Security

Your launcher's security

Protecting your data and your players is our absolute priority. Discover the technical and organizational measures that secure every aspect of CraftLauncher.

Isolation

Total isolation per launcher

Each launcher has its own secure environment: a dedicated R2 bucket, unique RSA 4096 SSH keys, and temporary credentials. No launcher can access another's data.

  • 1 R2 bucket per launcher
  • Unique RSA 4096 SSH key pair
  • Zero data sharing between clients
Dedicated R2 bucket
RSA 4096 SSH keys
Isolation by R2 prefix

Secure authentication

CraftLauncher relies exclusively on Microsoft OAuth 2.0 authentication. No Minecraft password is ever stored or transmitted by our service, and no means of bypassing Microsoft authentication is provided.

Access is strictly limited to each launcher. Every operation is individually verified and authorized to ensure only legitimate people can interact with your data.

Cloudflare CDN

All launcher files are distributed via Cloudflare R2's edge network, with 99.9% uptime and built-in DDoS protection. Your players enjoy optimal download speeds, wherever they are.

99.9%

Guaranteed uptime

300+

Edge cities

Protecting your data

Your data is protected by end-to-end encryption. Passwords are securely hashed and never stored in plaintext.

All sensitive actions are logged to ensure traceability. In case of suspected unauthorized access, our team is alerted immediately.

GDPR compliance

CraftLauncher complies with the General Data Protection Regulation (GDPR). We only collect the data strictly necessary for the service to function.

  • Data hosted in Europe
  • Right of access, rectification and deletion
  • Complete deletion on request
  • No resale of data to third parties

Frequently asked questions about security

Is my launcher's data isolated from other clients?

Yes, each launcher has its own R2 bucket, its own SSH keys and its own temporary credentials. There is no data sharing between launchers. Isolation is total.

How are players' mod files protected?

All files are served via the Cloudflare CDN with SHA-256 verification. Bucket access credentials have a one-hour lifetime and are renewed automatically. No credential is ever stored in plaintext.

Is CraftLauncher GDPR compliant?

Yes. We only collect the data necessary for the service to function (email, username). Data is hosted in Europe, and you can request the complete deletion of your data at any time.

What happens if a player downloads a corrupted file?

The launcher verifies the integrity of every file via a SHA-256 hash before installing it. If a file doesn't match, it is automatically re-downloaded from the CDN.

Your server deserves a secure launcher

Give your community a professional, secure launcher. Set up in 5 minutes, no commitment.

Create my launcher

Ready in 5 minutes · No commitment · Secure payment