Version 3 · 15 October 2026. Open Vanilla is a small open-source fan project. We collect as little as we can, sell nothing, and run no ads or analytics.
The desktop launcher
Stays on your PC: your settings, game folder, added servers and, if you choose "remember", your password encrypted with Windows (DPAPI) so only your Windows account can read it.
Contacts: this website on GitHub Pages (update checks, news and the community directory), the realm you pick (login and ping), GitHub when you search it, and the download site of anything you choose to download (for example the Internet Archive).
Never sends: analytics, crash reports, or your files. You can turn off the community directory and server pings in Settings → Privacy, and clear everything with "Clear all local data".
Accounts on an Open Vanilla realm
When you sign up with a username and password, the realm stores your account name, a password verifier (the realm can check your password but can't read it back), the date, and the IP address you signed up from.
When you sign in with Discord instead, the realm creates your game account with a random password and keeps it on the realm server, so the launcher and the browser game can sign you in without you typing one.
Realm servers keep short technical logs (connections, password changes, errors) to fight abuse. We aim to delete them within 30 days.
Community servers listed in the launcher are run by their owners, not Open Vanilla. Their own rules apply; the launcher asks before sending them your password.
Fonts load from Google Fonts, which sees your IP address.
The browser game keeps your login only for the open tab, and only until the game reads it.
Discord
Sign in with Discord asks Discord for your user ID, username and avatar (the identify permission) and, when the realm invites you to its server, permission to add you to it (guilds.join). The realm checks your roles in the Open Vanilla server to decide whether you may play. It never sees your Discord password or messages.
The Herald (our Discord bot) remembers, for each member: your Discord ID and name, when you joined and passed the welcome question, when you made a realm account, and your adventurer number. It uses this to give roles and run the welcome steps.
The website's new-adventurer feed lists you only as "A new adventurer" unless you type /feed show in Discord; then it shows your Discord display name and avatar. /feed hide turns that off again at any time.
Streams, creators and "now playing"
The streamers and creators pages list public streams and videos from Twitch, YouTube, TikTok and Kick that mention Open Vanilla or come from a linked channel, with the platforms' own thumbnails. A player from a platform loads only when you click it; then that platform's own privacy policy applies.
Linking your channel stores, on the realm, the channel name per platform, the character you name for the LIVE mark and whether you ticked "Show me as LIVE". Unlink at any time on the same page. The in-game LIVE mark also needs the Social setting, which is off until you turn it on.
"Share what I'm listening to" is off unless you turn it on in the launcher or the game page's menu. Then only the song title and artist are shared with players who look at your Persona profile. If you link Spotify for it, the Spotify sign-in token stays on your PC (launcher) or in your browser (web) and is used only to ask Spotify what is playing.
Your choices
Ask in the Open Vanilla Discord or open a GitHub issue (without personal details) to have your realm account and its data deleted, or to see what we store about it. Players must be 13 or older.
When this policy changes, the version and date above change and the change is announced in the patch notes.