What the Rustic launcher does when you sign in with Microsoft, and what it never does.
- 01
Why the launcher asks you to sign in
To play, you need your own copy of Minecraft: Java Edition. The launcher signs you in with Microsoft to check that your account owns the game, to get your game profile (name, UUID and skin), and to start the game in online mode so you can join servers.
- 02
How the sign-in happens
The launcher opens Microsoft's own sign-in page in your browser (or shows a code to enter at microsoft.com/link). You type your password only on Microsoft's site: Rustic never sees it. Microsoft then gives the launcher tokens for Xbox Live and the game services, which it uses only to check ownership and to start the game.
- 03
Where the tokens are kept
The tokens are stored only in your operating system's keychain on your computer: Windows Credential Manager, the macOS Keychain or the Secret Service on Linux. They are never written to a plain file and never passed on a command line.
- 04
What is never sent to Rustic
Your Microsoft password and your Microsoft, Xbox and game tokens are never sent to Rustic servers. The optional Rustic account is separate: it has its own email and password.
- 05
Linking your game profile to a Rustic account (optional)
If you choose to link your game profile to your Rustic account (to show your cosmetics to friends), the launcher proves the link through the game's own session server: Rustic only learns your profile's UUID and name, never a token.
- 06
Signing out and revoking access
Signing out in the launcher removes the tokens from your keychain. You can also revoke the launcher's access at any time from your Microsoft account's privacy settings (account.microsoft.com, Apps and services).
- 07
Questions
For any question about the sign-in or your data, see the privacy policy or contact us at the address in the legal notice.
Rustic is not an official Minecraft product. Not approved by or associated with Mojang or Microsoft.