Privacy Policy

Last updated: January 25, 2026

1. Introduction

HytaleHome ("Company", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our subdomain service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. For the purposes of the GDPR, we are the Data Controller.

2. Definitions

  • Personal Data: Any information that relates to an identified or identifiable individual.
  • Usage Data: Data collected automatically from use of the Service (e.g., page visit duration, IP address).
  • Service: The HytaleHome website at https://hytalehome.com.
  • Service Provider: Third-party companies that process data on our behalf (e.g., Stripe, Cloudflare).
  • You: The individual or entity using the Service.

3. Information We Collect

Information You Provide

  • Account Information: Email address and password when you register
  • Subdomain Configuration: Your chosen subdomain name and target IP address or hostname
  • Payment Information: Processed securely by Stripe - we do not store your credit card details
  • Communications: Any messages you send to our support

Information Collected Automatically (Usage Data)

  • Device Information: Browser type, operating system, device type, unique device identifiers
  • Log Data: IP address, access times, pages visited, and referring URLs
  • Cookies: Session and functionality cookies (see Section 7)

4. How We Use Your Information

We use your Personal Data for the following purposes:

  • To provide the Service: Including managing your account and subdomain configuration
  • To process payments: Managing your subscription through Stripe
  • To contact you: Service notifications, billing alerts, security updates
  • To respond to requests: Customer support inquiries
  • To improve the Service: Usage analysis and feature development
  • To detect fraud: Preventing abuse and unauthorized access
  • To comply with law: Legal obligations and valid requests from authorities

5. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your Personal Data under the following legal bases:

  • Consent: You have given consent for specific purposes
  • Performance of a contract: Processing is necessary to fulfill our service agreement with you
  • Legal obligations: We are required by law to process certain data
  • Legitimate interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, service improvement), provided these do not override your rights

6. Information Sharing

We do not sell your personal information. We may share data with:

  • Stripe: For payment processing. Their Privacy Policy: stripe.com/privacy
  • Cloudflare: For DNS services - your subdomain name and target IP are stored in their system
  • Legal Requirements: When required by law, court order, or government request
  • Business Transfers: In connection with a merger, acquisition, or asset sale (with prior notice)

When we share data with Service Providers, we require them to keep your information confidential and use it only for the purposes we specify.

7. Cookies

We use cookies and similar tracking technologies. For detailed information, see our Cookies Policy.

Types of Cookies We Use

  • Necessary/Essential Cookies: Required for authentication and core functionality
  • Functionality Cookies: Remember your preferences and settings

We do not use cookies for advertising or cross-site tracking. You can disable cookies in your browser, but this may affect your ability to use our Service.

8. Data Security

We implement appropriate security measures to protect your data, including:

  • Encrypted connections (HTTPS/TLS) for all data transmission
  • Secure password hashing
  • Regular security updates and monitoring
  • Limited access to personal data by authorized personnel only

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain your Personal Data only as long as necessary for the purposes described in this Policy:

  • Account Data: Duration of your account plus up to 24 months after closure
  • Transaction Records: Up to 10 years for tax and legal compliance
  • Usage Data/Server Logs: Up to 24 months for security and analytics
  • Support Correspondence: Up to 24 months from ticket closure

When retention periods expire, we securely delete or anonymize your data. Anonymized data may be retained indefinitely for analytics.

10. International Data Transfers

Your data may be processed in countries outside your own, including the United States, where data protection laws may differ. When we transfer Personal Data outside the EEA/UK to countries without adequate protection, we use appropriate safeguards such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • UK International Data Transfer Agreement (IDTA) where applicable
  • Supplementary measures such as encryption and access controls

Contact us if you would like more information about the safeguards we use.

11. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your Personal Data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data (subject to legal retention requirements)
  • Restriction: Request restriction of processing in certain circumstances
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at support@hytalehome.com. We will respond within one month (extendable by two months for complex requests).

EU/EEA Users: You have the right to lodge a complaint with your local Data Protection Authority.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

Categories of Personal Information We Collect

  • Identifiers: Email address, IP address, account name (Collected: Yes)
  • Commercial Information: Purchase history, subscription records (Collected: Yes)
  • Internet Activity: Browsing history on our Service, interactions (Collected: Yes)
  • Geolocation: Approximate location from IP (Collected: No precise location)
  • Sensitive Personal Information: (Collected: No)

Note: We do not collect biometric data, protected classifications, professional information, or education information.

Your California Rights

  • Right to Know: Request disclosure of what Personal Information we collect, use, and share
  • Right to Delete: Request deletion of your Personal Information
  • Right to Correct: Request correction of inaccurate information
  • Right to Opt-Out: Opt out of the "sale" or "sharing" of Personal Information
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Sale of Personal Information

We do not "sell" or "share" your Personal Information as those terms are commonly understood - we do not disclose your data in exchange for money or other valuable consideration.

Exercising Your Rights

To submit a verifiable consumer request, email support@hytalehome.com. We will verify your identity and respond within 45 days (extendable by an additional 45 days if necessary).

13. "Do Not Track" Disclosure (CalOPPA)

Our Service does not respond to "Do Not Track" browser signals. However, we do not track users across third-party websites, so no action is needed in response to DNT signals.

14. California Minor Rights

California residents under 18 who are registered users may request removal of content they have publicly posted by contacting us at support@hytalehome.com. Note that removal may not ensure complete erasure if the content has been reposted by others.

15. Children's Privacy

Our Service is not directed to anyone under 16. We do not knowingly collect Personal Data from children under 16. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us immediately. If we become aware of collection from a child without parental consent, we will delete that information.

16. Links to Other Websites

Our Service may contain links to third-party websites (e.g., Stripe checkout). We have no control over and assume no responsibility for the content or privacy practices of these sites. We encourage you to review their privacy policies.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or a prominent notice on our Service prior to the change becoming effective. The "Last updated" date at the top indicates when the policy was last revised.

18. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

By email: support@hytalehome.com