Privacy policy

Who we are

Haulora MP (this website, the launcher, the game plugin and the game servers) is a product of Truxion Media, Heerhugowaard, the Netherlands (Chamber of Commerce/KvK 42212602, truxion.nl). Truxion Media is the controller of the personal data processed for Haulora MP. Send privacy questions to info@truxion.nl.

Your haulora.net account

Haulora MP has no accounts of its own: you sign in with your haulora.net account. That account itself (registration, Steam or Discord login, your profile and linked accounts) is covered by the haulora.net privacy policy. This policy covers what Haulora MP processes on top of that.

What we process

From your haulora.net account

We read your account ID, display name, avatar, Steam ID (steamid64), linked Discord ID, the date your account was created and the session version we use to check that your login is still valid. On your first visit while signed in we create a Haulora MP player record with your first and last visit.

Website

To deliver pages our server processes your IP address. For signing in, security and your language we use functional cookies (see the cookie policy). Staff actions in the Control Panel are recorded in an audit log together with the staff member's IP address.

Launcher

• You link the launcher to your account with a code you confirm on this website. We only store a hash of the launcher token, with when it was created and last used. The token itself stays on your PC in %APPDATA%\HauloraMP.
• The launcher checks its own files against a signed list and downloads updates and game files from our CDN (mpcdn.haulora.net).
• The launcher reads your Steam ID on your PC to start the game with the right account.

On the game servers

• To connect you, the server processes your IP address and port in memory while you are connected; we do not store them.
• While you play, the server receives your truck's position, heading and speed, the look of your truck and trailer, your licence plate, lights and windows, and passes them on to players nearby, together with your name, Haulora MP ID and role badges.
• CB radio (voice) is forwarded to players on the same channel within range. The server does not decode or store any audio.
• Who is playing on which server is kept in our database while you are online.

Live map

Every 3 seconds the servers publish the name, Haulora MP ID, position and heading of the players online. These are public on /map and can be searched by name, Haulora MP ID or Steam ID. Only the newest position is kept; it is overwritten every time.

Chat log

We keep every chat message (public chat, private messages with /msg and staff chat), including messages stopped by the word filter, with sender, receiver, server, time and the position of the sender's truck, for moderation. Private messages are only visible to senior staff and every look at them is logged.

Moderation and anti-cheat

• Warnings, mutes, kicks, freezes, ban requests and bans are recorded with the reason, staff member, server, time and your truck's position at that moment. For an action in the game we also keep your last 20 chat messages, 5 minutes of positions and your ping as evidence.
• Automatic checks (teleporting, speed, clock) are recorded in the same player log.
• A Haulora MP ban is linked to your Steam ID, so a new account does not lift it. A haulora.net ban blocks Haulora MP too.
• Staff can upload evidence (screenshots and videos). These are stored on our CDN at a random, unlisted address.

Reports, appeals and complaints

• When you report a player we keep your account, the reported player's Steam ID, the reason, up to 3 screenshots and/or a video link, and the outcome. Anyone with 5 or more decided reports in 90 days of which 60% or more were denied cannot report until 30 days after the last denial, unless staff lift it.
• When you appeal a ban (or file a complaint afterwards) we keep your messages, the staff replies and the decision.

Crash and error reports

When the game crashes or logs an error while Haulora MP runs, the plugin or the launcher sends a report with your account, Steam ID, game and version, server, times, the game's log file, the Haulora MP log, the crash log and your IP address. Log files can contain file paths on your PC (often with your Windows user name) and details of your hardware and settings. Only staff with the right permission can read them.

Discord

If your haulora.net account is linked to Discord and you are a member of the Haulora Discord, the Truxion Media bot sends us your Discord roles. They decide the role on your profile and, for staff, the permissions; changes of your highest role are kept as history. Notices for staff (new players, reports, appeals, moderation actions and crash reports) are posted by the bot in channels only staff can see.

Public profile

Your profile at /u/<steamid> shows your name, avatar, Haulora MP role, member since date, whether you are banned and a link to your Steam profile.

Purposes and legal bases (GDPR article 6)

• Providing the service (sign-in, launcher, servers, sync, chat, live map, profile): performance of the contract (art. 6(1)(b)).
• Moderation and fair play (chat log, player log, anti-cheat, bans, evidence, reports, appeals): legitimate interest in a safe and fair community and in enforcing the rules (art. 6(1)(f)). Handling your own report or appeal is part of the contract (b).
• Security (CSRF protection, audit log, rate limits, IP addresses): legitimate interest (f).
• Crash and error reports: legitimate interest in fixing bugs (f).
• Discord roles and staff notices: legitimate interest in organising the staff team (f).
• Legal obligations, where they apply (c).

Who we share data with

• Haulora MP staff, per part only with the permissions needed for it.
• Other players: what the game needs (see above), the public live map and your public profile.
• Bunny.net (BunnyWay d.o.o., Slovenia, EU; storage and CDN) for launcher files, evidence and report screenshots, and for this website's static files (stylesheets, scripts, fonts and images, via mp-assets.haulora.net). Bunny delivers them from servers in the EU, sees your IP address and browser details to do so, processes them as our processor, anonymises IP addresses in its logs and sets no cookies.
• Discord, through the Truxion Media bot, for roles and staff notices.
• Steam (Valve): avatars are loaded in your browser from Steam's CDN and we link to Steam profiles.
• haulora.net, which provides the account you sign in with.

We do not sell data and do not use it for advertising.

How long we keep data

• Chat log: 30 days.
• Crash and error reports: 30 days.
• Live map position: only the newest, overwritten every 3 seconds; gone once you leave the server.
• Who plays on which server: while you are online.
• Evidence of a temporary ban: until 14 days after the ban ran out or was lifted. Of a permanent ban: as long as the ban stands.
• Report screenshots that did not become evidence of a ban: 14 days after the report was closed.
• Launcher tokens: until you sign out in the launcher or the token is revoked.
• Bans, ban requests, player log, reports, appeals, role history and audit log: as long as they are needed for moderation, because earlier offences count in later decisions. You can ask us to delete data that is no longer needed for that.
• Your player record: as long as your haulora.net account exists, or until you ask us to delete it.

Security

All traffic with the website and the API uses HTTPS, tokens are only stored as a hash, staff only see what their permissions allow and sensitive access (such as private messages) is logged.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing and to data portability. Send your request to info@truxion.nl; we answer within one month. We may keep a ban and its evidence as long as that is needed to enforce the ban. For your haulora.net account itself, contact haulora.net.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Children

Haulora MP is not directed at children. We do not knowingly process data of children younger than the age at which the law of their country lets them consent to a service like this themselves.

Changes

When we change this policy we update the date at the top. We announce larger changes on the website.

Contact

Truxion Media, Heerhugowaard, the Netherlands - info@truxion.nl