The creator of this extension is not a lawyer, so this will be the most non-legalese privacy notice you have probably ever read. That being said, if anything in this notice seems strange to you, please do not hestitate to reach out and ask for clarification!
The HITMAPS Bot Authenticator handles the transmission of what could be perceived as potentially sensitive information. After all, this extension sends your authentication token for HITMAN Services up to HITMAPS' infrastructure to be utilized for its IOI API (https://ioiapi.hitmaps.com) and for the /contract and /leaderboard commands offered by the HITMAPS Discord Bot. That being said, HITMAPS would like to disclose the following information:
- Initial Collection of Data: When your token is sent to HITMAPS, the following payload is sent:
- The platform you are authenticating (Epic, PlayStation, etc.)
- The access token itself
- Storage of Data: The access token in the request body is in plain text and is not hashed or encrypted. This is because the server will encrypt the token using AES encryption. The server will never keep a copy of the plaintext token anywhere.
- Usage of Data: When submitting an actual request to look up a contract or a leaderboard, your encrypted token may potentially be used, depending on the contract's/leaderboard's platform. Should your token be needed, it will be decrypted to be sent to the appropriate request to the IOI service.
- Sharing of Data: Your token (encrypted or otherwise) is only sent to the appropriate IOI service (hosted on hm3-service.hitman.io) in order to fetch the appropriate information from the game servers. HITMAPS will never provide raw tokens to third-parties.
- If you do not wish for your token to be stored on HITMAPS systems, simply do not use this extension.
Contact
Should you have any questions regarding this privacy notice, please reach out to HITMAPS via @hitmapsOfficial on Twitter.