Privacy Policy

Last updated: August 30, 2026

1. Introduction

This Privacy Policy explains how H2Dedi ("we", "us", "our") collects, uses, and protects information when you use the H2Dedi website and the H2DediCOM server application (the "Service"). We are committed to protecting your privacy and handling your data responsibly.

2. Information We Collect

Account Information

  • Email address (for account verification and authentication)
  • Display name (chosen by you, publicly visible)
  • Password (stored as a secure hash, never in plain text)
  • Theme and interface language preferences

Server and Usage Data

  • Linked server machine names and connection status
  • Game server instance data (map, players, game mode, settings)
  • Server host CPU and memory utilization statistics
  • Activity logs of server management actions (e.g., map changes, kicks, setting updates)
  • Reservation history

Automatically Collected Data

  • IP address (for rate limiting and security purposes)
  • Browser type and session cookies (for authentication)
  • Timestamps of logins and account activity

3. How We Use Your Information

  • To provide and operate the Service, including server monitoring and remote control.
  • To authenticate your identity and secure your account.
  • To send email verification codes and two-factor authentication codes.
  • To display server status and player information to authorized users.
  • To enforce rate limits and prevent abuse.
  • To maintain activity logs for server management auditing.

4. Data Storage and Security

  • Passwords are hashed before storage.
  • API tokens for the server application are stored as hashes in the database and encrypted locally on the host machine.
  • All communication between the server application and website occurs over HTTPS.
  • Email verification codes expire after 10 minutes.
  • Session data is stored server-side and expires according to standard session policy.

5. Data Retention

  • Account data is retained until you delete your account.
  • Unverified accounts are automatically deleted after 1 hour.
  • Activity logs are retained for up to 45 days from event.
  • Completed commands are automatically deleted after 6 hours.
  • Stale server data (offline for more than 30 days) is automatically cleaned up.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Information may be shared only in the following circumstances:

  • Public server listings: If you make a server instance public, its name, map, player count, and game mode settings are visible to all users.
  • Display names: Your display name is visible to other users on server listings and reservations.
  • Legal requirements: We may disclose information if required by law or to protect our rights.

7. H2DediCOM Server Application

The H2DediCOM server application (for hosters who link):

  • Stores configuration data locally at %ProgramData%\H2DediCOM\.
  • Reads game server configuration files and process memory to obtain real-time game state information.
  • API tokens are stored encrypted and are not transmitted in plain text.
  • Sends server status, player lists, and system resource data to the H2Dedi website via HTTPS.
  • Does not collect or transmit personal data beyond what is described above.

8. Payment Processing (Donations)

  • If you choose to make a voluntary donation, payment is processed by Stripe, Inc. We do not process, receive, or store personal payment credentials or sensitive transaction details — these are handled entirely by Stripe.
  • We store a record of your donation (amount, plan, status, timestamps) and a Stripe customer/subscription reference so we can apply and renew your supporter plan and provide support.
  • Stripe acts as an independent data controller for the payment data it collects. Its handling of your information is governed by Stripe's Privacy Policy.

9. Your Rights

  • You can view and update your profile information at any time through account settings.
  • You can delete your account, which will remove your personal data and unlink all servers.
  • You can revoke application access (if setup) by deleting linked servers from your account.

10. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If we become aware that a child under 13 has provided personal information, we will take steps to delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the Service constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy, please reach out through our support contact method.