Privacy Policy

Last updated: 9 February 2026

Helve Hosting ("we", "us", "our") provides free Hytale game server hosting. This policy explains what data we collect, why we collect it, and how it is stored.

1. Data We Collect

1.1 Account & Authentication

When you sign in through Hytale OAuth we store:

• Hytale UUID — your unique Hytale account identifier.
• Hytale username — used to greet you and name your server.
• Hytale profile UUID — the profile you selected during sign-in.
• OAuth tokens — a refresh token and access token issued by Hytale, used to authenticate your game server. These are never exposed in API responses.
• Session token — a random token we generate to keep you signed in. Never exposed in API responses.
• Timestamps — when your account was created, when you last logged in, and when your session expires.

1.2 Game Server Data

When a server is provisioned for you we store:

• Server name — typically {username}-server.
• Server configuration — allocated memory, CPU cores, port number, and environment variables required to run the game server.
• Server status — current state (running, stopped, etc.).
• Container ID — the Docker container identifier on the host machine.
• Game session & identity tokens — stored as environment variables so your server can authenticate with Hytale services.
• Timestamps — when the server was created and last updated.

1.3 Console & Commands

When you use the web console:

• Commands you send are forwarded to your game server. Your username and the command text are logged for operational purposes.
• Console output (stdout/stderr) is streamed to your browser in real time and is not permanently stored by us.

1.4 Operational & Infrastructure Data

• IP addresses — logged on failed authentication attempts for security monitoring. Not stored in the database.
• Resource usage metrics — CPU, memory, and disk usage of host machines. This is infrastructure data and is not linked to individual users.
• Task history — records of server operations (create, start, stop, delete, migrate) including status, timestamps, and error messages.

1.5 Advertising

We use Google AdSense to display advertisements. Google may collect data through cookies and similar technologies as described in Google's Privacy Policy. You can manage your ad personalisation preferences at Google Ad Settings.

2. How We Use Your Data

• To provide the service — provisioning, running, and managing your game server.
• Authentication — verifying your identity and keeping you signed in.
• Server authentication — using your OAuth tokens so your Hytale server can connect to Hytale services.
• Security — detecting and preventing unauthorised access.
• Operations — monitoring infrastructure health and debugging issues.

3. Data Storage & Security

• All data is stored in a SQLite database on our servers.
• Sensitive values (OAuth tokens, session tokens) are stored in the database but are never included in API responses.
• Communication between your browser and our servers uses HTTPS.
• Communication between our orchestrator and host agents uses TLS with certificate verification.

4. Data Sharing

We do not sell, trade, or share your personal data with third parties, with the following exceptions:

• Hytale / Hypixel Studios — your OAuth tokens are used to communicate with Hytale services as required to run your server.
• Google AdSense — Google may collect browsing data for ad personalisation (see section 1.5).

5. Data Retention

• Sessions expire after a configurable period (default: several days) and are cleaned up automatically.
• Temporary auth data during the sign-in flow is automatically deleted after 5 minutes.
• Server data is retained while your server exists and removed when it is deleted.
• Task history is retained for operational monitoring.

6. Your Rights

You can request:

• Access — a copy of the data we hold about you.
• Deletion — removal of your account and associated server data.

To make a request, contact us via our Discord server.

7. Children

We do not knowingly collect data from children under the age of 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

9. Contact

If you have questions about this privacy policy, reach out on our Discord server.