Privacy & Data Protection

Privacy Policy

What we collect, why we collect it, and what other people can see about you. Last updated 2026-08-31.

In short

  • • We run a Hytale server and this website. We do not sell your data and we do not run ads.
  • • If you play on the server, your in-game name and statistics are public on this website.
  • • Logging in with Discord is optional. Your Discord avatar is shown publicly only after you link your account yourself.
  • • You can ask us to remove your profile or your account data at any time.

1. Visiting the website

Every request is recorded so we can keep the site running and spot abuse.

  • • IP address and the time of the request
  • • Browser and device type (User-Agent)
  • • Approximate location — country and city, derived from the IP address
  • • The page you opened and the referring page, if your browser sent one

This is used for security, abuse prevention and visitor statistics. The statistics are visible to administrators only.

2. Discord login

Logging in is optional — the website works without it. When you do log in, Discord gives us:

  • • Your Discord user ID, username and avatar
  • • The email address on your Discord account
  • • Your roles on our Discord server, used to decide what you may access

We never receive your Discord password. We do not post anything on your behalf.

3. Playing on the server

When you join the AivarCraft Hytale server, the game server sends us your progress roughly every five minutes. We store:

  • • Your Hytale account identifier (UUID) and your in-game name
  • • Previous in-game names, when you change them
  • • When you join and leave, and how long you play
  • • Level, prestige, XP and your chosen class
  • • Mobs and players killed, deaths, damage dealt, distance travelled
  • • Blocks placed and broken, items crafted, quests completed, locations saved
  • • Achievements, including the date and time each one was earned, and your progress towards the rest
  • • A daily snapshot of these numbers, so progress over time can be shown

The UUID is what everything is tied to — that is why changing your name does not lose your history. We keep the raw message from the game server as it arrived, so that new statistics the game starts sending are not lost before we can display them.

4. What other people can see

This is the part worth reading twice. Player profiles on this website are public — anyone can open them, and search engines are allowed to index them. Publicly visible:

  • • Your in-game name, whether you are online, your level, class and world
  • • Your playtime, XP, kills, deaths and the other statistics listed above
  • • Your achievements and when you earned them
  • • Your position in the leaderboards

Visible to administrators only: your Hytale UUID, your internal record ID and your name history.

Your Discord avatar and username appear next to your in-game name only if you linked your Discord account to your Hytale name yourself, in My Account. Unlink it and the picture stops being shown.

5. Donations

Donations are handled by PayPal. We never see your card or bank details — PayPal tells us only that a payment happened, and sends us the amount, the transaction ID, the payer email address and the in-game name entered with the donation, so we can credit it to the right player.

6. Cookies and local storage

We use only what the site needs to work. No advertising or tracking cookies.

  • PHPSESSID — keeps your current session
  • aivarcraft_remember — keeps you logged in for up to 7 days
  • CSRF token — prevents actions being submitted from other websites
  • theme — your light/dark choice, stored in your browser, never sent to us

You can clear them in your browser settings, but staying logged in will not work without them.

7. Other services

Some parts of the page are loaded from other companies, which means those companies see your IP address:

  • Discord — login, avatars, and the community widget on the front page
  • Font Awesome — the icons used across the site
  • Cloudflare — sits in front of the website and filters attacks
  • PayPal — only if you choose to donate
  • • Our hosting provider, and legal authorities if the law requires it

We do not use Google Analytics or any comparable advertising or profiling service.

8. Moderation records

We keep a separate, administrators-only list of accounts flagged for cheating in other games. It contains only information those accounts publish themselves on public profiles, and it is used for moderation. It is not shown to visitors. If you believe you are listed by mistake, contact us and we will review it.

9. How long we keep it

  • Game statistics and achievements — kept while the server runs, so history and leaderboards stay meaningful
  • Login tokens — expire after 7 days, or immediately when you log out
  • Your IP address — removed from visit records after 30 days. The visit itself stays, but without the address: country, city and device type remain, and the address is gone for good — not shortened or encrypted, deleted
  • Visit records — deleted entirely after 180 days
  • Technical logs — routine entries 90 days, warnings 1 year, errors and login or security events 2 years

These periods are enforced by a job that runs every night, not by hand — so they hold whether or not anyone remembers to check.

Removed achievements are never deleted from your profile: if the game stops offering one, it stays visible to the players who already earned it.

10. Your rights

You can ask us to show you what we hold about you, correct it, or delete it. That includes taking your player profile off the website entirely. Tell us your in-game name and we will do it — no explanation required.

Contact
[email protected] or a message on our Discord.

11. External links and changes

Pages we link to — Discord, the Hytale website, download pages — have their own privacy practices, which we do not control.

If we start collecting something new, this page is updated with it. The date at the top always shows when it last changed.