Privacy
We count installer downloads and daily active installations. Updated clients create a random installation ID and include it with their existing update check. Each installation counts once per calendar day in Europe/Zurich. The ID is not based on your hardware or account, and the Updates tab can switch it off. Metrics exclude IP addresses, cookies and report contents. Temporary request logs contain the random ID; the metrics database stores a separate daily hash. Aggregate counts and daily deduplication records expire after 400 days.
Reports submitted from Maru-gun are private. Include diagnostic details is checked by default for live reports and adds sanitized settings, system information and up to five minutes of diagnostic history. Uncheck it to send only your description. An optional Discord handle is sent as you type it, so we can contact you about the report. Long diagnostic recording is off until you explicitly start it. Automatically submit recorded diagnostics is checked by default in Trace; it records only after Start and stays enabled across updates and restarts until Stop. Uploaded segments include bounded action and broker diagnostics, recorded app version, receipt-time interval, and missing-event information. They do not include settings, chat, raw packets or arbitrary files. Character identities are pseudonymized; redaction is best effort.
Automatic traces use a separate encrypted store with limits of 10,000 upload attempts per network identity per day, 10,000 batches per upload capability, 10,000 retained batches and 2 GiB total storage. Automatic traces expire after 30 days; authorized staff can delete them sooner. Bug-report attachments expire after 30 days; report text and metadata after 90 days. Receipt tokens stored on your computer allow earlier deletion of reports. Report storage is encrypted. The report service currently keeps no backups.
Ko-fi is an external service with its own privacy policy.