Legal

Privacy Policy

Version of 10 October 2026

1. Who is responsible

The controller of your personal data is Adrian, a private individual from the Małopolska region (Lesser Poland), Poland, who runs hawkac.pl under the name AegisTech. Contact: through our Discord server.

2. What we store, why, and for how long

DataWhyLegal basis (GDPR)Kept
Your e-mail address, a hash of your password (never the password itself), when you signed up and accepted the termsTo run your accountArt. 6(1)(b), the contractUntil you delete the account
A sign-in session: a random code in a cookie, stored by us only as a hashTo keep you signed inArt. 6(1)(b)30 days, or until you sign out
Counters of failed sign-ins per account, and per hashed IP addressTo stop password guessing and mass sign-upsArt. 6(1)(f), securityUp to 24 hours
Your linked servers: name, HawkAC version, and what the panel shows (HawkAC's detections, kicks and bans; online players' names, UUIDs, ping, client, world, game mode and suspicion; the checks; the server's TPS, memory, CPU and worlds)To show you the panelArt. 6(1)(b) for you; for your players we act on your behalf (Art. 28)The latest figures are replaced at every sync; the last 500 events; a player's details for 2 minutes; everything until you remove the server or delete the account
Codes for adding a serverTo link a server to your accountArt. 6(1)(b)10 minutes, or until used

A linked server never sends chat, IP addresses or players' coordinates.

3. Who else sees the data

The site and its database run on Cloudflare (Cloudflare, Inc.), which processes data for us as our hosting provider. To deliver and protect the site, Cloudflare also processes the technical data of every request, such as your IP address. Cloudflare may process data outside the European Economic Area under the safeguards described in its data processing terms. We do not sell data, show ads or use analytics or tracking tools.

4. Cookies and storage in your browser

hawkac.pl uses one cookie, hk_s, which keeps you signed in. It is necessary for the account to work, so we do not ask for consent. The panel also remembers your theme and last tab in your browser's local storage. There are no tracking cookies.

5. Your rights

You can ask for access to your data, its correction, deletion, restriction, a copy in a portable format, and you can object to processing based on our legitimate interest. You can delete your account and all its data yourself in the panel. Message us on our Discord server for anything else. You can also complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl) or to the authority in your country.

6. The plugins themselves

This policy covers hawkac.pl. What HawkAC and HawkAC Lite record on a server, and the anonymous data they can send to improve detection (the ai-telemetry setting), is described in each plugin's config.yml and on its store page. That data is not connected to your account here.

7. Changes

When this policy changes, the date at the top changes and we announce important changes on Discord.