Privacy Policy

This Privacy Policy explains how Montuclient(“we”, “us”) collects, uses, and protects your personal data when you use Montu(the “Service”). We act as the data controller for that data and are registered with the Dutch Chamber of Commerce under KvK number 42130976. If you have questions, contact us at support@montuclient.com.

• Account data — your email address and authentication details when you sign up or log in. If you sign in with Google or Discord, we receive the basic profile information that provider shares, such as your name, email address, avatar, and provider account identifier. We do not receive your provider password.
• Subscription & billing data — your plan, subscription status, and renewal dates. Payments are processed by Stripe; we receive confirmation, Stripe customer and subscription identifiers, and limited payment details made available by Stripe, but we never see or store your full card number. We also record the time and version of the Terms, Privacy Policy, and immediate-access notice you accepted at checkout.
• Device and licence data — the desktop app derives a pseudonymous device fingerprint from Windows and hardware characteristics so one subscription can be linked to one PC. Raw hardware values are processed locally; the Service receives derived digests and stores protected hashes rather than those raw values. We also keep binding and device-reset timestamps.
• Authorised-session and security data — session identifiers, application version, Windows platform and architecture, payload version and hashes, issue, heartbeat, expiry and revocation timestamps, and security results needed to decide whether the desktop app may run. We may store a keyed hash of your IP address as a supporting abuse signal; we do not store the raw IP address in the desktop-session record.
• Runtime integrity events — when the desktop runtime stops because it detects a debugger or integrity anomaly, we may record the authenticated account, authorised-session ID, application version, reason code, occurrence count and timestamps. Device and network observations are protected with separate server-side keyed hashes; we do not retain the raw IP address, hardware values, or client device digest in this event record.
• Configuration data — the mod settings, profiles, keybinds and related preferences you save for cloud sync. The contents depend on the configuration you create.
• Download and payload-delivery data — download events and an opaque, per-session payload attribution record linked to your account, release and authorised session. The attribution marker does not contain your email address or raw device values.
• Anonymous analytics and performance data — page views, referring pages, approximate country, browser and device type, and website performance measurements. These measurements are aggregated and are not associated with an individual visitor or IP address.
• Technical data — information sent automatically by your device or browser, such as IP address, request metadata and basic service logs, used for security and to operate the Service. Diagnostic logs created by the desktop app normally remain on your PC and are shared with us only when you choose to send them for support.
• Submitted diagnostic report context — when you choose to send an error or security report, we store the sanitized report and bounded log tails for up to 90 days. For investigation, we may separately retain the request IP address, the existing server-protected device hash, client family, authorised-session ID, and client-observed Minecraft username for up to 30 days. This protected context is available only to authorised support staff using MFA, and access is audited. We do not collect raw hardware identifiers or include this context in ordinary logs.

• to create and manage your account;
• to provide the Service, including gating downloads behind an active subscription, syncing your settings and delivering updates;
• to process payments and manage subscriptions and renewals;
• to link a subscription to a device, authorise active sessions, prevent account sharing and tampering, investigate abuse, and troubleshoot problems;
• to understand usage and improve website performance;
• to comply with our legal obligations.

Where the GDPR applies, we rely on: contract (to provide your account, subscription, cloud settings, downloads and authorised desktop sessions), legitimate interests (to secure and improve the Service, enforce licence limits and investigate abuse), consent (where we specifically ask for it), and legal obligation (for example, to keep records required by tax and accounting law).

We do not sell your personal data. We share it only with the processors that help us run the Service, under appropriate agreements:

• Supabase — authentication, database, and file storage.
• Stripe — payment processing and subscription management.
• Vercel — website hosting, anonymous web analytics, and real-user performance measurements through Speed Insights.
• Google and Discord — authentication when you choose the corresponding sign-in option. Their own privacy terms also apply to information they process.

We may also disclose data where required by law or to protect our rights.

We use cookies that are strictly necessary to keep you signed in and to operate the Service securely. Vercel Web Analytics and Speed Insights collect aggregated measurements without third-party advertising cookies, and we do not use cookies to track you across other websites.

We apply the following retention periods unless a longer period is required by law or is necessary to establish, exercise, or defend a legal claim:

• account, subscription, device-binding and cloud-configuration data is kept while your account or subscription needs it and is removed or anonymised after deletion within a reasonable operational period;
• expired or revoked desktop-session records are deleted after 30 days;
• open or confirmed grouped runtime-integrity events are retained for up to 180 days after their most recent occurrence, while benign or dismissed events are deleted after 30 days;
• unresolved submitted diagnostic and bug reports are deleted after 90 days; resolved or closed reports are deleted after 30 days, while their separately protected IP, device-hash, session, client, and Minecraft-name context is deleted after 30 days;
• pseudonymous payload-attribution records are retained for up to 365 days;
• routine successful licensing audit events are retained for 30 days, while denial, security, and administrative licensing events may be retained for up to 365 days;
• billing and transaction records may be retained for the period required by tax, accounting and fraud-prevention law; and
• website and security logs are kept only as long as reasonably necessary for operations, security and troubleshooting, subject to our providers' documented retention settings.

Depending on where you live, you may have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact support@montuclient.com. You also have the right to lodge a complaint with your local data protection authority.

The desktop app automatically checks your subscription, linked device, session heartbeat, application version and security context. These checks may allow, pause or deny access when a subscription is inactive, a different device is linked, a session is revoked, or an integrity check fails. If you believe a decision is wrong, contact support@montuclient.com and ask us to review it. Stored runtime-integrity signals are reviewed by a person and do not, by themselves, cause a permanent account ban.

We take reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to keep your data safe.

Our providers may process data in countries outside your own. Where data is transferred internationally, we rely on appropriate safeguards (such as the European Commission's standard contractual clauses) where required.

The Service is not directed to children under the age described in our Terms of Service, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will remove it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you.

For any privacy questions or requests, email support@montuclient.com. Montuclient is registered under KvK number 42130976.