Information We Collect
Discord Information
When you use HSD's Discord verification services, we may receive limited information from Discord through Discord's APIs that is necessary to provide the service. Depending on the functionality being used, this may include your Discord user ID, Discord username and display name, the Discord server in which verification is being performed, relevant server roles or permissions, and other limited account or server information made available through Discord's API that is necessary to perform verification or operate the service.
Information received through Discord's APIs is referred to in this policy as Discord API Data. We only access and use Discord API Data to the extent reasonably necessary to provide the stated functionality of our services.
Minecraft and Connection Information
When you connect to an HSD-operated Minecraft verification server, we may collect your Minecraft username, Minecraft account UUID or similar account identifier, IP address, connection timestamps, verification status and related verification records, and limited technical information associated with attempts to connect to or use the verification server.
An IP address may constitute personal information. We do not consider IP addresses to be anonymous information.
Verification Information
When you complete verification, we may maintain a record showing that a particular Discord account successfully verified control of, or access to, a particular Minecraft account.
This association is maintained only where necessary to provide verification, maintain verified status, enforce applicable community rules, and protect the integrity of the verification service.
How We Use Information
We may use collected information to complete Minecraft-to-Discord verification, maintain a user's verification status, prevent spam and automated abuse, detect suspicious or repeated verification attempts, identify attempts to evade restrictions or abuse the verification system, protect the security and integrity of HSD services, troubleshoot and maintain the verification service, and comply with applicable legal obligations.
Connection information, including IP addresses, may be used as a security signal when investigating abuse or suspicious activity. An IP address alone is not treated as conclusive proof that multiple accounts belong to the same individual, as IP addresses may be shared by households, schools, businesses, VPN users, mobile networks, and other users.
We do not use Discord API Data to create advertising profiles, market to users, determine protected characteristics, infer users' relationships with other Discord users, or otherwise profile Discord users or their identities in a manner prohibited by Discord's applicable Developer Terms or Developer Policy.
We do not sell Discord API Data or other personal information.
Discord API Data
HSD handles information received through Discord's APIs in accordance with Discord's applicable Developer Terms and Developer Policy. Discord API Data is used only where necessary to provide HSD's stated application functionality.
We do not sell, license, or commercially exploit Discord API Data; provide Discord API Data to data brokers or advertising networks; use Discord API Data for targeted advertising; attempt to re-identify, reverse hash, de-anonymize, or otherwise derive information that Discord has provided in an anonymized, hashed, encrypted, or similarly protected form; or use Discord API Data for purposes unrelated to the operation of our stated services.
Data Sharing and Disclosure
We do not sell your personal information.
Discord API Data will only be shared with third parties where permitted under Discord's applicable Developer Terms, including with service providers that process information on our behalf and only as necessary to provide their services, where disclosure is required by applicable law or regulation, or where you expressly direct us to share your Discord API Data with a third party.
Service providers that process data on our behalf are permitted to use that information only as necessary to provide services to HSD and are expected to protect the information appropriately.
Information collected independently through our Minecraft server or other HSD-operated systems may also be disclosed where reasonably necessary to comply with applicable law, respond to valid legal process, investigate security incidents, or protect against fraud, abuse, or threats to the security of our services, to the extent permitted by applicable law.
We do not disclose Discord API Data under this broader provision where doing so would conflict with Discord's Developer Terms.
Data Storage and Security
We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.
Encryption
Personal information and Discord API Data stored by HSD are encrypted at rest using industry-standard encryption. Data transmitted through HSD web services, APIs, and other systems that support transport encryption is protected in transit using Transport Layer Security (TLS) or an equivalent secure transport protocol.
Discord's Developer Terms require Discord API Data to be encrypted at rest. Discord does not specify a required at-rest cipher or key length in those terms, so HSD uses industry-standard encryption appropriate to the systems processing the data rather than representing that Discord mandates a particular algorithm.
Access to personal information is limited to authorized individuals and systems that require access for legitimate operational, security, or administrative purposes.
Developer credentials, including API tokens, keys, and client secrets, are treated as confidential information and are protected from unauthorized access.
No method of electronic storage or transmission can be guaranteed to be completely secure, and we therefore cannot guarantee absolute security.
If we become aware of unauthorized access to Discord API Data or another security incident affecting such data, we will take appropriate steps to investigate and remediate the incident and will notify Discord and affected users where required by Discord's Developer Terms or applicable law.
Data Retention and Deletion
We retain personal information only for as long as reasonably necessary to provide the services described in this policy, maintain security, resolve disputes, enforce applicable rules, or satisfy legal obligations.
Discord API Data is deleted when it is no longer necessary for HSD's permitted application functionality.
We will also promptly delete applicable Discord API Data when the user requests deletion, Discord requests that the data be deleted, HSD stops operating the application or service for which the information was collected, retaining the data is no longer necessary for the application's permitted functionality, or deletion is required by applicable law or regulation.
Where applicable law requires us to retain particular information for a longer period, we may retain only the information required for that purpose and only for the legally required period.
Connection and security information, including IP addresses, will not be retained longer than reasonably necessary for the security and verification purposes described in this policy.
Your Data and Deletion Requests
You may request access to, correction of, or deletion of personal information associated with you by contacting us at [email protected].
Please provide enough information for us to reasonably identify the relevant account or verification record. We may need to verify that you are the account holder before completing certain requests.
Where a valid deletion request applies, we will delete the applicable information promptly unless we are legally required to retain it.
Deleting verification information may result in the removal of your verified status and may require you to complete verification again if you later return to the service.
If Discord API Data was received in error, we will delete that information as required by Discord's applicable Developer Terms.
Children's Privacy
HSD's Discord applications and verification services are not directed toward individuals who are below the minimum age permitted to use Discord in their jurisdiction.
We do not knowingly use Discord's APIs to collect information relating to individuals who are below the minimum age permitted by Discord and applicable law.
Cookies and Website Data
HSD's Minecraft verification process and Discord application do not require browser cookies unless otherwise stated when using a separate HSD website or web-based service.
Third-party platforms used in connection with HSD, including Discord and Minecraft/Microsoft services, may independently collect information according to their own privacy policies. HSD does not control the data collection practices of those third-party platforms.
Changes to This Privacy Policy
We may update this Privacy Policy when our services, data practices, legal obligations, or applicable platform requirements change.
When we make material changes, we will update the "Last Updated" date below and make the current version of this policy publicly available.
Where required by applicable law or platform requirements, we will provide additional notice or obtain consent before making changes that materially affect how personal information is processed.
Continued use of HSD services after an update does not waive any rights that cannot legally be waived and does not constitute consent where applicable law requires a different form of consent.
Contact Us
If you have questions about this Privacy Policy, would like to make a privacy request, or have concerns regarding HSD's handling of your information, please contact us.
Privacy and data requests
[email protected]