GDPR Privacy Policy
This Privacy Policy explains how Hytale Cave collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR).
Data Controller
This Privacy Policy has been prepared by Hytale Cave in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679. Hytale Cave acts as the Data Controller for the personal data processed through this platform. By using our platform, you acknowledge that you have read and understood this policy.
Data We Collect
When you log in via Discord OAuth, we only process the following data: your Discord user ID, username, and profile avatar. No additional personal data (such as email address, phone number, or location) is collected. Content such as server applications, player profiles, and community listings consists solely of information you voluntarily provide.
Legal Basis and Purpose of Processing
Your personal data is processed under the following GDPR lawful bases: Article 6(1)(b) — Processing is necessary for the performance of a contract to which you are party; and Article 6(1)(f) — Legitimate interests pursued by the controller. Primary purposes include: authentication and login, user profile creation, managing applications, and sending notifications.
Data Storage and Security
Your data is stored on secure servers operated by Supabase, which is SOC 2 Type II certified and uses industry-standard encryption. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. Supabase infrastructure may involve data transfer to the United States under standard contractual clauses.
Your Rights Under GDPR
Under the GDPR, you have the following rights: (1) Right of access — request a copy of your personal data; (2) Right to rectification — correct inaccurate data; (3) Right to erasure ('right to be forgotten'); (4) Right to restriction of processing; (5) Right to data portability; (6) Right to object — object to processing based on legitimate interests; (7) Rights related to automated decision-making and profiling. To exercise any of these rights, please contact us through our Discord server.
How to Contact Us
To exercise your data protection rights or for any privacy-related inquiries, please use the Report a Bug page on the platform or reach out via our Discord community server. We will respond to all verified requests within 30 days in accordance with GDPR requirements.
Data Deletion
If you wish to delete your account and all associated data, please submit a request via our Discord server. Your data will be permanently deleted within 30 days, subject to any legal retention obligations.
Updates to This Policy
This Privacy Policy may be updated from time to time. Significant changes will be announced on the platform. If you continue to use Hytale Cave after changes are made, you are considered to have accepted the updated policy. Last updated: April 2025.
Hytale Cave is an independent fan project with no official affiliation with Hypixel Studios. Personal data processed through this platform is used solely for the purpose of providing platform services.
