Privacy Policy

We believe in total transparency. Here is a complete breakdown of the data we collect via our web services and API.

Last Updated: August 2026

1. Data Collected via Web & API

When interacting with the Hebnix portal or API (api.hebnix.com), standard server logs and user session records process minimal operational data:

  • •
    Discord Authentication Data Logging into the portal via Discord OAuth2 grants us access to your Discord User ID, Username, Display Name, and Avatar URL. This is stored securely in our database to manage your profile, roles, and content uploads.
  • •
    Web Server & Network Logs Like standard web services, HTTP requests made to our server or API naturally carry network metadata, including your IP address, browser or client User-Agent string, and request timestamps. IP addresses are logged alongside session tokens to prevent session hijacking and maintain portal security.
  • •
    Creator Content Uploads If you publish Plugins, Maps, or Themes, we store the uploaded files (.ZIP, .LUA, .TOML, images), along with your changelogs, version numbers, and item descriptions.

2. Client Privacy & Zero-Telemetry Guarantee

The Hebnix desktop client collects ZERO personal background telemetry. We do not track your local files, system specifications, hardware IDs, keypresses, or Rocket League account details.

Automated Update Checking (/check)

To ensure your installed plugins stay up-to-date, the desktop client automatically queries our public endpoint (api.hebnix.com/check). When performing this check, the client sends a JSON payload consisting solely of the metadata of your currently installed plugins:

// Example payload sent by client during plugin check:
[
  { "name": "InGameRank", "author": "nixvio64", "version": "1.5.4" },
  { "name": "Goal Tracker", "author": "Hebnix", "version": "1.0" }
]

This payload is evaluated against our database solely to return a list of plugin IDs that have a newer version available for download. No personal user identifiers or local client state are included in this check.

3. Data Retention & Sharing Policy

We respect your privacy rights and handle your stored data responsibly:

  • No Third-Party Sharing: We do not sell, trade, rent, or share user data or IP logs with third-party advertisers or data brokers under any circumstances.
  • Account Deletion: If you request account deletion or dissociate your Discord login, all corresponding active sessions, stored OAuth tokens, and profile data are permanently purged from our database.