Fern Client — Privacy Policy
Version 2 · Effective [DATE]
_Changes in version 2: added Discord Rich Presence and Fern Server Link (section 2), the website (section 2b) and Fern accounts + cosmetics (section 3)._
This policy explains what personal data the Fern Client launcher and the Fern in-game mod ("Fern") process, why, and what your rights are under the EU General Data Protection Regulation (GDPR).
Controller: [OPERATOR NAME], [COUNTRY] · Contact: [CONTACT EMAIL]
In short
- Fern currently stores your data on your own device. We do not run accounts, analytics or advertising, and we do not sell data.
- You log in through Microsoft. We never see your password.
- To download the game and mods, Fern connects to Mojang/Microsoft, Modrinth and the Fabric/NeoForge servers. Like any website, those services see your IP address.
1. Data stored on your device
| Data | Why | Where |
| Your Minecraft name, UUID, skin link and Xbox user id (XUID) | Show your account, start the game | %APPDATA%\FernClient\accounts.json |
| Microsoft refresh token (login) | Stay logged in without typing your password again | Windows Credential Manager (encrypted by Windows) |
| Settings, profiles, installed mods, worlds, screenshots | Make Fern work the way you set it up | %APPDATA%\FernClient and .minecraft-style profile folders |
| Game and launcher logs | Help you (and us, if you send them) fix problems | %APPDATA%\FernClient\logs |
| In-game Fern settings (HUD layout, mods) | Your configuration | config/fern in each profile |
This data does not leave your device unless you choose to share it (for example by sending us a log file). You can delete it at any time; the uninstaller offers to remove it.
2. Data sent to third parties
When you use Fern, your device connects directly to these services. They receive your IP address and the technical data of the request, and process it under their own privacy policies:
- Microsoft / Xbox / Mojang — sign-in, account and game downloads (Microsoft Privacy Statement).
- Modrinth — searching and downloading mods (Modrinth Privacy Policy).
- FabricMC and NeoForged — downloading mod loaders.
- Minecraft servers you join — under the rules and policies of each server. If a server asks Fern whether you use it (Fern Server Link), Fern answers with its version, mod loader, Minecraft version and the Fern features you have enabled — no account data. You can turn this off in Features → Server Features.
- Discord (Rich Presence) — if the Discord app is running on your computer, Fern tells it that you are using Fern Client and, while playing, the Minecraft version, mod loader and profile name and how long you have been playing. Discord shows this on your profile to others, depending on your Discord privacy settings. This happens locally between Fern and the Discord app; Fern does not send it to our servers. You can turn it off in Settings → Discord Rich Presence (or in Discord's own activity settings). See the Discord Privacy Policy.
2b. Our website
The Fern website uses no tracking or advertising cookies and no analytics. Our web host processes your IP address to deliver the pages. Fern team members who sign in to the admin dashboard with Discord get a strictly necessary, secure session cookie containing their Discord ID, name and avatar.
3. Fern account and cosmetics
When you sign in to Fern (the launcher does this for you), we prove that you own your Minecraft account by asking Mojang whether you just joined a check "server" — your Minecraft or Microsoft login token is never sent to us.
We then store on our servers:
| Data | Why |
| Your Minecraft UUID and name, account creation and last-seen date | Your Fern account |
| Which cosmetics you own and have equipped | Show your cosmetics |
| Login sessions (stored as one-way hashes, expire after 30 days) | Keep you signed in |
Your equipped cosmetics are public: any Fern player (or Fern Companion user) who sees you in game can look up which cape you wear by your Minecraft UUID — that's what cosmetics are for. Nothing else about your account is public.
You can delete your Fern account and all of this data at any time (Settings → Fern account → Delete). Friends, settings sync and purchases are not active yet; we will update this policy and ask for your agreement again before they start.
4. Legal basis
- Performance of a contract (GDPR art. 6(1)(b)): to provide Fern as described in the Terms.
- Legitimate interests (art. 6(1)(f)): to keep Fern secure and working (for example logs on your own device).
- Consent (art. 6(1)(a)): only where we ask for it; you can withdraw it at any time.
5. How long we keep data
Data on your device stays there until you delete it or uninstall Fern and choose to remove your data. Login tokens are removed when you sign out.
6. Children
Fern is used by many young players. If you are under 16, please read this policy together with a parent or guardian. Purchases (when available) require permission from a parent or guardian if you are under 18.
7. Your rights
You have the right to access, correct, delete and export your personal data, to object to processing and to withdraw consent. Because Fern currently keeps your data on your own device, you can do most of this yourself (Settings → Data folder). For anything else, contact [CONTACT EMAIL].
You can also file a complaint with your data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.
8. Security
Login tokens are stored in the Windows Credential Manager, not in plain files. Downloads are verified with checksums. No system is perfect: keep Windows up to date and don't share your device account.
9. Changes
If we change this policy in an important way, Fern will show you the new version and ask you to accept it again.
10. Contact
[OPERATOR NAME] · [CONTACT EMAIL]