Privacy

Last updated: October 14, 2026

Woot is a free launcher that runs on your computer. There is no Woot account, and everything about you stays on your PC, with two exceptions you choose: friends and the shop. This page explains what Woot uses and why.

Microsoft sign-in

To launch the game, you sign in with your Microsoft account, in your browser, on Microsoft's official page. Woot never sees your password.

• Woot receives access tokens that it exchanges only with the official services (Microsoft, Xbox Live, Minecraft Services) to verify that you own the game and fetch your profile (username, identifier, skin).
• These tokens are encrypted and stored on your computer, with a key kept in your operating system's keychain. They are never sent anywhere else, not even to the friends service.
• You can remove an account at any time from the launcher: its tokens are erased.

Game files and content

Game versions, libraries, resources and Java are downloaded from Mojang's official servers (and, when needed, from Eclipse Adoptium for Java). Loaders come from their official sites (Fabric, Quilt, Forge, NeoForge), mods and modpacks from Modrinth. Those services see your IP address, as with any download. To recognize the mods already in an instance, Woot sends Modrinth a fingerprint of their files, not the files.

Woot also fetches its news feed and updates from this site and from GitHub, and contacts the servers you add to show their status (players, latency).

Friends (optional)

Friends only turn on with your consent, in the friends panel. They go through Woot's service, hosted by Cloudflare.

• Your identity is proven by a signature made on your PC with your player certificate: your Microsoft token is never sent to the service.
• The service keeps your username, your player identifier, your friend list, your requests, the players you block and your conversations. Your status (online, in game, version, server) is only passed on to your friends, without being stored.
• Messages are kept for six months at most (500 per conversation). They are protected in transit, but not end-to-end encrypted: don't share anything sensitive.

Shop (optional)

Cosmetics are bought on Stripe's payment page, in your browser: Woot never sees your card. Stripe processes the payment under its own privacy policy.

• For each purchase, Woot's service keeps: the Stripe session identifier, your player identifier, the item, the amount and the date. And for each player: the items they own and the ones they wear.
• Worn items are public to other Woot players (that's what shows them in game); nothing else about you is.

Discord status (optional)

If you turn it on, Woot shows what you're doing (game, version) on your Discord profile, by talking to the Discord app on your PC. Nothing goes through a Woot server.

Crash reports and statistics (optional)

Off by default, they are only sent with your consent (Settings › General › Privacy):

• Launcher crash reports: the error message, redacted (tokens, home folder, username, emails, IP addresses and identifiers removed).
• Anonymous statistics: at most one signal a day (Woot version, channel, system, language) with a random identifier, forgotten as soon as you turn the option off.
• Never an account, a username, an instance name, a server or a game log.

What Woot does not do

• No ads, no selling of data.
• Nothing from your worlds, screenshots or logs is sent without an explicit action from you. The share button of a log sends it, redacted, to mclo.gs, only when you click it.

This website

This site uses no cookies and no analytics. It is hosted by Vercel, which may keep technical logs (IP address, date) for the security of the service.