Privacy Policy

hytl.tools is a free community tool for Hytale players - username checking, profiles, servers, and more. We're an independent project, not affiliated with or endorsed by Hypixel Studios.

This policy explains, in plain language, what data we collect and what we do with it. Questions? Email support@hytl.tools.

You don't need an account to use most of the site. When you browse, we collect:

• Username searches - when you check a username's availability, we log the username and the result. We don't store your IP address, just a salted one-way hash of it so repeat searches aren't logged twice. The hash can't be turned back into your IP.
• Profile views - visiting a profile page counts a view, which powers view counts and the leaderboard. The same hashed-IP approach is used here, so refreshing or revisiting a profile in quick succession only counts once.
• Analytics - we use Google Analytics to understand aggregate usage (pages visited, device and browser info). This data is processed by Google under Google's privacy policy.

The site is served through Cloudflare, which processes requests (including IP addresses) as our CDN and security layer. When we check a username against the Hytale API, only the username is sent - never your IP address.

If you sign up, we additionally store:

• Account basics - your email address, display name, and avatar, provided by Discord or Google when you sign in with them, or just your email if you sign in with a one-time code. We don't keep the OAuth access or refresh tokens from signing in - they're only used during the sign-in itself.
• Sessions - active login sessions record your IP address and browser user agent for security purposes.
• Things you add - your country, social links, followed profiles, favorite servers, and any Hytale profiles you claim.

Email signup is protected by Cloudflare Turnstile to block bots. Login-code emails are delivered via Inbound, which processes your email address to send the message.

Profile, username, and skin data shown on this site comes from the official public Hytale API. We archive it over time so we can show things like name history and skin history. This is public game data, not data you gave us.

If you claim your profile, you can hide individual past usernames and past skins from public view on the My Profile page. Your current name and skin are always visible.

We set one cookie of our own: an authentication session cookie (httpOnly and secure), used solely to keep you signed in. Google Analytics sets its own cookies for usage measurement. We don't use any advertising or cross-site tracking cookies.

We use the data above to operate the site: showing search results, view counts, and leaderboards, keeping accounts secure, and preventing abuse. We don't sell your data and we don't run ads.

• Discord - optional sign-in (OAuth)
• Google - optional sign-in (OAuth) and Google Analytics
• Cloudflare - CDN, security, and Turnstile bot protection
• Inbound - delivery of login-code emails
• Hytale API - the official public source of profile, username, and skin data

We also run a Discord bot for profile lookups. It stores no Discord user data and is covered by its own bot privacy policy.

You can delete your account at any time from the Account page. This deletes your user record, sessions, and OAuth connections, removes your follows and any badges on your claimed profiles, and unlinks those profiles (clearing their social links and country).

Publicly-sourced Hytale data - like name and skin history - remains on the site, since it comes from the public Hytale API and isn't tied to your account.

We may update this policy from time to time. When we do, we'll post the revised version here with an updated date at the top.

For any questions, email support@hytl.tools.