Privacy Policy

How HytaleCharacter.com collects, uses, shares, retains, and protects personal data

2026/07/25

Who We Are

HytaleCharacter.com is an independent, fan-maintained character recipe archive operated under the name molith. It is not affiliated with Hypixel Studios or Hytale.

For privacy questions, access or deletion requests, consent withdrawal, or complaints, email support@hytalecharacter.com or use our contact page.

Scope

This policy applies to HytaleCharacter.com, its account and submission features, and communications sent through the site. It does not control third-party websites that we link to.

Data We Collect

Depending on how you use the site, we may process:

  • Account data: email address, display name, profile image, authentication provider identifiers, session and security records.
  • Submission and rights records: character recipe data, screenshots, source details, license or permission statements, display consent, public-credit choice, and related editorial correspondence.
  • Contact data: your name, email address, message, and our reply history.
  • Files and content: images or other files you upload, their storage keys, file type, size, and ownership metadata.
  • Usage and device data: pages viewed, referrer, approximate location derived from IP address, browser and device information, timestamps, and consent signals.
  • Security and operational data: IP address, request metadata, error logs, abuse indicators, and records needed to protect accounts and the service.

We do not ask for sensitive personal information and do not intentionally collect precise location, government identifiers, financial account details, or health data.

How We Use Data

We use personal data to:

  • operate accounts, authentication, saved presets, submissions, and contact functions;
  • review screenshot sources, rights, display permission, and public-credit choices before publication;
  • respond to support, correction, copyright, and takedown requests;
  • secure the site, prevent fraud and abuse, troubleshoot errors, and maintain backups;
  • understand site performance and improve content when analytics consent has been granted;
  • deliver and measure advertising in accordance with the choices collected by Google's certified consent management platform; and
  • comply with legal obligations and establish, exercise, or defend legal claims.

We do not sell personal information for money. Where US state law treats certain advertising disclosures as a “sale,” “sharing,” or targeted advertising, eligible visitors can use the Google privacy message and its opt-out controls.

Where the GDPR, UK GDPR, or similar law applies, we rely on:

  • Contract or requested steps to create and operate your account and process a submission you ask us to review.
  • Consent for optional analytics storage, advertising personalization where required, public contributor credit, and other choices shown in Google's consent message.
  • Legitimate interests to secure the service, prevent abuse, maintain editorial records, improve non-consent-dependent site operations, and respond to users, balanced against your rights.
  • Legal obligations and legal claims for compliance, copyright matters, fraud prevention, and dispute records.

You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

Service Providers and Recipients

We use the following categories of providers:

  • Cloudflare: Workers hosting, D1 database, R2 object storage, CDN, DNS, security, and request logging.
  • Google: Google OAuth for optional sign-in; Google Analytics 4 after analytics consent; Google AdSense site verification, advertising, and Google's certified Privacy & messaging CMP.
  • Email providers: delivery of account, submission, support, and operational messages.
  • Notification services: limited operational alerts to the site operator.

Providers process data under their own terms and privacy notices and may act as processors or independent controllers depending on the service. Google's CMP lists the advertising technology providers applicable to a visitor's choices.

Essential cookies and local storage support authentication, security, preferences, and daily anonymous view deduplication. Google Analytics does not load until Google's CMP reports that analytics storage is granted or not legally applicable. We set Google Consent Mode defaults to denied for analytics and advertising storage.

The AdSense publisher tag is present so Google can verify the site and deliver the published privacy message. No advertising slots are intentionally placed before AdSense approval. If advertising is enabled later, Google and approved advertising partners may process device, usage, consent, and advertising data according to the choices shown in the CMP.

Google and other third-party vendors may place and read cookies on your browser, or use web beacons, IP addresses, or other identifiers to collect information because ads are served or measured on this site. These technologies may support ad delivery, frequency control, fraud prevention, reporting, measurement, and—when your choices and applicable law allow it—personalization. Read how Google uses data when you use sites or apps that use its services for more information.

Use Privacy choices in the footer to reopen Google's privacy and cookie settings. You may also clear or block cookies in your browser. See our Cookie Policy for more detail.

Storage and Retention

  • Account data is kept while the account is active. User-initiated deletion removes active account data, subject to short-lived backups, security records, and data we must retain for legal reasons.
  • Contact and support correspondence is normally retained for up to 24 months after the last exchange.
  • Submission, source, rights, and display-consent records are retained while the content is used and for up to five years after removal when reasonably needed to document permission or resolve disputes.
  • Anonymous preset-view identifiers expire after 90 days; daily view records may be retained in aggregate.
  • Security and request logs are generally retained for up to 90 days unless an incident, abuse investigation, or legal obligation requires longer retention.
  • Uploaded files remain until the related account or submission is deleted or the file is no longer needed, subject to backup and dispute-retention needs.
  • Analytics and advertising data are retained by Google under the relevant product settings, consent choices, and Google's policies.

When a fixed period is not practical, we keep data only as long as needed for the purpose described above and then delete or de-identify it.

International Transfers

We operate an online service using providers that process data in multiple countries, including the United States. Where required, providers use recognized transfer safeguards such as adequacy decisions, standard contractual clauses, or equivalent mechanisms. Local laws in a destination country may differ from those where you live.

Your Rights

Depending on your location, you may have rights to:

  • access, correct, delete, or receive a copy of your personal data;
  • object to or restrict certain processing;
  • withdraw consent;
  • opt out of targeted advertising, sale, or sharing as defined by applicable US state law;
  • appeal a refusal to act on a request; and
  • complain to your local data protection authority.

Send requests to support@hytalecharacter.com. We may need to verify your identity. Authorized agents should provide evidence of authority. We will respond within the period required by applicable law.

Children

The site is intended for a general gaming audience and is not directed to children under 13. We do not knowingly collect personal data from children under 13. A parent or guardian who believes a child provided personal data should contact us so we can investigate and delete it.

Security

We use access controls, encrypted transport, provider security controls, and limited administrative access. No online service can guarantee absolute security. Please report suspected account or data security issues to support@hytalecharacter.com.

Changes

We may update this policy when our practices, providers, or legal obligations change. The date at the top identifies the latest revision. Material changes will be highlighted on the site or through another appropriate notice.