Privacy policy
Last updated 16 October 2026.
The short version
Phase stores your email address, a hash of your password, your macro settings, and a one-way fingerprint of the PC your licence is on. It never sees your card details. It does not read your files, your keystrokes, or anything you do outside the app. Email [email protected] and your account and everything attached to it is deleted.
What is stored
- Your email address, and when you created the account. The email is how you log in and the only way we can reach you.
- A hash of your password, with a per-account random salt, run through 100,000 rounds of PBKDF2, and when you last changed it, so older sign-ins can be ended. The password itself is never written down and cannot be recovered from the hash — not by us either.
- Your licence status — whether the account is paid, which plan, and when it was paid. For a subscription also: when the current period ends, whether it is set to renew, Stripe's status for it (for example, that a renewal payment failed and is being retried) and when Stripe last updated it, plus Stripe's reference numbers for your customer record and subscription.
- Your macro settings — keybinds, hotbar slots and delays, and when you last saved them. Numbers describing how you have configured the app and the time of the last save, nothing else.
- The PC your licence is on — a one-way fingerprint made from Windows' install ID and your system drive's serial number, hashed on your PC before it is sent and hashed again on ours, plus the PC's name as Windows reports it and when it was first and last seen. This is what keeps a licence to one PC. The fingerprint can't be turned back into those IDs, and releasing the PC from your account page deletes its record. What stays is when you last moved the licence, because the next move has to wait 14 days from then. If support releases your PC for you, the only thing kept is when Phase was last opened on your account — no PC name or fingerprint.
- Session tokens and the PowerShell edition's sign-in key, so you stay signed in. Only hashes of them are stored. Sessions expire.
- Short-lived records that keep the service safe to use: counters that limit how often things can be tried (logging in, creating accounts, downloads), keyed by a hash rather than your email or IP address, and one-time download links. They delete themselves within an hour.
That is the complete list. There is no profile, no advertising identifier, and nothing bought from or sold to anyone.
What is not stored
- Card details. Payment happens on Stripe's own checkout. Card numbers never reach this site or its servers.
- Your keystrokes. The app reads the state of the specific keys you bind, so it can tell whether you are still holding one. It does not record what you type, and it writes nothing about your input to disk or to the network.
- Your Minecraft account, your files, or any other application. Phase never asks for them and has no reason to.
Who else is involved
- Cloudflare hosts the site, the API and the storage. Like any host it processes the requests your browser makes, including IP addresses, as part of serving and protecting the service.
- Stripe handles payment and holds the payment record. Their privacy policy governs what they keep.
- Google Fonts serves the typeface this site uses, which means your browser requests a file from Google when a page loads.
Nobody else. There are no advertising or analytics trackers on this site.
Where it is kept, and for how long
Account records and settings live in Cloudflare's storage and are kept for as long as the account exists. Delete the account and they go with it. Payment records are held by Stripe for as long as their own retention and tax obligations require.
Your rights
You can ask for a copy of everything held about you, ask for it to be corrected, or ask for it to be deleted. One email to [email protected] is enough — there is no form. Deleting the account removes the record; a paid licence goes with it and is not recoverable afterwards, so if you only want to stop a subscription, cancel it instead.
Children
Phase is not directed at children under 13, and accounts are not knowingly created for them. If one has been, email us and it will be removed.
Changes
If what is collected ever changes, this page changes with it and the date at the top moves. Anything that materially affects existing customers will also be announced in the Discord.
Contact
[email protected], or the Discord.