for anything else to work.
- Your saved server list, as part of that same sync, for the same reason.
- A pack you publish. If you send a pack to the public list, the mods it contains, its name and description, and your username as its author, are stored and shown to everyone. Startup flags are removed from a pack before it is stored. A pack you keep to yourself never leaves your machine.
We do not store your email address, your password, your IP address, chat messages, or anything about what you do inside the game.
What never leaves your computer
- Your Microsoft password. Sign-in happens through Microsoft's own page, inside a window that has no part of the launcher in it. You type your details on Microsoft's site, never in the launcher.
- Your Microsoft and Minecraft access tokens. These are held on your machine, encrypted with the key your operating system keeps for you, so the game can start.
- Your HUD layout, day by day play-time history and logs, kept in
%APPDATA%\.bestclient. Crash reports stay there too when error reporting is off; when it is on, the cleaned report described above is sent.
- Your settings, unless you turn settings sync on yourself.
Why we are allowed to hold it
For error reports and mod file checks the basis is our legitimate interest in keeping the client working and free of tampered mods; neither says who you are, and error reports can be switched off at any time.
For everything else, under the GDPR our basis is performance of a contract: you asked for a launcher with a friends list, and a friends list cannot work without knowing who your friends are and whether they are online. The same applies to a party, to a hat other people can see, and to Plus, which is something you paid for or were given. If you do not want any of it stored, do not sign in - the launcher still installs and starts the game.
How long it is kept
- Session tokens - 30 days, then they stop working. Only five sign-ins are kept per account; older ones are dropped.
- Presence (server address, launcher version and timestamp) - overwritten continuously; only the most recent value exists.
- Playtime total - overwritten after each game; only the most recent value exists.
- Parties - deleted when the party empties, and swept away after fifteen minutes of nobody in them.
- Synced settings - until you delete them from the launcher or ask for deletion.
- Account record, friend list, hat and Plus - until you ask for deletion.
- Error reports - 90 days, then deleted.
- Mod file fingerprints - kept, since they describe files rather than people.
- A redeemed key - kept as our own record that it was spent. If you ask for deletion your name comes off it, but the key stays used.
Who can see it
- Your friends see your username, whether you are online, which server you are on and how long you have played. That is the point of the friends list. The server and the playtime can each be hidden in the launcher, under Settings, Privacy.
- Other BestClient players on the same server as you see the hat you are wearing and whether you have Plus. Not your friend list, and not anything else.
- We do, through an operator panel, to run the service, hand out Plus, and check a pack before it goes public. That panel shows the population as counts and never shows one person's friend list or the contents of anything you have synced.
- Nobody else. We do not sell anything, share anything, or hand anything to an advertiser or an analytics company, because there are none.
Other services the launcher talks to
The launcher makes requests to these on your behalf. Each one sees your IP address, as any website you visit would:
- Microsoft and Mojang - signing in and downloading Minecraft itself.
- Modrinth - searching for and downloading mods. Mods are fetched from Modrinth directly so their authors get the download.
- GitHub - checking for launcher updates and downloading them.
- Fabric - the mod loader's version metadata.
- mc-heads.net - rendering the small player heads next to friend names.
- Cloudflare - sits in front of
client.bestpvp.eu.
- Discord - only if you turn on Discord status. It runs through the Discord app already on your computer, and shows only that you are playing.
We do not use analytics, advertising, or tracking of any kind, on this website or in the launcher. There are no cookies on this site.
Your rights
You can ask us to show you everything we hold about you, correct it, or delete it. Write to [email protected] from an address we can tie to your account, or ask through the bestpvp.eu Discord, and include your Minecraft username. Deletion removes your account record, your sessions, your presence, your friend links and requests, your party, your hat, your Plus, anything you have synced, your saved server list and any pack you have published. It cannot be undone. A key you redeemed stays marked as used, with your name taken off it, because that record is our own accounting rather than information about you.
If you are in the EU and you think we have handled your data badly, you can complain to your national data protection authority. In Hungary that is the NAIH.
Age
BestClient is not aimed at children under 13. If you are under the age at which you can agree to this on your own where you live, ask a parent or guardian first.
Changes
If this policy changes, the date at the top changes with it. If the change is significant, it will be mentioned in the launcher.