Privacy policy — CreeperWorks

Privacy policy隐私政策

Applies to CreeperWorks (苦力怕工坊) for Windows, version 4.4.0 · Last updated 4 November 2026 适用于 Windows 版苦力怕工坊（CreeperWorks）4.4.0 · 最后更新 2026 年 11 月 4 日

The short version: the developer runs one small server, and it only knows who you are — the launcher account you signed in with, a hash of its password, the sign-in time and IP. Nothing about your computer, your game or your Microsoft account is sent to it. Microsoft credentials are handled only by Microsoft; the token stays on your own PC, encrypted with Windows DPAPI. Everything else the application stores is local, and deleting the data folder removes it. 一句话版本：开发者只运行一台很小的服务器，它只知道「你是谁」——你登录用的启动器账号、它的密码哈希、登录时间与 IP。关于你的电脑、游戏内容、微软账号的任何东西都不会发过去。微软凭据只由微软处理；令牌留在你自己的电脑上，用 Windows DPAPI 加密。程序保存的其他内容都在本机，删掉数据目录即全部消失。

1. Who this policy covers一、适用范围

This policy covers the CreeperWorks desktop application for Windows (the “application”) and this website. It explains which data the application processes, where that data goes, and what control you have. It does not cover Microsoft's, Mojang's, Modrinth's or CurseForge's own services — each of those has its own policy. 本政策适用于 Windows 版苦力怕工坊桌面程序（下称「程序」）与本网站，说明程序会处理哪些数据、这些数据去了哪里、你能控制到什么程度。微软、Mojang、Modrinth、CurseForge 各自的服务不在此范围内，它们各有自己的政策。

2. The launcher account (access control)二、启动器账号（访问控制）

This launcher is not distributed publicly. Before it will start, you sign in with a launcher account issued by the developer — a separate thing from your Microsoft account. That sign-in is the only part of the application that talks to a server run by the developer. 这个启动器不公开发放。启动前需要用开发者发放的「启动器账号」登录，它和你的微软账号是两回事。整个程序里，只有这一步会连到开发者自己的服务器。

Kept on the developer's server开发者服务器上保存的	Never sent to it绝不会发过去的
the username you were issued发给你的用户名 a salted scrypt hash of the password — the password itself is not stored密码的 scrypt 加盐哈希——密码原文不保存 time and IP address of the last sign-in最近一次登录的时间与 IP a short sign-in log — time, IP and whether the attempt succeeded — used only to spot abuse; it rotates and holds recent entries, not a history一份简短的登录记录——时间、IP、成功与否，只用于发现异常尝试；写满即轮换，只留近期，不构成长期履历	Microsoft passwords or tokens微软密码或令牌 Minecraft profile, skins, worlds, mods, screenshotsMinecraft 角色、皮肤、存档、模组、截图 anything else on your computer你电脑上的其它任何内容

Kept on the developer's server开发者服务器上保存的

Never sent to it绝不会发过去的

the username you were issued发给你的用户名
a salted scrypt hash of the password — the password itself is not stored密码的 scrypt 加盐哈希——密码原文不保存
time and IP address of the last sign-in最近一次登录的时间与 IP
a short sign-in log — time, IP and whether the attempt succeeded — used only to spot abuse; it rotates and holds recent entries, not a history一份简短的登录记录——时间、IP、成功与否，只用于发现异常尝试；写满即轮换，只留近期，不构成长期履历

Microsoft passwords or tokens微软密码或令牌
Minecraft profile, skins, worlds, mods, screenshotsMinecraft 角色、皮肤、存档、模组、截图
anything else on your computer你电脑上的其它任何内容

Accounts are managed through a private admin page on the same server, reachable only with the developer's own password over HTTPS; it is not linked from this site and has no public registration. Nothing in it is shared with anyone else. 账号在同一个服务器上的私有后台里管理，只能凭开发者自己的密码通过 HTTPS 进入；这个后台不在本页给出入口，也没有公开注册。里面的内容不会提供给任何第三方。

Signing in issues a token valid for 30 days. It is stored in data/license.json on your PC, encrypted with DPAPI, and checked with the server when the launcher starts. If the server cannot be reached, the launcher keeps working for up to 72 hours after the last successful check, then asks to go online again. Deleting that file signs you out; deleting your account is done by hand — write to the address at the bottom and the deletion is confirmed by reply. 登录后签发一个 30 天有效的令牌，存在本机 data/license.json，用 DPAPI 加密；启动时向服务器核验一次。连不上服务器时，从上次校验成功算起最多还能离线用 72 小时，之后会要求联网。删掉这个文件就等于退出登录；删除账号是手工执行的，写信到页面底部的邮箱，会回信确认。

3. Data the developer does not collect三、开发者不收集的数据

The application contains no telemetry, no analytics SDK, no crash-report upload and no advertising SDK. Apart from the account sign-in described in section 2, the developer never receives:程序内没有遥测、没有统计 SDK、没有崩溃上报上传、没有广告 SDK。除了第二节说的账号登录之外，开发者不会收到：

your name, e-mail address, phone number or any account identifier;你的姓名、邮箱、手机号或任何账号标识；
your Microsoft password, MFA codes or recovery information — the application has no field for them;你的微软密码、二次验证码或找回信息——程序里根本没有这些输入框；
your Minecraft profile, world list, screenshots, logs or download history;你的 Minecraft 档案、存档列表、截图、日志或下载记录；
usage statistics, feature counters, device identifiers or IP-based analytics.使用统计、功能计数、设备标识或基于 IP 的统计。

4. Data stored on your device四、保存在你设备上的数据

The application keeps a small data folder next to itself (portable build) or in the per-user install directory (installed build):程序会在自身目录（绿色版）或用户安装目录（安装版）里维护一个数据文件夹：

File文件	Contents内容
tokens.json	Microsoft refresh token and Minecraft access token, encrypted with Windows DPAPI through Electron `safeStorage`. Copying the file to another computer or another Windows user does not yield a usable token.微软刷新令牌与 Minecraft 访问令牌，通过 Electron `safeStorage` 用 Windows DPAPI 加密。把文件拷到另一台电脑或另一个系统用户下都拿不到可用令牌。
config.json	settings, installed version list, last used version, UI preferences. If you paste a CurseForge API key, it is stored here in plain text — it is your own key, it stays on your disk, and you can clear it at any time.设置、已装版本列表、上次使用的版本、界面偏好。如果你填了 CurseForge API Key，它会以明文存在这里——那是你自己的 Key，只留在你的磁盘上，随时可以清空。
downloads.json	up to 200 download history entries (what was downloaded, from where, result).最多 200 条下载记录（下载了什么、从哪来、结果如何）。
logs/	the last 50 launcher logs, written when a task fails or the game crashes. They can contain local file paths.最近 50 份启动器日志，在任务失败或游戏崩溃时写入，可能包含本机文件路径。
cache/icons/	icons extracted from mod files, cached by path, size and modification time.从模组文件里解出的图标，按路径、大小与修改时间缓存。
backups/	world backups, written as standard zip files, plus a small `.json` sidecar describing each backup.存档备份，写成标准 zip 文件，旁边附一个描述该备份的小 `.json`。

5. Microsoft account and Minecraft services五、微软账号与 Minecraft 服务

Signing in uses the Microsoft identity platform. Either you enter a device code on Microsoft's own page, or Microsoft's sign-in page is displayed inside the application window. In both cases your credentials are entered into, and verified by, Microsoft; the application never sees them.登录使用微软身份平台。要么你到微软自己的页面上输入设备码，要么由程序窗口内显示微软的登录页。两种情况下，凭据都是输入到微软、由微软校验，程序看不到。

What the application receives back, and why it needs it:程序会拿回什么、为什么需要：

OAuth tokens for the scopes XboxLive.signin and offline_access, so it can authenticate to Xbox Live and Minecraft on your behalf, and stay signed in between launches.OAuth 令牌，作用域为 XboxLive.signin 与 offline_access，用于代你完成 Xbox Live 与 Minecraft 的认证，并在下次启动时保持登录。
Entitlement status — whether the account owns Minecraft: Java Edition, checked before launching.权益状态——该账号是否拥有 Minecraft: Java 版，启动前检查。
Profile — player name, UUID and skin texture URL, used to show your account in the interface and to start the game.档案——玩家名、UUID 与皮肤地址，用于在界面上显示你的账号并启动游戏。

None of this is transmitted to the developer. It is written to tokens.json and config.json on your disk, or held in memory for the duration of a launch.这些内容不会发送给开发者，只会写进你磁盘上的 tokens.json 与 config.json，或在启动过程中短暂保存在内存里。

6. Other services contacted on your behalf六、代你访问的其他服务

To do its job the application makes ordinary HTTPS requests to the following operators. As with any web request, those operators can see your IP address and the request itself. They receive no data from the developer.为完成工作，程序会向下列运营方发起普通的 HTTPS 请求。和任何网页请求一样，这些运营方能看到你的 IP 地址与请求内容。它们不会从开发者这里收到任何数据。

Service服务	Why用途
Microsoft / Xbox Live	sign-in and authorisation登录与授权
Mojang (Minecraft services, piston-meta, libraries, resources)	account login, entitlements, version manifest, game files账号登录、权益、版本清单、游戏文件
Modrinth	mod, modpack, resource pack, shader and datapack catalogue模组、整合包、资源包、光影、数据包目录
CurseForge	only when you import a CurseForge modpack; an API key is used only if you supplied one仅在你导入 CurseForge 整合包时；只有你自己填了 Key 才会带上
FabricMC, Forge, NeoForged, QuiltMC	loader metadata and files加载器元数据与文件
BMCLAPI, MCIMirror	optional mirrors of the above, used only if you select them上面这些地址的可选镜像，只有你手动选了才会用
mc-heads.net, crafatar.com	skin image fallback, queried with the public UUID only, when Mojang's texture host is unreachable皮肤图备用源，仅在 Mojang 皮肤服务器不可达时用公开 UUID 查询

7. Retention and deletion七、保存期限与删除

All data is retained only on your device, for as long as you keep it. There is no copy anywhere else, so there is nothing for the developer to erase on your behalf. To delete everything:所有数据只保存在你的设备上，保存多久由你决定。任何其他地方都没有副本，所以也没有需要开发者代你删除的东西。要全部删除：

delete the application's data folder, or use “sign out” to remove the stored token for an account;删掉程序的 data 文件夹，或用「退出登录」清掉某个账号的令牌；
uninstalling asks whether to keep the data folder; answering no removes it;卸载时会询问是否保留数据目录，选「不保留」即一并删除；
logs and icon caches can be deleted at any time; they are regenerated as needed.日志与图标缓存随时可以删，需要时会重新生成。

8. Security八、安全措施

Tokens are encrypted with the operating system's DPAPI, tied to your Windows user account. A stolen tokens.json is not a usable credential elsewhere.令牌用操作系统的 DPAPI 加密，绑定你的 Windows 用户账户。被拷走的 tokens.json 换台机器不能用。
No password is ever stored, because none is ever received.不保存密码——因为从来没收到过密码。
Downloads from Mojang and Modrinth are verified by SHA-1 where the source publishes a hash; mismatches are reported instead of silently accepted.来自 Mojang 与 Modrinth 的下载在源头提供哈希时按 SHA-1 校验，不匹配会报错而不是默默放过。
A single-instance lock prevents two windows from refreshing the same token at the same time.单实例锁，避免两个窗口同时刷新同一个令牌。

9. Children九、未成年人

The application is not directed at children and collects no personal data from anyone. A Microsoft account is subject to Microsoft's own family and age requirements.本程序不面向儿童，也不从任何人处收集个人数据。微软账号受微软自身的家庭与年龄要求约束。

10. Your control十、你的控制权

Because no data leaves your device, you exercise every right — access, correction, deletion, portability — simply by using the application: view or edit config.json, delete tokens.json to sign an account out, delete the folder to start over. Revoking the application's access entirely is also possible from your Microsoft account's privacy page.由于数据不离开你的设备，访问、更正、删除、导出这些权利都可以直接通过使用程序行使：查看或编辑 config.json、删除 tokens.json 即退出该账号、删掉整个文件夹即彻底重来。也可以在你微软账号的隐私页面里直接撤销本应用的授权。

11. Changes to this policy十一、政策变更

If the application ever starts handling data differently, this page will be updated before that version is released, and the date at the top will change. The current statement — Microsoft credentials and game data are never sent to the developer — has been true for every released version.如果将来某个版本改变了数据处理方式，会在该版本发布前更新本页并修改顶部日期。现在的说法——微软凭据与游戏数据从不发送给开发者——对每个已发布的版本都成立。

12. Contact十二、联系方式

For any privacy question about this application: 3121883592@qq.com 关于本程序的任何隐私问题：3121883592@qq.com

CreeperWorks is an independent project and is not affiliated with Mojang Studios, Mojang Synergies AB or Microsoft. “Minecraft” is a trademark of Mojang Synergies AB. 苦力怕工坊是独立项目，与 Mojang Studios、Mojang Synergies AB 或 Microsoft 无隶属关系。「Minecraft」是 Mojang Synergies AB 的商标。