Safety

What fkdr sends, and to whom

destination	what	when
fkdr.dev (licence server)	your fkdr licence key (the XXXX-XXXX-XXXX-XXXX key from your fkdr.dev key page, not a Minecraft or Microsoft login), a code for this computer (your licence belongs to your computer, see below) and your Minecraft account id (shown on your key page), over a secure connection; the fkdr version	when the game starts, from time to time while you play, and when checking for updates
fkdr.dev (stats)	player names or account ids from your tab list	when the Stats or Threat features resolve players
fkdr.dev (tags)	tags you create, if sharing is on	when you /fkdr tag someone
Urchin (optional)	player names, with your own Urchin API key	only if you have entered a key
Hypixel API (optional)	player names or account ids, with your own Hypixel API key	only if you have entered a key
Aurora (optional)	account ids for winstreak and ping (no key); a finals or beds count with your own Aurora API key for the number denicker; the account ids in your tab list with your Aurora key for other players' ping in TAB	when you use the Anti-sniper tab, and while Ping's OthersPing is on with an Aurora key saved
The server you are on	a server-list ping on a separate connection, like the multiplayer screen's	every few seconds while your own ping is shown and the server hides it (Hypixel games)
fkdr.dev (Aurora backup route)	the same Aurora request; your Aurora key, if the request needs it, passed along and not stored	only when a direct connection to Aurora fails
fkdr.dev (lyrics)	the artist and title of the song you are playing	once per song, while the now playing card shows lyrics
Apple's iTunes search	the artist and title of the song you are playing	only when your music player does not share an album cover
Hypixel	ordinary chat commands: /who, /play …, /p …, /block …	only when a feature you enabled sends one, such as auto-requeue or block denick

fkdr never sends your fkdr licence key anywhere but fkdr.dev, never sends a third-party API key anywhere but its own service (except an Aurora request passed through fkdr.dev, above), never sends your Minecraft or Microsoft login, and never sends chat you did not type.

The code for your computer

Your licence works on the computers it is set up on, so fkdr sends a code for your computer. The code says nothing about you and is used only to count how many computers the key is on. /fkdr licence shows it under device, so you can give it to support.

What stays on your machine

Your config, HUD layout, saved tags, scripts and their storage, and your saved key. None of it is uploaded.

Hypixel

Outside the enhancements tab, fkdr is an overlay: it reads what the server already sends you and draws over it. The enhancements tab's modules act in game for you (combat, movement, building), and only while you switch them on.

Hypixel sets its own rules, and an overlay that only reads is not guaranteed to be safe from a ban. Features that draw information about other players (stats, threat, tags, hitboxes) are in the category Hypixel calls "disallowed modifications" for some servers and tolerated on others. Use them at your own risk, keep the more visible render features off in ranked or tournament play, and never use fkdr on a server that has said no.

Scripts and extensions

• Scripts run in a safe box: they cannot open your files, cannot go online except through the http helper, and cannot reach into the game or fkdr itself. They cannot read your key. Read a script before you run it anyway.
• Extensions (.jar) are not sandboxed and can do anything the game can. They are off by default. Only load extensions whose source you trust, and never one sent to you in a DM.

Your key

Keep it private, and keep your copy of fkdr to yourself: a key caught being shared or resold is switched off for good with no refund. See licence terms.

Anyone with your key can set it up on their own computer and take one of its device slots. If that happens, free the device on your key page and run /key reset in Discord.