Privacy Policy
Overview
This Privacy Policy explains exactly what information Hayabusa ("we", "our") collects when you use hayabusa.lol and our software, why we collect it, and who it is shared with. We keep data collection to what is genuinely needed to run accounts, enforce licenses, and prevent sharing and abuse. We do not sell your data.
What We Collect
- Account credentials — your username and password. Passwords are never stored in plain text; they are stored as a salted/peppered cryptographic hash and cannot be read back by us.
- License key — the key that grants you access, and which Discord account (if any) it is linked to.
- IP address — recorded when you sign in and when the software contacts our servers. Used for security, anti-sharing, and abuse prevention.
- HWID (hardware identifier) — a one-way SHA-256 hash generated from your machine's CPU signature, C: drive serial number, and primary network adapter MAC address, combined into a single string and hashed. We store only the resulting hash, which we use to bind a license to one device. We do not store the raw CPU, drive, or MAC values.
- Discord identifiers — your Discord user ID and username, when your key or account is associated with a Discord account.
- Session cookie — a single signed, HTTP-only cookie that keeps you logged in. It contains no advertising or tracking data.
We do not collect, store, or process any payment card, bank, or billing information. All purchases are handled manually through Discord tickets and never touch this Site.
Why We Use It
- To create and operate your account and grant access to the software.
- To enforce licenses and tie a subscription to a single user and device (HWID).
- To detect and prevent account sharing, fraud, and abuse (HWID + IP patterns).
- To provide support and respond to tickets.
- To keep the Site and software secure (for example, rate limiting and blocking abuse).
Data Retention
We retain account, license, HWID, and IP data for as long as your account exists and for a reasonable period afterward to enforce our Terms, prevent re-abuse by banned users, and meet legal obligations. You may request deletion of your account data, subject to the limits below.
Your Choices
You may request access to, correction of, or deletion of your personal data by opening a ticket on our Discord. Note that some records (such as a hashed HWID or IP tied to a ban) may be retained to enforce suspensions and protect the service even after an account is closed.
Security
Passwords are stored only as peppered hashes, sessions are signed and HTTP-only, downloads are delivered through short-lived signed links, and our endpoints are rate limited. No system is perfectly secure, but we take reasonable measures to protect the data we hold.
Contact
For any privacy question or request, reach us through the Contacts page or by opening a ticket on our Discord.