Privacy Policy

How Hytale Depot handles personal data and security records.

1. Data We Collect

Account data: username, email, authentication factors, locale, and security/session metadata.

Marketplace data: purchases, subscriptions, licenses, invoices, support history, moderation outcomes, and creator activity.

Operational data: request metadata, fraud indicators, download and license validation telemetry, and audit logs.

To provide account access, secure sessions, purchases, downloads, licensing, and customer support.

To prevent fraud, piracy, abuse, and unauthorized access to customer or creator resources.

To comply with legal, accounting, tax, and security obligations.

Processing is based on contract performance, legitimate interests in platform security, legal obligations, and consent where required.

Users in GDPR/EEA and CCPA jurisdictions may request access, correction, export, deletion, and restriction where applicable.

Certain records (for tax, anti-fraud, and legal defense) may be retained for required statutory periods.

Payment processors, email providers, hosting/CDN, and fraud/security tooling may process data on our behalf under contractual controls.

We do not sell personal data. Limited sharing occurs only as needed to operate services, investigate abuse, or comply with law.

Security controls include HTTP-only cookies, CSRF protections, role-based access controls, audit trails, upload scanning, and abuse detection.

Administrative access is restricted and logged. Sensitive actions are auditable and may require additional verification.

We retain personal data only as long as needed for service delivery, legal compliance, dispute handling, and security investigations.

Deletion requests are reviewed and processed according to operational and legal constraints.

Use the support ticket system for privacy requests (access/export/deletion/correction).

Include your account email and request type so we can verify and process the request safely.