隐私政策 | HaruHost

This Privacy Policy explains what personal information HaruHost collects, why, who it is shared with, and your choices and rights. It covers the HaruHost app and background service, the web panel at https://gsm.haruhost.com, the website at https://haruhost.com, the Discord bot and the Tunnel (together, the "Service"). Words such as "Account", "Machine", "Game Server" and "Plan" mean the same as in our Terms of Service (https://haruhost.com/tos/).

1. Who we are

The Service is operated by Raidenku MB, a company registered in Lithuania, which is the controller of the personal information described here. You can contact us at help@support.haruhost.com.

2. In short

We collect what we need to sign you in, provide your Plan, connect your Machines and keep the Service working and secure.
Your Game Servers, worlds, backups, player lists and chat history stay on your own Machines.
We do not sell personal information or use it for advertising.
The website sets one cookie of its own, only to remember a language you choose, and has no analytics or advertising trackers. The web panel uses only the cookies it needs to keep you signed in.

3. Information we collect and why

The legal basis for each use is given in brackets. "Contract" means we need the information to provide the Service under our Terms; "legitimate interests" means our interest in running, securing and improving the Service, which we weigh against your rights.

Your Account

When you sign in with Discord, Google or Patreon, we receive and keep the provider you used, your user ID there, the email address of that account and whether the provider has verified it, and a link to your profile picture. We record each sign-in session with its time and the IP address it came from.

If you sign in with Discord, we check your roles in the HaruHost Discord server, as some roles come with a Plan, and we may give subscribers a subscriber role there.

We use this to create and identify your Account, keep you signed in, show which account you are signed in with, give you the features of your Plan, and protect the Service against misuse. (Contract; legitimate interests for security.)

Plans and payments

Paddle and Patreon sell our Plans as merchants of record. They collect your payment details, billing address and tax information under their own privacy policies; we never receive your full card number. From them we receive and keep your Plan, its status and billing dates, the customer and subscription IDs they use, the details they send us about your subscription, and the email address used at checkout. For Patreon, we receive the tier and status of the membership of the Patreon account you sign in with.

We use this to give your Account its Plan, handle changes, cancellations, refunds and disputes, and keep the records the law requires. (Contract; legal obligations.)

Your Machines

When you sign a Machine in to your Account, we keep its device and installation IDs and its name. While it is connected, we receive its operating system, HaruHost version, connection times, the IP address it connects from, resource use (such as CPU, memory and network), and the number and status of its Game Servers. We keep a history of these measurements for the graphs in the web panel. We look up an approximate location, such as the country and city, from the IP address with a database on our own servers.

We use this to show your Machines in the app and web panel, connect the web panel to your Machine, deliver updates, help you when you ask for support, and monitor the health and capacity of the Service. (Contract; legitimate interests.)

When you use the web panel, your Game Servers' files, settings, console and player lists are read from your Machine and passed through our servers to your browser. We do not store your Game Server files.

If a game needs a game account to download or run its server (for example, a Steam account), you enter it in the app or web panel and it is kept on your Machine; from the web panel it passes through our servers to your Machine.

Usage and technical data

Like most online services, we collect standard usage and technical data, such as the HaruHost version and operating system, which features are used, how the Service performs and the errors it runs into. This data is linked to your Account.

We use it to keep the Service healthy and secure, handle payments, meet legal obligations and improve the quality of the Service. (Legitimate interests; legal obligations.)

Tunnel

When you use the Tunnel, traffic between your players and your Game Server passes through a HaruHost relay server in the region you choose. The relay handles your and your players' IP addresses to forward the traffic; we do not store the content of game traffic. We keep the ports assigned to your Game Servers and how much traffic each Account uses.

We use this to provide the Tunnel and keep its use fair. (Contract; legitimate interests.)

Discord features

When you connect a Discord server, we keep the Discord server, channels and roles you choose and your settings. The messages you set up, such as server status, player activity, Machine information and game chat, are sent through our servers to Discord, and Discord messages are relayed to your Game Servers. We keep short-lived delivery records so that messages are not sent twice. Machine information includes a location only if you turn it on and only as the label you approve.

We use this to provide the Discord features you turn on. (Contract.) Discord's privacy policy applies to information on Discord.

Players on your Game Servers

To show who is playing, HaruHost reads what each game reports about its players, such as names and game account IDs, playtime, sessions, levels and chat messages. This is kept on the Machine running the Game Server, not in our cloud. When you open it in the web panel, it passes through our servers to your browser. If you turn on Discord features, the information you choose (for example, player names, joins and leaves, level-ups or chat) is sent through our servers to your Discord server.

If you run a Game Server for other people, you decide what HaruHost collects and shares about them, and you are responsible for that information and for informing your players where the law requires it.

The website

When you visit https://haruhost.com, our web server receives the information every browser sends, such as your IP address, browser type and the page requested, to deliver the page and keep the site secure. (Legitimate interests.) The website has no analytics, advertising or social media trackers.

The website is available in several languages. When you open a page in English and have not chosen a language, our web server looks up the country of your IP address in a database on the server and shows the page in the language of that country, if the website has it. The web panel uses the same kind of lookup once, to suggest a language. The country is not stored. (Legitimate interests.) The database is IP Geolocation by DB-IP (https://db-ip.com), used under the Creative Commons Attribution 4.0 licence.

When the Software checks for updates, it sends its version and operating system so that we can offer the right download. (Contract.)

Support

When you contact us by email or Discord, we keep your messages and the details you give us to answer you and to improve our help. (Contract; legitimate interests.)

4. Cookies and local storage

The website (https://haruhost.com) sets one cookie of its own, hh_lang, when you choose a language in its language menu. It holds only that language, so the website keeps showing it, and expires after one year. It is set only when you choose a language, so the website does not ask for consent. Some pages may remember display preferences, such as the colour theme, in your browser's local storage; this stays in your browser.

The web panel (https://gsm.haruhost.com) uses only cookies that are strictly necessary to sign you in and keep you signed in, so it does not ask for consent:

hh_oauth_browser, which protects a sign-in while it is in progress (10 minutes);
remote_access_token, a short-lived token proving that you are signed in;
remote_refresh_token, which keeps you signed in until you sign out or the session expires;
hh_is_logged_in, which tells the panel that you are signed in.

The web panel and app may also keep preferences, such as the selected Machine, in your browser's local storage.

Plans are bought from My Subscriptions in the app or web panel. Paddle provides the prices shown there and the checkout, and may set cookies or use similar storage for payments and fraud prevention under Paddle's own policies.

6. Where your information is processed

Our servers are in Germany, in the European Union. Tunnel traffic passes through relay servers in the region you choose, which may be outside the European Economic Area. Discord, Google, Patreon and Paddle may process information in other countries, including the United States, under the safeguards they provide, such as the European Commission's standard contractual clauses or adequacy decisions.

7. How long we keep information

Account information, for as long as your Account exists; we delete it when you ask us to delete your Account.
Sign-in sessions, until you sign out or they expire.
Plan and payment records, for as long as your Plan is active and afterwards for as long as tax, accounting or other laws require.
Machine information and graphs, while the Machine is linked to your Account.
Tunnel traffic totals and port assignments, while you use the Tunnel.
Usage and technical data, for as long as needed for the purposes above.
Discord delivery records, for a short time after each message.

Information on your own Machines, such as player history and chat history, is kept there under your control. HaruHost keeps detailed player sessions for 30 days and totals such as lifetime playtime after that.

8. Your rights

Under data protection law, including the EU General Data Protection Regulation, you have the right to:

access the personal information we hold about you and get a copy of it;
have inaccurate information corrected;
have your information deleted;
restrict or object to how we use it, including use based on legitimate interests;
receive the information you gave us in a portable format;
withdraw consent where we rely on it, for example for sharing a Machine's location in Discord.

To use these rights, contact us at help@support.haruhost.com. We may ask you to confirm your identity. You can also complain to a data protection authority, such as the State Data Protection Inspectorate of Lithuania (https://vdai.lrv.lt) or the authority where you live.

9. Security

We protect information with measures such as encrypted connections (HTTPS), sign-in cookies that page scripts cannot read, and access controls on our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

The Service is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

11. Links to other sites

The Service links to sites we do not operate, such as game publishers, mod sources, Discord and payment providers. Their privacy policies apply when you visit them.

12. Changes to this Privacy Policy

We may update this Privacy Policy. We will post the new version on this page with its date, and tell you in the app or in our Discord community if a change is significant.

13. Contact us

For questions about this Privacy Policy or your personal information, contact us at help@support.haruhost.com.

Privacy Policy