How your data is handled
What Numek Launcher does with your Microsoft account, with the files it downloads and with the ones it writes to your machine.
- Tokens encrypted at rest
- Microsoft session tokens are encrypted by the operating system and tied to your Windows account. They are never written to disk in the clear.
- Checksums verified
- Every file whose source publishes a SHA-1 hash — the game, its libraries, the mods from both catalogues — is checked after download. A file whose hash does not match is rejected and not installed.
- No telemetry
- No usage statistics are transmitted, and no machine identifier is built. The launcher reaches only what it needs to do its work: the game's and the Microsoft account's servers, the two catalogues, the mod loaders' own, the skin sources, and GitHub, where its own updates come from.
- Confined writes
- Filenames coming from a remote catalogue are validated before writing, and no file can be written outside its own instance folder.
- Files never truncated
- Your settings and instance descriptors are written to a temporary file, pushed all the way to the disk, then renamed. A power cut at the wrong moment leaves the old file intact rather than a half-written one.
- No administrator rights
- Everything installs inside your user profile. Neither the installer nor the updates ask for elevation, and nothing is written elsewhere on the machine.
- Nothing overwritten
- The file browser never replaces an existing file: a copy, move or extraction that lands on a name already taken is given a new one. Folder shortcuts are never followed.
- Your data apart from the program
- Your settings, accounts and instances are kept apart from the program. An update replaces the launcher without touching your data, and uninstalling does not delete it.