Privacy Policy

Information under Art. 13 and 14 GDPR · Last updated 2026-10-29

1. Who is responsible

The controller under the GDPR for this website and the Velo Network is:

We are not required to appoint a data protection officer. Questions about your data go to the address above.

2. The short version

• No advertising trackers, no analytics, no cookies on this website. Fonts, scripts and images come from our own server.
• Our servers are in Germany. We never see your Microsoft password or Minecraft access token.
• The game's offline features (modules, HUD, settings, profiles) run on your computer and send us nothing.
• The online features (friends, cosmetics, Store, rewards) need your Minecraft UUID and name, and you can switch them off.

3. This website

3.1 Server log files

When you visit velo-client.com, our web server records technical data for every request: IP address, date and time, requested address and status, amount of data, referring page and browser/operating system. We need this to deliver the site and to detect and stop attacks (legitimate interest, Art. 6(1)(f) GDPR). These log files are deleted after 14 days at the latest.

3.2 No cookies, no tracking

This website sets no cookies and uses no analytics or advertising tools. All fonts and files are served from our own server - nothing is loaded from Google Fonts, CDNs or social networks.

3.3 Store sign-in

To buy on this website you enter a one-time code from the launcher. We then link this browser to your Minecraft account with a random session token, which your browser keeps in its local storage (not a cookie) for up to 7 days or until you sign out. This storage is strictly necessary for the service you asked for (§ 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR). Before a sign-in, your browser solves a small computing puzzle to show it's not a bot; this happens entirely between your browser and our server, with no third party and no tracking.

3.4 Downloads

Download buttons lead to files hosted on GitHub (GitHub Inc., USA). When you download, GitHub processes your IP address and request data under the GitHub Privacy Statement. Transfers to the USA are covered by the EU-US Data Privacy Framework.

4. The Velo Network (game and launcher)

The Velo Network is on by default and can be switched off in game (Velo Network module) or in the launcher's settings. While it's on, we process the following to provide the features you use (contract, Art. 6(1)(b) GDPR):

• Identity: your Minecraft UUID and username, checked through Mojang's session server like a Minecraft server does.
• Presence: that you are online with Velo, in the game or the launcher, and - if you share it with friends - which server, world or Realm you're on. "Appear offline" hides this. Live sessions are kept in memory only.
• Friends, messages and parties: friend list, requests, blocks, direct messages (the last 300 per conversation), party membership and positions you share, waypoints you share.
• Cosmetics: the cosmetics you own and wear, and - if "Share Custom Cloak" is on - the cloak image you upload, which other Velo players can see. Velo+ members' name style (colours and effect) is shown to other Velo players.
• Cloud Sync (Velo+): if you turn it on, backups of your Velo settings, HUD layouts, profiles, waypoints and keybinds, with the time, size and the name of the PC each came from. Kept until you delete them, or 90 days after your membership ends. Account files and sign-in data are never included.
• World Hosting: while you host, your world's name, who you invited or let in, its join code and whether it's listed in Discover; while you play in someone's hosted world, your connection is relayed through our server (Minecraft's own encryption stays end to end, we only pass the data on). Nothing about a hosted world is kept after it closes.
• Shared clips: only clips you choose to share: the video, its thumbnail, title, length, server address if you leave it in, and a view count. Anyone with the link can watch it. You can delete it at any time; otherwise it's deleted after 30 days (60 days with Velo+), and Velo+ clips 30 days after your membership ends.
• Velo Coins, Store and rewards: balance, a ledger of every change (purchases, gifts, rewards, refunds, grants), owned items, wishlist, invites, and for daily rewards your play time per day and totals of Minecraft's own statistics (e.g. blocks mined, distance travelled).
• Reports: when you send a bug report or report a player, its content and the technical details you include.
• Usage statistics: when your account first and last used Velo, on which days and in which app (game, launcher, website), and how many players are online, sampled every 5 minutes. We use this to plan capacity and improve Velo (legitimate interest, Art. 6(1)(f) GDPR). It is not shared with anyone.
• Security: IP addresses and request times for rate limiting and abuse prevention (legitimate interest, Art. 6(1)(f) GDPR), kept in memory and in the 14-day server logs.

5. Payments (Tebex)

Coin packs and Velo+ are sold by Tebex Limited, 202 Hamilton House, 1 Temple Avenue, London, EC4Y 0HA, United Kingdom, as reseller and merchant of record. The checkout opens on Tebex's website; Tebex processes your payment and billing data under its own privacy policy - we never see card or bank details. Tebex sends us the order number, transaction ID, product, amount, currency and status (paid, refunded, disputed) so we can credit your coins or Velo+ and reverse them after a refund (Art. 6(1)(b) and (c) GDPR). The United Kingdom has an EU adequacy decision.

6. Rewarded ads (ayeT-Studios)

Only if you choose "Watch an ad" for free coins: an ad page from ayeT-Studios GmbH (Germany) opens in your browser. ayeT-Studios and its advertising partners may process your IP address, device and browser data and your Minecraft UUID (used as an ID so the reward reaches you), and may use cookies to show and measure ads and prevent fraud (their privacy policy). This only happens when you start an ad (consent, Art. 6(1)(a) GDPR). We only receive a confirmation and transaction ID to credit the coins.

7. Discord

If you link your Discord account (to get the Velo Neon cloak, the VIP role or staff roles), we store your Discord user ID and name together with your Minecraft UUID, and our Discord bot assigns roles on our server (contract, Art. 6(1)(b) GDPR). Using Discord itself is subject to Discord's privacy policy. You can ask us to unlink you at any time.

8. Other services the launcher talks to

• Microsoft / Xbox Live and Mojang for signing in and Minecraft sessions (Microsoft privacy statement).
• Modrinth when you search for or download mods (Modrinth privacy policy).
• GitHub to check for and download updates.
• Minecraft servers you add, which the launcher pings directly to show player counts.

9. Hosting, security and backups

Our servers are operated in Germany by 24fire GmbH, Kronenstraße 4, 68723 Schwetzingen, Germany, which acts as our processor under a data processing agreement (Art. 28 GDPR). Connections to this website, the launcher and the game are encrypted (TLS). We keep access-restricted daily backups of the Velo Network data for 14 days to recover from failures; access to the servers and the administration panel is limited to the operator and protected by two-factor authentication.

10. How long we keep data

• Web server logs: up to 14 days. Backups: 14 days.
• Velo Network account data (friends, messages, cosmetics, coins, statistics): while you use the Velo Network; on request we delete it.
• Records of purchases and payments: as long as tax and commercial law require (usually up to 10 years under German law, Art. 6(1)(c) GDPR).
• Website sign-in: up to 7 days, or until you sign out.

11. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21 GDPR). Where we rely on consent, you can withdraw it at any time with effect for the future (Art. 7(3)). To use your rights, write to support@velo-client.com with your Minecraft username. You may also complain to a supervisory authority, for example the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz.

12. Changes

We update this policy when Velo's online features change. The date at the top shows the current version.