Legal

Privacy Policy

for the TwoGG Pinecone launcher and the Pinecone server · Last updated: 13 October 2026. This is a translation; the German version is authoritative.

1. Controller

See also the legal notice (Impressum).

2. What this covers

TwoGG Pinecone has two parts:

• the launcher, a program on your computer that starts Minecraft, installs modpacks and lets you join TwoGG events,
• the Pinecone server at pinecone.twogg.app, which provides TwoGG modpacks, news and the friends list.

This website (the download page) is served by GitHub Pages; GitHub processes your IP address for that (see section 5).

3. Data that stays on your computer

The launcher stores this data in its data folder on your device and does not send it to us:

• instances, mods, worlds, screenshots and settings,
• play time per instance,
• the list of your Minecraft accounts (name, UUID),
• launcher log files (7 days).

Access tokens for your Microsoft account, the twogg.app link and the friends list are kept in your operating system's keychain.

Remove accounts under Settings › Accounts. Delete everything else by deleting the data folder (path under Settings › General) or by uninstalling Pinecone. A diagnostics ZIP is created and shared only by you; it contains no account data.

4. Data on the Pinecone server

a) Modpacks, news, TwoGG picks

• Serving requests technically involves your IP address. To rate-limit download links and CurseForge requests, the server keeps it in memory only for the respective window (10 or 1 minute). It is never written to a database.
• The reverse proxy in front of the server writes access logs including IP addresses, which are deleted after 14 days.
• Legal basis: Art. 6(1)(f) GDPR (secure operation and abuse prevention).

b) Friends list (only if you use it)

• We store your Minecraft name and UUID, your friends and open requests, your friend code, when you were last active and what you are playing (instance name, version, server).
• Sign-in uses Mojang's session check; we never see your password. The session key is stored only as a hash and expires after 30 days.
• Only your friends can see your online status and activity.
• Invites to a server contain the server address and, if any, the modpack. They expire after 15 minutes and are then deleted.
• Shared sync packs (options, key bindings, project list; never your own files) are kept for 30 days, at most 20 per player. Only signed-in friends-list users who have the link can open them.
• Deletion: Settings › Accounts › “Delete my friends data” removes your profile, friends, requests, invites and shared sync packs immediately. Profiles inactive for 365 days are deleted automatically.
• Legal basis: Art. 6(1)(b) GDPR (providing the feature you use).

c) Usage statistics

• Per day, the server counts completed downloads per modpack version, the number of active friends-list profiles and the launcher versions in use.
• Only these numbers are stored, no IP addresses, names or UUIDs. So that a launcher counts only once per day, the server hashes IP address and version with a random value that changes daily and keeps that hash in memory until the end of the day.
• The counters are deleted after 400 days.
• Legal basis: Art. 6(1)(f) GDPR (planning events and improving Pinecone).

d) CurseForge content

When you search or install CurseForge content, the Pinecone server forwards the search term, filters and project or file IDs to CurseForge (Overwolf), without your IP address or account data. The server does not store these requests. The launcher downloads the files directly from CurseForge.

5. Services the launcher contacts directly

These providers see your IP address, and their own privacy policies apply. Some of them are based in or process data in the United States.

Fonts are bundled with the launcher and this website; there is no connection to Google Fonts.

6. Linking twogg.app

If you link your TwoGG account, Pinecone reads your profile, event registrations, teams and guild, and event server access from twogg.app. The launcher stores only an access token in the keychain and a cached copy of the events on your device. Unlinking deletes both. What twogg.app itself stores is covered by the twogg.app privacy policy.

7. Children

Microsoft's age rules apply to signing in with a Microsoft account. If you are under 16, please talk to your parents before using the friends list or linking twogg.app.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). Write to legal@twogg.de.

You may also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (ldi.nrw.de).

9. Changes

When Pinecone changes, we update this policy. The version published here applies.