Zip ClientPrivacy Policy
This Privacy Policy explains how the Zip Client launcher ("Zip") and the Zip website handle personal data, in line with the EU General Data Protection Regulation (GDPR). In short: Zip has no telemetry, no analytics, no advertising and no Krizuvo account. Your data stays on your computer.
1. Who is responsible
The controller for the Zip website and for the Zip software is Krizuvo (krizuvo.xyz). You can contact Krizuvo by email at krizuvo@krizuvo.xyz, including for any request about your personal data.
2. Data Zip keeps on your computer
Zip stores its data locally in your Windows user profile (or next to the portable executable if you choose portable mode): settings, instances and their game folders, playtime and launch history, the last ten launch logs, your skin library, cached metadata and a launcher log.
If you sign in with Microsoft, Zip stores your Minecraft profile name, UUID and skin address, plus your Microsoft refresh token and Minecraft access token. The tokens are encrypted with Windows Data Protection (DPAPI) so only your Windows account can read them. They are never written to logs.
None of this data is sent to Krizuvo. You can delete it at any time by removing accounts or instances in Zip, or by deleting the Zip data folder after uninstalling.
3. No telemetry or tracking
Zip does not collect usage statistics, crash reports, device identifiers or analytics, and it contains no advertising or tracking code. Krizuvo operates no server that Zip reports to.
4. Connections to third parties
When you use a feature that needs the internet, Zip connects directly from your computer to the service that provides it. That service receives your IP address and the technical request data, and processes it as an independent controller under its own privacy policy:
Microsoft and Xbox Live (sign-in, token refresh); Mojang and Minecraft services (game files, profile, skins, skin uploads, Minecraft news); Modrinth and CurseForge (searching and downloading content); the Fabric, Quilt, Forge and NeoForge servers (mod loader files); Eclipse Adoptium and GitHub (Java runtimes when needed); GitHub (Zip update checks, Zip news, Horizon downloads and Horizon mods).
Minecraft itself, Horizon and any mods you install may process data under their own policies. Minecraft's own telemetry setting is found in the game's options.
5. Legal bases
Connections to third-party services happen because you request a feature (Article 6(1)(b) GDPR). Automatic update checks are based on Krizuvo's legitimate interest in keeping Zip secure and working (Article 6(1)(f) GDPR); you can turn them off in Settings.
6. The website
The Zip website uses no cookies, no analytics, no tracking pixels and no externally loaded fonts or scripts. The hosting provider may process technical access data (IP address, time, requested page, browser type) in server logs to deliver the site and keep it secure (Article 6(1)(f) GDPR), and deletes it according to its own retention rules.
Download links lead to GitHub. When you follow them, GitHub processes your data under the GitHub Privacy Statement.
7. Retention
Local data stays on your computer until you delete it. Zip keeps only the last ten launch logs per instance and prunes its cache to the limit you set in Settings.
8. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. Because Krizuvo does not receive data from Zip, most requests can be fulfilled directly in Zip or by deleting your local data. To exercise your rights with Krizuvo, email krizuvo@krizuvo.xyz. For data held by third-party services, contact those services.
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, place of work or the place of the alleged infringement.
9. Children
Zip is not directed at children under 16. Microsoft accounts for younger players are managed through Microsoft family settings, which Zip respects.
10. Security
Zip uses encrypted HTTPS connections, verifies the checksums of game files, Java runtimes and mods, encrypts account tokens with Windows DPAPI and only installs updates signed with Zip's release key. Horizon builds are verified against Horizon's own signed checksums.
11. Changes
Krizuvo may update this policy. The current version and its effective date are shown on the website and in Zip.