Privacy Policy

1. What Data We Collect

When you register an account and interact with Path of Hideouts, we collect the following essential information:

• Account Information: Your chosen username, email address, and cryptographically hashed password.
• Profile Data: Optional social media links, avatars, or biography text you choose to display on your public profile.
• Site Usage Data: Your personalized MTX inventory checklists, favorited hideouts, and uploaded .hideout files.
• Third-Party Authentication: If you register or log in using a third-party service (such as Google OAuth), we collect and store the email address and basic profile data provided strictly for account creation and authentication.

2. How We Use Your Data

Your data is processed in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). We use your MTX inventory data strictly to filter hideout search results for your account. We use your email address solely for account creation confirmation, authentication, and essential security notices (such as password resets). We do not send marketing emails, digests, or promotional newsletters.

3. Cookies & Local Storage

We use standard, essential session cookies to maintain your login state and protect our forms against Cross-Site Request Forgery (CSRF). We do not currently use third-party tracking cookies for targeted advertising. Should third-party advertising partners be introduced in the future, this policy will be updated prior to deployment.

4. Data Sharing, File Safety & Security

We do not sell, rent, or trade your personal data to third parties. All account information is stored securely in our production databases, and user passwords are irreversibly hashed before storage.

Uploaded .hideout files are strictly plain-text configuration files read directly by the Path of Exile client. They cannot execute binary code on our servers or your personal computer.

5. Children's Privacy

Path of Hideouts is intended for general audiences and does not knowingly collect or solicit personal information from children under the age of 16. If we learn that we have collected personal data from anyone under 16 without appropriate consent, we will promptly delete that information from our servers.

6. Your Data Rights & Retention

You hold complete ownership over your personal data and maintain full rights to inspect, export, or erase it at any time directly through your Account Settings:

• Data Portability: You can download a complete, machine-readable JSON archive containing all data linked to your account at any time.
• Account Deletion: You can permanently delete your account with a single click. This action instantly purges your profile, MTX inventory, comments, and uploaded hideouts from our live production servers.
• Backup Retention: Secure disaster recovery backups are retained for operational safety. Deleted account data naturally expires and is permanently destroyed from inactive backup archives within 30 days.