Privacy Policy
1. Who is responsible
The controller of your personal data is Adrian, a private individual from the Małopolska region (Lesser Poland), Poland, who runs hawkac.pl under the name AegisTech. Contact: through our Discord server.
2. What we store, why, and for how long
| Data | Why | Legal basis (GDPR) | Kept |
|---|---|---|---|
| Your e-mail address, a hash of your password (never the password itself), when you signed up and accepted the terms | To run your account | Art. 6(1)(b), the contract | Until you delete the account |
| A sign-in session: a random code in a cookie, stored by us only as a hash | To keep you signed in | Art. 6(1)(b) | 30 days, or until you sign out |
| Counters of failed sign-ins per account, and per hashed IP address | To stop password guessing and mass sign-ups | Art. 6(1)(f), security | Up to 24 hours |
| Your linked servers: name, HawkAC version, and what the panel shows (HawkAC's detections, kicks and bans; online players' names, UUIDs, ping, client, world, game mode and suspicion; the checks; the server's TPS, memory, CPU and worlds) | To show you the panel | Art. 6(1)(b) for you; for your players we act on your behalf (Art. 28) | The latest figures are replaced at every sync; the last 500 events; a player's details for 2 minutes; everything until you remove the server or delete the account |
| Codes for adding a server | To link a server to your account | Art. 6(1)(b) | 10 minutes, or until used |
A linked server never sends chat, IP addresses or players' coordinates.
3. Who else sees the data
The site and its database run on Cloudflare (Cloudflare, Inc.), which processes data for us as our hosting provider. To deliver and protect the site, Cloudflare also processes the technical data of every request, such as your IP address. Cloudflare may process data outside the European Economic Area under the safeguards described in its data processing terms. We do not sell data, show ads or use analytics or tracking tools.
4. Cookies and storage in your browser
hawkac.pl uses one cookie, hk_s, which keeps you signed in. It is necessary for the account to work, so we do not ask for consent. The panel also remembers your theme and last tab in your browser's local storage. There are no tracking cookies.
5. Your rights
You can ask for access to your data, its correction, deletion, restriction, a copy in a portable format, and you can object to processing based on our legitimate interest. You can delete your account and all its data yourself in the panel. Message us on our Discord server for anything else. You can also complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl) or to the authority in your country.
6. The plugins themselves
This policy covers hawkac.pl. What HawkAC and HawkAC Lite record on a server, and the anonymous data they can send to improve detection (the ai-telemetry setting), is described in each plugin's config.yml and on its store page. That data is not connected to your account here.
7. Changes
When this policy changes, the date at the top changes and we announce important changes on Discord.