Privacy Policy

Last Updated: February 10th, 2026

This Privacy Policy describes how the AllyPak team (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use AllyPak (“the Service”).

1. Information We Collect

1.1 Information You Provide

  • Email Address: Collected during account registration for account management, authentication, and communication purposes.

1.2 Automatically Collected Information

  • Hardware ID (HWID): A unique identifier generated from your computer’s hardware components
  • Trusted Platform Module (TPM) Data: Security chip information from your device
  • IP Address: Your device’s Internet Protocol address
  • Usage Data: Information about how you use the Service, including gameplay statistics, session duration, and feature usage

1.3 Why We Collect This Information

  • Account Security: To verify your identity and prevent unauthorized access
  • Anti-Cheat & Ban Enforcement: To detect cheating, enforce bans, prevent ban evasion through hardware identification (HWID, TPM), and maintain fair gameplay
  • Service Delivery: To provide, maintain, and improve the Service
  • Communication: To send important updates, announcements, and respond to your inquiries
  • Technical Support: To troubleshoot issues and provide customer support
  • Network Security: To protect against DDoS attacks, unauthorized access, and other security threats

2. How We Use Your Information

We use the collected information to:

  • Create and manage your account
  • Authenticate users and prevent unauthorized access
  • Detect and prevent cheating, hacking, and Terms of Service violations
  • Enforce account bans and prevent ban evasion
  • Maintain server security and stability
  • Analyze usage patterns to improve the Service
  • Send service-related notifications and updates
  • Respond to support requests
  • Comply with legal obligations

3. Information Sharing and Disclosure

3.1 We Do Not Sell Your Information

We do not sell, rent, or trade your personal information to third parties.

3.2 Limited Sharing

We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist in operating the Service (e.g., hosting providers, anti-cheat services). These providers are contractually obligated to protect your information.
  • Legal Requirements: When required by law, subpoena, court order, or government request
  • Safety & Rights Protection: To protect our rights, property, safety, or the rights and safety of users or the public
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (users would be notified)
  • With Your Consent: When you explicitly authorize us to share information

3.3 Public Information

Certain information may be publicly visible:

  • Your username/display name
  • Gameplay statistics and leaderboards
  • In-game achievements and progress

4. Data Retention

We retain your information for as long as:

  • Your account remains active
  • Necessary to provide the Service
  • Required to enforce bans (HWID, TPM, IP data may be retained indefinitely for banned users to prevent ban evasion)
  • Required by law or legitimate business purposes

You may request account deletion at any time by contacting us at [email protected]. Upon deletion:

  • Your account and associated email will be removed
  • Hardware identifiers (HWID, TPM) may be retained if you were banned, to prevent ban evasion
  • Some data may be retained as required by law or for legitimate business interests

5. Data Security

We implement reasonable security measures to protect your information, including:

  • Encryption of data in transit and at rest
  • Secure server infrastructure
  • Access controls limiting who can view your information
  • Regular security audits and updates

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Children’s Privacy

6.1 Age Restrictions

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13 without parental consent.

6.2 Parental Rights

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at [email protected]. We will delete such information promptly.

6.3 COPPA Compliance

We comply with the Children’s Online Privacy Protection Act (COPPA). Parents of children under 13 may:

  • Review their child’s personal information
  • Request deletion of their child’s information
  • Refuse further collection or use of their child’s information

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access & Correction

  • Request access to the personal information we hold about you
  • Request correction of inaccurate information

7.2 Deletion

  • Request deletion of your account and associated data (subject to retention for ban enforcement)

7.3 Data Portability

  • Request a copy of your data in a portable format

7.4 Objection & Restriction

  • Object to certain processing of your information
  • Request restriction of processing in certain circumstances

7.5 Withdrawal of Consent

  • Where processing is based on consent, you may withdraw consent at any time

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Note: Some rights may be limited if deletion or restriction would:

  • Prevent us from enforcing bans or detecting ban evasion
  • Conflict with legal obligations
  • Interfere with fraud prevention or security measures

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to the United States of America and other countries where we operate.

We take appropriate safeguards to ensure your information receives adequate protection.

9. Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to:

  • Maintain your login session
  • Remember your preferences
  • Analyze usage patterns
  • Improve Service performance

You can control cookies through your browser settings, but disabling them may affect Service functionality.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Updating the “Last Updated” date
  • Sending an email notification (for significant changes)

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

  • Right to Know: What personal information we collect, use, disclose, and sell
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt-out of the sale of personal information (we do not sell your information)
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at [email protected].

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

13.1 Legal Basis for Processing

We process your information based on:

  • Contractual Necessity: To provide the Service you’ve requested
  • Legitimate Interests: Anti-cheat, security, service improvement
  • Consent: Where you’ve provided explicit consent
  • Legal Obligations: Compliance with applicable laws

13.2 Your GDPR Rights

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights related to automated decision-making

13.3 Data Protection Officer

For GDPR-related inquiries, contact us at [email protected].

13.4 Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

For data subject requests, please include:

  • Your full name
  • Email address associated with your account
  • Description of your request
  • Proof of identity (if required for security)

We will respond to your inquiry within 30 days.