Privacy Policy
STS Studio ("we", "us", or "our") respects your privacy. This Privacy Policy details our data practices across Gala Client, galaclient.com, and associated cloud allocation APIs.
1. Information We Collect
We collect only the minimum information necessary to authenticate game sessions and coordinate multiplayer instances:
- Account Identifiers: Minecraft username, unique player UUID, and AuthMe hash (if registered in-game).
- Email Address (For Cracked Verification): If you link an email for account recovery or 2FA OTP codes, we store your email address securely in hashed format to dispatch single-use authentication codes.
- Discord Identity: When linked via `/discord link` or web OAuth, we store your Discord snowflake ID and username to sync Discord server perks and support tickets.
- Technical Gameplay Metrics: Crash reports (stack traces and Java error logs) submitted manually to help diagnose launcher bugs.
2. Microsoft / Xbox OAuth Authentication
When signing in with Microsoft, authentication occurs directly on login.microsoftonline.com. Gala Client receives a temporary authorization token and reads only your Xbox gamertag, XUID, and Minecraft profile name. Your Microsoft password never touches our servers.
3. Beacon Cloud Server Logs & Queue Data
When you queue for a free Beacon Cloud Minecraft instance, our server tracks the allocation session, IP assignment, and 5-digit verification code. Once the verification code is used or expires (15 minutes), the verification token is permanently purged.
4. Cookies & Local Storage
We use browser localStorage to store:
gala_session: Active profile name and VIP status.gala_tos_agreed: Record of your agreement to the Terms and Privacy Policy.
5. Contact & Data Deletion Requests
You may request deletion of your linked email address or account records at any time by opening a ticket on our official Discord server at discord.gg/stsstudio.