Terms of Service

1. Acceptance of Terms

By accessing or using HyAuth ("the Service"), you agree to be bound by these Terms of Service. If you do not agree to these terms, do not use the Service.

2. Description of Service

HyAuth provides a developer API that enables third-party applications to authenticate Hytale players using Hytale's OAuth 2.0 device authorization flow. The Service lets users verify their Hytale account ownership with applications that integrate our API.

3. Developer Accounts

To use the HyAuth API, developers sign in to the Developer Dashboard through our identity provider. Developers are responsible for:

• Keeping their API keys secure and confidential
• All activity that occurs using their API keys
• Ensuring their applications comply with these terms
• Clearly informing users what data their application requests

4. User Authentication

When users authenticate through HyAuth, they sign in directly on Hytale's own login page via the OAuth 2.0 device authorization flow. HyAuth never receives or stores Hytale passwords. We hold the resulting authorization session only until it completes or expires, typically within 10 minutes, after which it is deleted automatically.

5. Data Scopes

Applications can request the following data scopes:

• Game profiles: Hytale usernames, account UUIDs, entitlements, and skin
• Email: Account email address (privileged scope, requires approval)

6. Privileged Scopes

The email scope is considered privileged and requires explicit approval from HyAuth administrators. Developers must demonstrate a legitimate need for this data and agree to additional privacy requirements.

7. Prohibited Uses

You may not use the Service to:

• Impersonate users or applications
• Circumvent rate limits or security measures
• Collect data beyond what is necessary for your application
• Sell or redistribute user data
• Violate any applicable laws or Hytale's terms of service

8. API Key Revocation

We reserve the right to revoke API keys at any time for violations of these terms or for any other reason at our discretion. Revoked keys will immediately stop functioning.

9. Disclaimer

HyAuth is not affiliated with, endorsed by, or connected to Hypixel Studios or Hytale. The Service is provided "as is" without warranties of any kind. We do not guarantee uptime, availability, or accuracy of the Service.

10. Limitation of Liability

HyAuth and its operators shall not be liable for any indirect, incidental, special, consequential, or punitive damages resulting from your use of or inability to use the Service.

11. Changes to Terms

We may modify these terms at any time. Continued use of the Service after changes constitutes acceptance of the new terms.

12. Contact

For questions about these terms, join our Discord server.