Privacy & Security

Skip

Overview

H‑Wood uses an in‑world HUD to authenticate you and display your game data on the website. This page explains what data we collect, how it’s used, and your privacy choices.

Authentication

HUD generates a one‑time web login token.
Server validates the token and starts a PHP session ($_SESSION).
Website loads your data using your player key (avatar UUID) and session.

Data Collected

Identity: player.ID (avatar UUID), player.name
Progress: xp, level, region tasks/XP
Economy: wallet H$ currency
Character & faction: race, class, faction, gender
Attributes: health, stamina, hunger, thirst, blood, fatigue, sickness, hygiene
Site logs: standard server logs (errors and access logs)

Use & Visibility

HUD + site display your own data to you.
Some aggregate features (e.g., leaderboards) may show limited public data.
Sensitive fields (wallet, medical/attributes) are private to you.

Security

Sessions: cookie‑based session controls; we recommend HTTPS for all traffic.
Endpoints: moving to prepared statements and session checks on write actions.
Token storage: short TTL; tokens are invalidated after consumption.

Retention & Deletion

Game data is retained while your account remains active in‑world.
To request deletion, contact support with your avatar UUID.

Consent

Using the HUD and website constitutes consent to store the minimum data required for gameplay. You may revoke consent by requesting deletion.

Contact

For privacy or security questions, contact the region admins.