Privacy Policy

1. Introduction

hq99 ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the hq99 service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the service.

2. Information We Collect

Information You Provide

• Account data - username, avatar, and profile information from your GitHub OAuth login
• Uploaded files - files, scripts, and any content you upload to the service
• Service configuration - settings, names, and options for key system services you create

Information Collected Automatically

• IP addresses (IPv4/IPv6) - collected during file downloads, key verification, and bypass detection to enforce rate limits and security blocks
• Hardware IDs (HWID) - collected when a key is bound to a device through the key system
• Usage data - page views, download counts, and interaction timestamps
• Session data - stored temporarily in encrypted server-side sessions for authentication

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the hq99 service
• Authenticate your identity via Discord/GitHub OAuth
• Enforce key system access control (HWID binding, key validation, expiry)
• Detect and prevent abuse, bypass attempts, and unauthorized access
• Monitor download activity and enforce rate limits
• Improve the service and fix bugs
• Respond to your support requests via Discord

4. Data Storage

Your data is stored securely on our servers and third-party infrastructure. We take reasonable technical measures to protect stored data, including encrypted connections and access-controlled storage.

• Database - account records, service configurations, key system data, and file metadata
• File storage - uploaded files stored in secure object storage
• Server memory - bypass detection blocks and rate-limit counters are held in-memory and reset on server restart; they are never persisted to disk

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• Service providers - with trusted infrastructure providers solely to operate the service, each governed by their own privacy policies
• Legal requirements - if required to do so by law or in response to valid legal process
• Protection of rights - to protect the rights, property, or safety of hq99, our users, or the public

6. File Privacy

Files you upload are accessible to anyone with the link by default. You may protect files with a password. You are solely responsible for the content you upload and for deciding who to share your links with. We do not proactively review uploaded content but reserve the right to remove content that violates our Terms of Service.

7. Key System Data

If you operate a key system service on hq99, your end users' HWIDs and IP addresses are processed as part of key verification and bypass detection. You are responsible for informing your own users about this data collection in accordance with applicable privacy laws.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. Files may be deleted after a period of inactivity. You may request deletion of your account and associated data by contacting us via Discord. Key system data (keys, HWIDs) is retained as long as the associated service exists.

9. Third-Party Authentication

We use GitHub OAuth and Discord OAuth for authentication. When you sign in, the respective platform shares your public profile information (username, avatar, and user ID) with us. We do not receive your password from either provider.

• GitHub's privacy practices are governed by GitHub's Privacy Statement.
• Discord's privacy practices are governed by Discord's Privacy Policy.

10. Cookies & Sessions

We use a single server-side session cookie to keep you logged in and to track temporary state (such as unlocked file access). This cookie is essential for the service to function. We do not use advertising cookies or third-party tracking cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by posting a prominent notice on the site or via our Discord server. Continued use of the service after changes take effect constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how your data is handled, please reach out via our official Discord server:

hungquan99.site/discord