Privacy information
How Astra handles your data.
Downloads and visits
The application does not add advertising scripts or analytics. You can download Astra without a website account. The hosting server may keep request logs, including IP addresses and request times.
Microsoft login
Microsoft handles your password and any authenticator checks. Astra exchanges the login result with Xbox and Minecraft to verify your Minecraft Java profile. Only your Minecraft name, UUID and an essential login session are stored here. Provider access and refresh tokens are not stored. The login expires after eight hours, or you can log out to remove your session.
The owner's verified UUID is used to restrict the Release Manager. Existing owner recovery settings are stored privately on the server.
Local launcher data
Launcher settings and Minecraft instances are stored on your computer. Website login does not transfer a Minecraft session to the launcher. Website account information can be removed through the server's private configuration.
Crash analysis runs locally in the launcher. Logs are not uploaded automatically.
Optional Community skins
Skin sharing is off by default and can be enabled separately for each launcher account. If you enable it, Astra sends only the public Minecraft texture address, its classic or slim model, and a random removal key. Minecraft account names, UUIDs and login tokens are not sent to this catalog. The server stores a hash of the removal key, the verified texture address, model and renewal time. The public catalog shows anonymous skins and contribution counts, not verified player identities.
Turn sharing off in Skins → Community to remove your contribution. Removal retries on the next launcher start if the server is unavailable. Contributions expire after 30 days without renewal. A texture may remain if other users also share it. The texture is downloaded from Mojang for validation; image files are not retained on this server. Hashed IP addresses are held temporarily for request limits; normal hosting request logs may contain IP addresses.