hllplanner.net

Privacy Policy

Last Updated: October 18, 2025

hllplanner.net ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service ("Service").

1. Information We Collect

a) Information You Provide to Us (Your Personal Data)

  • Account Information: When you sign up via Discord OAuth2, we collect your Discord ID, username, and avatar.
  • Server Credentials: We collect and store encrypted server credentials (e.g., RCON passwords) for the game servers you link.
  • User Content: We collect any images or text descriptions you upload.

b) Information We Process on Your Behalf (Player Data)

  • As a Data Processor, we collect player data from your connected servers as instructed by you. This includes Steam IDs and player usernames. You are the Data Controller for this information.

c) Information We Collect Automatically

  • Cookies: We use essential cookies (e.g., NextAuth JSON Web Tokens) to keep you logged in and maintain your session. We do not use third-party tracking or advertising cookies.
  • Analytics: We use a self-hosted instance of Umami for anonymous website analytics. Our analytics service is configured to not collect or store IP addresses or other personal identifiers.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Authenticate your account and securely connect to your game servers.
  • Process your subscription payments (via Stripe).
  • Respond to your support requests.
  • Monitor usage to improve the Service.
  • Enforce our Terms of Service.

3. How We Share Your Information

We do not sell or rent your personal information. We may share your information only in the following limited circumstances:

a) With Our Service Providers (Sub-processors)

We use third-party companies ("sub-processors") to help us operate, secure, and improve our Service. These companies are authorized to process your information only as necessary to provide their services to us.

  • Stripe: Our payment processor.
  • IONOS: Provides the VPS (Virtual Private Server) hosting for our application and primary database.
  • Cloudflare: Provides network security, DNS, storage and content delivery for user-uploaded images, and backup storage.

b) For Legal Reasons

We may disclose your information if we believe it is required by law, subpoena, or other legal process, or to protect the rights, property, or safety of hllplanner.net, our users, or the public.

c) Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

4. Data Security

We take data security very seriously. We implement robust technical and organizational measures to protect your data from unauthorized access, use, or disclosure. These measures include:

  • Encryption: Sensitive server credentials (e.g., RCON passwords) are encrypted at rest.
  • Access Control: We follow the principle of least privilege. Access to our core servers and databases is strictly limited to authorized personnel (in this case, the owner) and is protected by multi-factor authentication and identity-based access controls.
  • Network Security: Our servers are protected by firewalls, and we employ multiple layers of security to control and restrict network access.

Despite these measures, no electronic transmission or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

5. Data Retention and Deletion

We retain personal data only for as long as necessary to provide the Service or as required by law.

  • Anonymization: When we are required to "delete" player-identifiable data (such as a Steam ID), we will do so using anonymization. This means we erase the Steam ID and replace it with an anonymous, irreversible identifier. This allows us to retain historical, non-personal statistical data while permanently removing all links to you as an individual.

  • Your Account Data: If you are a user (e.g., a server admin) and you delete your account, we will permanently delete or anonymize your personal account information (Discord ID, encrypted credentials, uploaded content) from our live systems within 30 days.

  • Your Rights as a Player (Right to Erasure): If you are a player on a server that uses our Service, you have the right to request the deletion (anonymization) of your personal data (e.g., your Steam ID). You have two paths to make this request:

    1. Contact Your Server Admin: You may first contact your server administrator (the Data Controller), who is legally required to instruct us to delete your data.
    2. Contact Us Directly: You may also contact us directly at [email protected]. You will be required to provide reasonable proof of ownership of your Steam ID before we can process your request.

  • Deletion on Account Termination: If a server admin deletes their hllplanner.net account, all PII they provided, including all player Steam IDs collected under their account, will be permanently deleted or anonymized from our systems in accordance with this policy.

6. Your Data Rights (EEA/UK Users)

If you are in the European Economic Area (EEA) or the UK, you have certain rights under the General Data Protection Regulation (GDPR):

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request that we correct inaccurate data.
  • Right to Erasure: You can request that we delete your personal data (as described in Section 5).
  • Right to Object: You can object to our processing of your data.

To exercise these rights, please contact us at [email protected].

7. International Data Transfers

Our Service is hosted and operated in the United States. If you are using the Service from outside the U.S., your information will be transferred to, stored, and processed in the U.S.

8. Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at: [email protected]