Privacy Policy
How HytaleList.eu processes your personal data and which cookies it uses. Last updated: .
1. Who is responsible
The controller of your personal data is the operator of HytaleList.eu: Viktor Vasko (Yamiru). Contact for any privacy question or request: [email protected] or the contact page.
2. What data we process and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
Google sign-in: e-mail address, given name / display name, Google account ID (sub). We do not receive your Google password. Only the openid email scopes are requested. |
Creating and running your account, signing you in, preventing abuse (banned accounts). | Art. 6(1)(b) - providing the service you requested; Art. 6(1)(f) - security and abuse prevention. |
| Content you submit: server listings (name, address, description, links), comments, your chosen nickname. | Publishing your listing and comments on the site. | Art. 6(1)(b). |
| Votes: which account voted for which server and when. | Ranking of servers and the 48-hour vote limit per account and server. | Art. 6(1)(f) - fair, abuse-resistant ranking. |
| Technical data in server and CDN logs: IP address, browser (user agent), requested URL, time. IP addresses are not stored in the site database. | Operating, securing and debugging the site; blocking attacks. | Art. 6(1)(f) - security and reliability. |
| Analytics and advertising measurement (Google Analytics / Tag Manager, Meta Pixel) - only if you accept these cookies. | Understanding which pages are used; measuring advertising. | Art. 6(1)(a) - your consent, which you can withdraw at any time. |
We do not use your data for automated decisions with legal effect and we do not sell it.
3. Cookies
Necessary cookies do not need consent. Analytics and marketing cookies are set only after you choose them in the cookie banner. You can change your choice at any time: open cookie settings.
| Cookie | Category | Purpose | Lifetime |
|---|---|---|---|
HYTALELIST_SESS | Necessary | Keeps you signed in and protects sign-in and forms (CSRF). | Browser session |
cookie_consent, cookie_consent_meta | Necessary | Remembers your cookie choice, the time and the policy version (proof of consent). | 12 months |
_ga, _ga_*, _gid | Analytics (consent) | Google Analytics - anonymous usage statistics. | Up to 2 years |
_fbp | Marketing (consent) | Meta Pixel - advertising measurement. | Up to 90 days |
Our CDN and security provider (Cloudflare) may set technical security cookies when it protects the site from bots. Analytics and marketing rows apply only where those services are enabled on the site.
4. Who receives your data
- Google - sign-in (OAuth) and, only with your consent, Google Analytics / Tag Manager.
- Cloudflare - content delivery, DDoS and bot protection (it processes requests, including IP addresses).
- Hosting provider - operates the server and database that store the site's data.
- Meta - only if you accept marketing cookies and the Meta Pixel is enabled.
Some of these providers may process data outside the EU/EEA. In that case the transfer relies on an adequacy decision (such as the EU-US Data Privacy Framework) or Standard Contractual Clauses. Comments, nicknames and server listings you publish are visible to all visitors.
5. How long we keep it
- Account data (e-mail, nickname, Google ID): until you ask us to delete the account.
- Server listings, comments, votes: while the listing or account exists; removed or anonymised when the account is deleted.
- Server and CDN logs: kept for a short period and rotated regularly.
- Consent record (cookie): 12 months, then we ask again.
- Analytics / marketing cookies: for the lifetime shown in the cookie table, or until you withdraw consent.
6. Your rights
You have the right to:
- access your data and get a copy,
- have inaccurate data corrected (you can edit your nickname in your profile),
- have your data erased (right to be forgotten),
- restrict or object to processing based on legitimate interest,
- receive your data in a portable format,
- withdraw consent at any time, without affecting processing that happened before withdrawal.
To use any of these rights, write to [email protected]. You can also lodge a complaint with your national data protection authority (for example, in Slovakia the Office for Personal Data Protection of the Slovak Republic, dataprotection.gov.sk).
7. Children and changes
HytaleList.eu is not directed at children under 16, and sign-in requires a Google account. If this policy changes, the date at the top of this page changes and, where required, we ask for your consent again.