Security

Accounts

Email confirmation is required. You can turn on two-step verification with an authenticator app, see every place you are signed in, and end sessions. We email you when someone signs in from a new browser or country.

Passwords

Passwords are stored only as secure hashes. When you sign in to the launcher, your password travels over an encrypted connection, is checked by our server and is only saved on your computer if you choose "Save my password" (encrypted by Windows, removed when you sign out). Failed attempts are limited, and 2-step verification applies there too. You can also choose to sign in through your browser instead.

Your data

We keep as little personal data as possible. Network addresses are stored only as irreversible hashes for abuse protection.

Licenses and downloads

Licenses are checked by our servers, not by the launcher. App files are downloaded only while your subscription is active.

Payments

Payments are handled by an external payment provider. We never see or store wallet keys. A payment only counts after our server has confirmed it with the provider.

Found a security problem? Email support@rexodma.cc.