Windows Launcher Privacy Notice

1. Who is responsible

Josh Pullin, trading as ZYNORIC STUDIOS, is the controller responsible for FuseRift’s own processing of personal information received by the operator. Local-only records are distinguished below. Contact [email protected] or use the correspondence and support address (https://fuserift.co.uk/contact/). The address is for postal correspondence and support only, not a verified geographical business establishment; provider confirmation is pending. Independent game, account and download providers are responsible for their own processing. This notice does not claim that all software started by FuseRift is under our control.

2. Information used and stored locally

The launcher uses installation paths, selected folders, game file/version checks and hashes to identify compatible inputs and manage an integration. It stores settings, selected locations, imported recipe details, installation receipts, backup records, generated content, setup caches and diagnostic information on your computer. Paths and logs can contain a Windows account name or other personal information.

The normal data area is %LOCALAPPDATA%\FusionLauncher, with engine records under EnginePro and managed runtimes or game profiles in related subfolders. An explicitly selected test or custom data directory can be different. Game saves and configuration may also remain in the locations used by the game or its launcher. This is not a claim that all game data is inside one FuseRift folder.

3. Update checks and update downloads

When automatic update checking is enabled, the launcher sends HTTPS requests for https://fuserift.co.uk/update/latest.json and its signature. The update server returns release information; the launcher compares versions locally. The update request code does not attach your game list, game hashes, saves, Windows username, machine fingerprint or local diagnostic report. It uses no update-client cookies or default Windows credentials.

Cloudflare handles the website endpoint. If you approve installation, the updater downloads the release payload from GitHub and its permitted download infrastructure. These hosts receive connection information such as your IP address, requested resource and request time, and may process normal HTTP/security information. This is not an anonymous network connection. We have not confirmed the service-specific retention of all provider access/security logs.

In Settings → About / Updates, turn off Automatically check for updates to stop startup checks, or select Check for Updates to request one manually. Checking does not silently install an update. Turning it off does not stop network activity by games or other tools.

4. Fusion setup and external providers

Choosing setup can download declared runtimes, launchers, mod loaders and conversion tools from the recipe’s configured sources. The inspected downloads include GitHub-hosted projects, Prism Launcher, Eclipse Temurin and Microsoft runtime services; the sources vary by recipe. A provider can see the requested component and ordinary connection information. The request can therefore reveal interest in a particular tool or integration even when no game-library list is sent.

The supported conversion paths read and process game content locally. No upload of generated game assets to FuseRift was identified in those paths. That does not establish what a running third-party game, platform or tool sends to its own services. Consult their policies and sign-in screens before using them.

5. Minecraft and other account sign-in

Where needed, Minecraft account setup uses Prism and Microsoft services. The integration can use an account name, UUID and account-ready status to select and start the Minecraft session. Account software may retain authentication information in its own managed profile. Do not share those profile or account files with support.

This is not a promise that no authentication information exists on your PC. No transmission of Microsoft passwords or tokens to a FuseRift analytics service was identified in the launcher. Microsoft, Prism and any other game-account provider have separate account and privacy practices.

6. Diagnostics and support you choose to share

The launcher’s diagnostic export saves a file to a location you choose; exporting does not automatically upload it. Its structured report contains the app and Windows versions, system architecture, recipe identity/version, target count, prerequisite versions and status, runtime and installation health, memory measurements, startup and operation timing, timestamps, event categories and stable error codes. The export serializer omits raw tool output, account files, authentication data, process command lines, worlds and file paths. Other logs or files you manually attach can contain more information, so review them before sending.

If you submit a website bug report or send an email, we receive the information and attachments you supply, including a reply address if provided. We use these to investigate and respond. The Website Privacy Policy (https://fuserift.co.uk/legal/privacy/) describes the bug form and its retention. The configured 90-day cleanup rule for form submissions must not be assumed to apply to separate email threads, provider logs or backups, or to certify every cleanup run. Support email sent to [email protected] is forwarded through Cloudflare Email Routing to a personal Gmail inbox. Cloudflare processes messages for forwarding, and Google provides the receiving personal Gmail mailbox; this is not a paid Google Workspace account. Support messages previously had no scheduled deletion period. Under the review policy adopted on 18 October 2026, we review closed support conversations after 12 months and delete personal information no longer needed. We may retain relevant records longer for an ongoing issue, a legal obligation or a legal claim, reviewing their continued need. This is a manual review policy, not an automatic inbox deletion feature, and does not mean historical messages have already been deleted. You may request an earlier review by emailing support. Provider backups and service logs are subject to the providers’ own retention practices.

7. Local retention and removal

The unpublished 0.1.9.2 candidate’s acceptance system stores the document version, Terms and privacy-document SHA-256 hashes, acceptance time in UTC, affirmative action, record schema and whether it was a test acceptance. These records stay in the local LegalAcceptance subfolder of the engine data area; no acceptance request is uploaded. Earlier records are retained with no automatic expiry. They identify the document accepted on this installation, not a verified individual. Test records are separate from production acceptance. You can ask support how to remove a local record safely; removal can cause a further prompt before new setup without deleting your game files.

Local settings, receipts, backups and conversion caches remain available for later launches, repair or restoration. The launcher code does not provide a universal time-based deletion schedule for these records. The updater writes a last-valid-manifest record and an append-only update log containing times, versions, stages and verification outcomes, including expected and actual hashes. It removes staged download files on relevant failure paths; this is not a promise that every staged file disappears after every possible crash.

Uninstalling the application should not be treated as erasing these records or restoring every game. Do not delete receipts, backups, account profiles or saves indiscriminately. Close the relevant applications, use supported restoration where appropriate, and ask support which data can safely be removed. An operator cannot remotely retrieve or erase local-only records merely because you make a privacy request.

8. Analytics, recording and automated decisions

The reviewed public 0.1.9.0 launcher has no optional analytics or session recording enabled. No PostHog event collection was identified in the reviewed launcher code or the bounded startup network checks. The separate unpublished acceptance candidate records agreement locally, not through PostHog. This statement does not cover independent third-party games or tools. These terms and this notice do not provide consent for future optional analytics. Any proposed optional collection needs a separate, accurate explanation and appropriate controls before activation.

Compatibility checks use local file/version criteria to allow or reject a setup; they are not an assessment of your personal trustworthiness. No advertising profile or automated decision with legal or similarly significant personal effects was identified in the launcher.

9. Purposes and lawful bases

We use operational information to provide the functions you request, protect downloads and installations, investigate faults and answer support enquiries. Support and intellectual-property complaints may include contact details, relevant game or recipe details and evidence supplied by you or another complainant. We use that information to respond, investigate and resolve the matter, not to build advertising profiles. Local operation is distinguished from information actually received by the operator or a service provider.

Where we process personal information to provide a requested service under our agreement, we rely on performance of that agreement only to the extent the processing is necessary. We rely on our legitimate interests in responding to enquiries, resolving faults and protecting the service for support and security processing that is not necessary for a contract, balancing those interests against your rights. Necessary handling of rights complaints and the establishment or defence of legal claims also uses legitimate interests. A legal-obligation basis applies only where a specific duty requires processing, such as responding to an applicable data-rights request. These purposes do not authorise unrelated marketing or optional analytics. Local-only records are not automatically collected by the operator, and acknowledging this notice does not consent to analytics.

10. Recipients, transfers and provider retention

Connection data reaches the hosts used for updates and downloads. Information you send for support reaches the relevant website or email service and the operator; relevant information may also be disclosed where necessary for advice, a rights complaint or legal obligations. Only information necessary for the purpose should be shared. Currently only the operator has access to the support Gmail inbox and Cloudflare account; no separate exported copies or archives of customer reports or emails are kept outside those services.

Cloudflare, Google and GitHub operate internationally, so information may be processed outside the UK. Google describes its reliance on adequacy mechanisms, the UK Extension to the EU–US Data Privacy Framework and standard contractual clauses where applicable in its transfer explanation (https://policies.google.com/privacy/frameworks?hl=en-GB). Cloudflare describes its international processing and safeguards in its Privacy Policy (https://www.cloudflare.com/privacypolicy/). GitHub describes its processing in its General Privacy Statement (https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement). Google’s Privacy Policy also explains personal Gmail retention and deletion (https://policies.google.com/privacy?hl=en-GB). These provider statements do not establish the account-specific transfer mechanism or business processing arrangements for every service. Those arrangements remain to be confirmed. We have not purchased Google Workspace or verified a separate business processing agreement with Google or UK-only storage. Ask support for information about the safeguards applicable to information you send us; we do not promise a specific country or a universal provider-log deletion period. We do not sell your personal information.

11. Your choices and rights

Sharing a support report is voluntary. You do not need to send a complete game library, account file or save to make an initial enquiry. A selected setup or update cannot fetch required online components if you do not allow the necessary connection. You can stop using a feature without consenting to unrelated collection.

For information the operator holds, you may request access, correction, erasure or restriction and, where applicable, portability. You may object to processing based on legitimate interests. These rights depend on the circumstances and are not an unconditional promise to delete records needed for legal obligations or claims. If processing relies on consent, you can withdraw it for future processing. Contact [email protected]; we may need proportionate information to identify the relevant record without collecting unnecessary identification.

You can also complain to the UK Information Commissioner’s Office (https://ico.org.uk/make-a-complaint/). You do not need to complete our internal process before exercising your legal rights.

12. Changes and related documents

We will date material changes and review this notice when launcher behaviour or providers change. If processing materially changes, the relevant notice will be updated. The separate unpublished acceptance candidate identifies the document version and asks for a new local acknowledgement when its bundled documents change. The public 0.1.9.0 release does not gain that feature from publication of this website notice. Any such acknowledgement is not optional-analytics consent. See the Terms of Service (https://fuserift.co.uk/legal/terms/), Website Privacy Policy (https://fuserift.co.uk/legal/privacy/) and Support page (https://fuserift.co.uk/support/).