# HAULIX Privacy Policy

Version 3.1 – valid from HAULIX 0.0.9-4 BETA

This policy explains which data HAULIX processes – in the program on your PC and in your HAULIX account.
It is part of the RyanTMP Terms of Use (TERMS.md, Schedule 1 – HAULIX).

**Responsible (controller):** Ryan Vogler (RyanTMP), Niedersachsenring 7a, 49477 Ibbenbüren, Germany ·
Contact: ryantmp@haulixapp.com ·
https://discord.gg/3yqCuG5mQb · https://www.haulixapp.com

## 1. The HAULIX program on your PC

- **On your PC.** HAULIX reads telemetry from Euro Truck Simulator 2 and your save games and
  stores your logbook, statistics, settings and backups in `%LOCALAPPDATA%\Haulix`. Only the logbook of the
  savegame linked to your HAULIX account is sent to the HAULIX server (see section 2).
- **Update check.** When enabled, HAULIX asks the HAULIX update server (updates.haulixapp.com, hosted by STRATO in
  Germany) whether a new version exists, on start and every 6 hours. Like every web request, this transmits your IP
  address and basic technical data (such as the HAULIX version); no other HAULIX data is sent. You can turn the check
  off in Settings → About.
- **Natural voices.** If you download a voice, it is fetched once from GitHub and Hugging Face (USA). After that
  voices run offline.
- **Installer.** If the Microsoft Edge WebView2 Runtime is missing, the setup downloads it from Microsoft.
- **No tracking.** HAULIX contains no analytics, ads or tracking.
- **Deleting your data.** Uninstall HAULIX and choose to remove your data, or delete `%LOCALAPPDATA%\Haulix`.

## 2. Your HAULIX account

HAULIX needs a HAULIX account. You create it with an email address and a password, or with Discord or Steam,
and link **one** ETS2 profile ("savegame") to it. From then on HAULIX keeps the logbook of that profile in your
account, so your company, statistics and VTC work on every PC.

| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address and a hash of your password (PBKDF2 – the password itself is never stored or visible) | Signing in with a HAULIX account, confirmation and password-reset codes | Art. 6 (1) b – providing the service you request |
| Account ID, display name and avatar from Discord or Steam, if you sign in with them | Signing in with Discord / Steam | Art. 6 (1) b |
| The linked savegame: profile name, company name and a savegame ID (a hash of the profile's creation time and folder name) | Tying your ETS2 company to your account; one profile can only belong to one account | Art. 6 (1) b |
| Deliveries of the linked savegame (route cities, companies, cargo, distance, income, XP, fuel, damage, score, truck, times) | Your logbook and statistics in your account, VTC job board | Art. 6 (1) b |
| VTC membership, role, company pages, events, jobs and messages you create | VTC features | Art. 6 (1) b |
| Your deliveries (tours) and live driving status for the VTC you are a member of | VTC features: the tour book, pay, reviews, live map and reports of your VTC. This is part of being a VTC member and is not a separate setting; it ends when you leave the VTC | Art. 6 (1) b |
| Your name and results on leaderboards | Only if you turn "Show me on leaderboards" on | Art. 6 (1) a – your choice, can be turned off any time |
| IP address, time and technical logs | Security, abuse prevention (e.g. blocking repeated wrong passwords), error analysis; logs are deleted after at most 14 days | Art. 6 (1) f – legitimate interest in a secure service |

- **Only the linked savegame.** Other ETS2 profiles on your PC, your World of Trucks login stored in the profile
  and your telemetry in general are never sent.
- **Passwords.** Your HAULIX password is only stored as a salted hash. Discord and Steam passwords are never
  seen by HAULIX (sign-in happens on their own pages). On your PC, HAULIX keeps a sign-in token protected by
  Windows.
- **Emails.** Codes for confirming your address and resetting your password are sent through an email service
  acting as our processor. HAULIX sends no newsletters or advertising.
- **Online service.** HAULIX needs an internet connection to the HAULIX server. If the connection drops, drives
  are still recorded on your PC and uploaded as soon as the connection is back.
- **Visibility.** What others can see (for example your name on a leaderboard or your company page) is shown in
  HAULIX before you share it. Private data stays private.
- **Hosting.** The service is hosted by netcup GmbH in Germany. Processors are bound by a data processing
  agreement (Art. 28 GDPR). Transfers outside the EU only with suitable safeguards (e.g. Discord, Steam when you
  use them to sign in).
- **Retention.** Your data is kept as long as your account exists. Accounts whose email address was never
  confirmed are deleted after 2 days. When you delete your account (Settings → Online), your data is deleted
  right away; backups of the server are overwritten within 14 days.
- **No sale.** Your data is never sold or used for advertising.
- **Age.** HAULIX accounts are for users aged 16 or older, or with permission from a parent or guardian.
## 3. Your rights

You have the right to access (Art. 15), correction (Art. 16), deletion (Art. 17), restriction (Art. 18), data
portability (Art. 20) and to object (Art. 21). Consent can be withdrawn at any time for the future. You also
have the right to complain to a data protection authority (Art. 77), for example the authority in your
country or state.

## 4. Changes

This policy will be updated before the online services start and whenever data processing changes. Important
changes are shown in HAULIX and in the changelog.