Effective date: January 13, 2026
1. Who We Are
WoA (the "Site"), available at playwoa.com, is a community website for a Hytale multiplayer game server. It is operated by [[OPERATOR_LEGAL_NAME]] ([[OPERATOR_TYPE]]), based in [[OPERATOR_COUNTRY_STATE]] (the "Operator," "we," "us," or "our").
We are the data controller for your personal data. For any privacy-related questions or requests, contact us at contact@playwoa.com.
Non-affiliation notice: WoA is an independent fan and community project. It is not affiliated with, endorsed by, or sponsored by Hytale or Hypixel Studios. All Hytale trademarks belong to their respective owners.
2. What Data We Collect
We only collect the data listed below. We do not collect GPS or sensor data, perform device fingerprinting, or work with advertising partners.
| Category | Examples | Source |
|---|---|---|
| Identity | Discord ID, cached Discord avatar and username; optional email address (double-opt-in verified); HyAuth Hytale account ID (kratosId) | Account creation and login via Discord OAuth or HyAuth |
| Game profile | Hytale UUID, in-game nickname and nickname history, in-game rank, avatar, banner, bio, social links | Profile linking (in-game /link code or HyAuth); game-server bridge |
| Community and activity | Guild/faction memberships, applications, audit history, leaderboard stats, votes, notifications | Your use of community features on the Site |
| Support and communication | Support tickets and messages, contact-form submissions, newsletter subscription (email and unsubscribe token) | You provide these when contacting us or subscribing |
| Technical | IP address, session cookies, CSRF token, language/region preference | Automatically collected during visits and in-game link-code events |
| Moderation | Punishment records (bans, mutes, warnings), staff audit entries | Created by staff during moderation actions |
| Cookies (analytics) | Google Analytics cookies, Microsoft Clarity cookies | Set only after you opt in via the cookie banner |
3. Why We Process Your Data (Legal Bases)
| Purpose | Data used | GDPR legal basis |
|---|---|---|
| Provide and operate your account and profile | Identity, game profile | Performance of contract (Terms of Use) |
| Enable community features (guilds, factions, leaderboards, voting) | Community and activity data | Performance of contract |
| Handle support requests and contact-form messages | Support and communication data | Performance of contract / legitimate interest |
| Send newsletter and notification emails | Email address, unsubscribe token | Consent (opt-in) |
| Maintain security, prevent abuse, and enforce our rules | Technical data, moderation records | Legitimate interest |
| Website analytics (traffic patterns, usability) | Analytics cookies | Consent (opt-in via cookie banner) |
| Comply with legal obligations | Any data as required | Legal obligation |
4. Cookies and Analytics
We use a small number of cookies. Necessary cookies (session, CSRF, language preference) are set automatically. Analytics cookies (Google Analytics and Microsoft Clarity) are off by default and load only after you give explicit consent through our cookie banner. We do not use any advertising or cross-site tracking cookies.
For full details, see our Cookie Policy.
5. Sharing and Third-Party Processors
We do not sell your personal data. We do not run advertising networks. We share data only with the following processors, as needed to operate the Site:
- Discord — processes your Discord ID, avatar, and username when you log in via Discord OAuth.
- Hytale / Hypixel Studios and Ory — processes your Hytale account data when you sign in via HyAuth.
- Google (Google Analytics) — receives analytics data only if you opt in via the cookie banner.
- Microsoft (Clarity) — receives analytics data only if you opt in via the cookie banner.
- [[SMTP_PROVIDER]] — our email service provider, used for verification and notification emails.
- Hosting provider — our self-managed server in [[HOSTING_COUNTRY]], running a PostgreSQL database.
- Game server — receives and sends presence and rank events via the server bridge.
6. International Transfers
Some of the processors listed above may be located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we rely on [[TRANSFER_MECHANISM]] to provide adequate safeguards for your data.
7. Retention
- Account and profile data is kept for as long as your account is active.
- When you delete your account, your personal data is deleted or anonymised. You can permanently delete your account from your account settings at any time.
- Moderation and ban records are kept for [[MOD_RETENTION]] after the action, to maintain community safety.
- Analytics data is retained according to Google's and Microsoft's own retention policies and only if you consented.
8. Your Rights
Under applicable data-protection law (including the GDPR), you have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten").
- Data portability — receive your data in a structured, machine-readable format.
- Object to processing based on legitimate interest.
- Withdraw consent at any time (for example, newsletter or analytics cookies).
- Complain to a supervisory authority in your country.
Self-service tools: You can export all your account data (as a JSON file) and permanently delete your account directly from your account settings, without needing to contact us.
For any other request, email contact@playwoa.com.
9. Children's Privacy
You must be at least 13 years old to create an account. If you are in the EU and under 16, you need parental or guardian consent.
If we learn that an account belongs to someone below the minimum age, we will suspend the account and delete the associated personal data as soon as reasonably possible.
10. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure session handling, and access controls. No system is perfectly secure, and we cannot guarantee absolute security.
Data Breaches
If we become aware of a breach that is likely to affect your rights, we will notify the relevant supervisory authority and, where required, you, without undue delay.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. For significant changes, we will make reasonable efforts to notify you (for example, through a Site notice or email if you have opted in).
12. Contact Us
For privacy questions or data requests: contact@playwoa.com
General enquiries: contact@playwoa.com
Discord: /discord