Privacy Policy

1. Data we collect

Account: your email address, a securely hashed password (we never store it in plain text), your language preference, and whether your email is verified.

Security and sessions: IP address and browser user-agent of logins and sessions, and security events such as failed login attempts. We use these to protect accounts and the Service.

Billing: payments are processed by Stripe. We receive your Stripe customer ID, plan and subscription status. We never see or store your full card number.

Support: the content of support tickets and bypass reports you send, including images and videos you upload. Uploaded images are re-encoded and their metadata (such as location or camera data) is removed.

Plugin data: when the plugin runs on a server, it sends gameplay data needed for cheat detection, such as player identifiers (username/UUID) and in-game movement and combat events, together with information about the server and its license.

2. How we use it

To provide and secure the Service: create and manage your account, process subscriptions, deliver your license, detect cheating, answer tickets and review bypass reports.

To send service emails: email verification, password resets, ticket replies and important notices about your account or billing. We do not send marketing emails without your consent.

3. Players on your server

For gameplay data about players on your server, you (the server owner) decide to use Hercules and are responsible for informing your players, for example in your server rules or privacy notice. We process that data only to provide cheat detection for you.

4. Cookies

We only use essential cookies: a session cookie that keeps you signed in, and a "lang" cookie that remembers your language. We do not use advertising or third-party tracking cookies, and we do not use analytics trackers.

5. Service providers

We share data only with providers that help us run the Service: Stripe (payments), our email provider (Private Email by Namecheap) to send and receive email, and our hosting provider (OVHcloud) where the website and database run. They process data on our behalf under their own security and privacy terms.

We may disclose data if required by law or to protect the rights and safety of our users and the Service.

6. Retention

Account data is kept while your account exists. Security logs and bypass report attachments are deleted periodically once no longer needed. Billing records may be kept as required by tax and accounting laws.

When you ask us to delete your account, we delete your account data, tickets, bypass reports and uploaded files, except records we must keep by law.

7. Security

We use encrypted connections (HTTPS), hashed passwords, two-factor authentication for administrative access and strict validation of uploaded files. No system is perfectly secure, but we work to protect your data.

8. Your rights

You can ask to access, correct, export or delete your personal data by writing to contact@hercules.ac from the email address on your account. Depending on where you live (for example California or the European Union), you may have additional rights under local law, and we will honor them.

9. Children

The Service is intended for server owners and is not directed at children under 13. We do not knowingly collect data from children under 13.

10. Changes and contact

We may update this policy and will note the date at the top. Questions: contact@hercules.ac.