doki Client Privacy Policy

doki ("we", "us") makes doki Client, a Minecraft launcher and in-game client made in India. We are responsible for the personal data described here. For anything in this policy, write to support@dokiclient.com.

doki is independent. It is not affiliated with Mojang Studios or Microsoft, and Microsoft's own services, which you use when you sign in with a Microsoft account, are covered by Microsoft's privacy statement, not this one.

dokiclient.com runs no analytics and loads no trackers or third-party fonts.

• Your light or dark theme choice is saved in your own browser's local storage. It never leaves your device.
• If you sign in to your doki account on this website, it sets one cookie that keeps you signed in. It holds a session key only, no script on the page can read it, and it is deleted when you sign out.
• When you make a doki account here, Cloudflare Turnstile checks that you're a person and not a bot. That check is the only third-party script on the website, it runs only on the sign-up page, and Cloudflare handles it under its own privacy policy.
• When you press a download button, our server looks up the latest release on GitHub and sends you there. GitHub then serves the file, under GitHub's own privacy statement.
• The service that hosts this website may keep standard request logs (IP address, browser, page and time) for a short period, to keep the site running and secure.

Most of what doki knows about you never leaves your computer: your instances, mods, settings, worlds, screenshots, skins and logs all live in doki's folders on your PC.

If you sign in with Microsoft, the sign-in happens between your PC and Microsoft. The resulting sign-in is saved on your PC, encrypted with AES-256-GCM, and on Windows its keys are also protected by DPAPI.

The launcher sends us no telemetry, usage analytics or crash reports. Crash logs stay on your PC unless you choose to share them.

doki's online services only see what the features you use need. Here is all of it.

• Playing with an offline profile: when the game starts, the launcher tells our server the username you chose. We store that username, an identifier derived from it, and when we first and last saw it. That's how we count players.
• Signing in with Microsoft: we confirm who you are using the same check Minecraft servers use, so your Microsoft password and Minecraft access token never reach us. We store your Minecraft username and player ID as confirmed by Mojang, a scrambled (hashed) copy of your doki session key, when you were last active, and whether you're online.
• Making a doki account with an email: your email address, the username you choose, a scrambled (hashed) copy of your password that can't be turned back into it, whether you confirmed your email, when you accepted these terms, and the Minecraft names you add to the account. For each place you're signed in, we keep whether it is the launcher or this website and when it was last used, so you can see and end them on your account page.
• Your Friend Zone profile, if you fill it in: anything you choose to add, such as a bio, avatar, banner, status, pronouns, a location you type, a favourite server, colours and links to your other profiles, and whether your profile is public.
• Images you upload: avatars, banners and screenshots you add to your profile.
• Friends and messages: your friend list and requests, and the direct messages you send, stored so they reach the other person. Messages are protected in transit but are not end-to-end encrypted.
• Activity on profiles: comments you post, profiles you like, and a daily record of who viewed a profile, which profile owners can see as a count.
• Reports: if you report someone to us, we keep the report and what you wrote in it.
• Featured servers: we count, per server and per day, how often it was shown, opened, joined and had its address copied. These are totals and are not linked to you.
• IP address: our server uses your IP address for a moment to stop any one connection sending too many requests. It is not saved to our database.

We don't collect payment details, your contacts, your precise location, or anything from your PC beyond the above.

• To run the features you use: signing you in, Friend Zone, messages, profiles and featured servers.
• To keep doki safe: limiting abuse, acting on reports, and suspending accounts that break the Terms of Use.
• To understand how many people play, as totals, so we know what to build next.

We rely on your consent, which you give by choosing to use each feature and can withdraw by stopping and asking us to delete your data, and, where the law allows, on our legitimate need to keep the service working and safe. We never use your data for advertising, and we never sell or rent it.

• Other doki players see your username, online status and public profile. Set your profile to private to limit what they see.
• The person you message sees your messages. Comments you post on a profile are visible to people who can see that profile.
• Companies that host our servers process data on our behalf, under contract, and only to run the service.
• Our email provider delivers the emails we send you, which are only confirmation links and password reset codes. It receives your email address and that message, nothing else.
• Authorities, only when the law requires it, or to protect someone's safety.

The launcher also talks directly to services run by others, such as Microsoft, Mojang, Modrinth, mod loader servers, Adoptium for Java, a public download mirror, skin preview services, GitHub and Discord on your own PC. Each of them handles what it receives under its own privacy policy. The full list, taken from the launcher's code, is on the Trust page.

• Sign-in sessions expire on their own, and the one-time codes used to start them are deleted within about an hour of expiring. Emailed codes stop working after 15 minutes.
• Your doki account, profile, uploads, friends, messages and comments are kept while you use them, and deleted when you delete your account on dokiclient.com/account or ask us to.
• Offline profile records are kept to count players, and deleted on request.
• Reports are kept as long as we need them to deal with the problem and keep the service safe.

Connections to our services are encrypted. Session keys are stored only in hashed form, so a copy of our database would not let anyone sign in as you. Saved sign-ins on your PC are encrypted. Updates to the launcher are signed and checked before they install.

No system is perfectly secure. If something goes wrong that puts your data at risk, we will tell the people affected and the authorities the law requires us to tell. Our servers may be located outside your country, and when your data travels there it gets the same protection described here.

Wherever you live, you can ask us to:

• tell you what data we hold about you, and give you a copy;
• correct anything that's wrong or incomplete;
• delete your data, in full;
• stop using your data, by withdrawing your consent;
• deal with a complaint about how we've handled your data.

In India, under the Digital Personal Data Protection Act, 2023, you can also nominate someone to exercise these rights for you if you die or can no longer act, and if you're not satisfied with how we handled a complaint, you can take it to the Data Protection Board of India. If you're in the European Union or the United Kingdom, you also have the right to move your data to another service, to object to how we use it, and to complain to your data protection authority.

You can see, correct and delete most of your data yourself on your account page at dokiclient.com/account.

To use any of these rights, write to support@dokiclient.com from any address, with "Privacy" in the subject and your Minecraft username. We may ask you to prove the account is yours, for example by signing in through the launcher. We reply within one month.

doki is used by many young players, and we treat that seriously. We don't show ads, we don't profile anyone, and we don't track behaviour.

If you're under 18, use Friend Zone, messages and your public profile only with the permission of a parent or guardian. A parent or guardian can write to support@dokiclient.com at any time to see or delete their child's data. If we learn that we hold a child's data without that permission, we delete it.

When we change what we collect or how we use it, we update this page and its date first. If a change matters, we'll also say so in the launcher before it takes effect.

For questions, requests and complaints about privacy, write to support@dokiclient.com. This address also reaches the person responsible for handling grievances about your data.