Privacy Notice

Account data may include Discord user ID, username and avatar; verified player name and cryptographic HaxBall auth identifier; account role; supporter plan, tier and expiry; and device/public-key identifiers used for antifake security.

Service data may include match and progression statistics, cosmetics, preferences selected for cloud sync, beta choice, gifts, sponsorships, roadmap votes, theme submissions, recap shares, Supporters Wall consent, and support communications.

Payment records include Stripe customer, checkout, payment, invoice and subscription identifiers, status and entitlement history. Stripe processes card and billing details under its own privacy terms. Security logs may include IP address, timestamps, failed-verification events, room activity and audit records.

Starting with PURE 2.0 RC34, technical diagnostics are off by default. You can opt in under Settings → PURE → Privacy, whether you play as a guest or link Discord. This feature uses your consent, and does not link diagnostics to your Discord account or public player profile.

Reports contain a random installation identifier, random session and event identifiers, client version, operating-system family and architecture, renderer, session uptime, start/end or unclean-exit events, and occasional FPS and frame-time samples. Samples describe a recent frame window, not the entire match or physical input latency. An unclean exit does not prove a crash.

The diagnostics collection does not store your nickname, Discord ID, room, chat, keystrokes, passwords, login tokens, raw IP address, hardware fingerprint or crash memory dumps. Infrastructure still receives network connection information as described elsewhere in this notice. Anonymous submissions are untrusted; aggregate counts represent opted-in installations, not every user.

Detailed diagnostic events expire after 30 days using automated database retention. Operators can view aggregate activity and performance summaries. Turn sharing off at any time, or choose Delete shared diagnostics in the same settings panel to delete reports for this installation. Deletion uses a random secret stored locally; Discord is not required. Keep that local preference file until a failed deletion has been retried. If it is lost, existing reports expire under the same retention period.

Data needed to authenticate you, provide the client, fulfil PURE+ purchases, sync settings and operate rooms is processed to perform the contract or take requested pre-contract steps.

Payment, tax and accounting records are processed to comply with legal obligations. Fraud prevention, service security, abuse handling and reliable operations rely on legitimate interests, balanced against user rights. Public Supporters Wall display and optional public submissions rely on your choice and can be withdrawn prospectively.

Data is shared only as needed with infrastructure and delivery providers, including OVHcloud-hosted servers, Cloudflare for site/download delivery, Discord for identity and roles, Stripe for payments and tax tooling, and authorised project operators. Public wall, recap or approved theme data is published only for the relevant opt-in action.

Some providers may process data outside the EEA using an adequacy decision or other lawful safeguards offered by that provider.

Discord login tokens are time-limited; the current service setting is up to 30 days. Public recap links expire after 90 days. Stripe webhook idempotency records expire after about 400 days. Other account data is retained while needed to provide the service, resolve disputes, protect the service, or meet tax and accounting duties, then deleted or anonymised.

Cloud sync uses a strict field allowlist and rejects passwords, access or refresh tokens, cookies, auth keys and API keys. Public theme responses exclude Discord IDs and moderation fields.

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing, and may withdraw consent without affecting earlier lawful processing. You may also complain to your competent data-protection authority.

Send requests to info@purehax.eu. PURE may need to verify the requesting identity before disclosing or changing account data.

The landing page does not require advertising cookies. Discord OAuth uses short-lived, secure HttpOnly cookies for anti-forgery state and the selected season/annual intent. The desktop client stores local preferences and a signed session token on the user’s device.