Privacy Policy

Last updated: June 21, 2026

This Privacy Policy explains how Duels+ ("Duels+", "we", "us", "our") collects, uses, and stores information in connection with the Duels+ website (https://duelsplus.com), the Duels+ dashboard (https://dash.duelsplus.com), the Duels+ launcher, the Duels+ proxy, the Duels+ API (https://api-prod.duelsplus.com), and the Duels+ proxy (together, the "Service").

Duels+ is run by an unincorporated team and is not operated through a registered company. References to "we" or "us" refer to the individuals operating the Service. Duels+ is not affiliated with, endorsed by, or sponsored by Hypixel Inc. or Mojang Studios/Microsoft.

By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

In order to operate the Service, we may collect and store the following information:

Discord ID
Hypixel API Key
Linked Minecraft IGNs
Session information
Settings and preferences
Game statistics
Reports
Subscription and payment information (see Section 3)

1.1 Information We Do Not Collect

We do not collect or store your Microsoft authentication data. Authentication takes place directly between your client and Microsoft, and these credentials never pass through or are stored on our systems.

We do not log or store chat messages or other in-game communications unrelated to the operation of the Service.

We do not store your IP address. IP addresses are processed transiently, only to the extent necessary to relay network traffic between your client and Hypixel's servers, and are not logged or retained.

We do not collect or store your country or any other location data.

2. Why We Collect Hypixel API Keys

Hypixel limits each Development API Key to 300 requests per 5 minutes, which is why users are asked to provide their own key. This allows the Service to retrieve information from the public Hypixel API on your behalf.

3. Third-Party Services

The Service relies on a number of third-party providers in order to function. We do not set cookies of our own, but the providers below may do so as part of their normal operation. Each provider's use of your data is governed by their own privacy policy, linked below.

3.1 Cloudflare

Website and API traffic is routed through Cloudflare. Cloudflare's privacy policy is available at https://www.cloudflare.com/privacypolicy/.

3.2 Discord

Authentication to the Service is handled via Discord OAuth. Discord's privacy policy is available at https://discord.com/privacy.

3.3 Microsoft

The Duels+ proxy requires you to log in via Microsoft Authentication, as this is how Minecraft verifies your identity and allows the proxy to sit between your client and Hypixel's servers. Your credentials are exchanged directly with Microsoft and are never sent to or stored by us. Microsoft's privacy statement is available at https://privacy.microsoft.com/privacystatement.

3.4 Tebex

Payments are processed through Tebex. When you initiate a purchase, the payment checkout is processed by Tebex. Your payment and billing details are handled by Tebex, and we do not receive or store this information ourselves. Tebex's privacy policy is available at https://checkout.tebex.io/privacy.

3.5 Hypixel API

We use the public Hypixel API, together with your API Key (if provided), to retrieve statistics and relevant data of other players. This is subject to Hypixel's own terms, available at https://hypixel.net/terms.

4. How We Use Your Information

We use the information described in Section 1 for the following purposes: to identify your account and link it to your settings, stats, and Hypixel API key; to retrieve Hypixel stats on your behalf; to detect and prevent token or account sharing and other abuse; to operate, maintain, and troubleshoot the Service; to apply your saved settings and preferences; to display in-game statistics; to investigate and act on reports submitted by users; and to acknowledge subscriptions and grant subscription benefits.

We do not sell your information, and we do not use it for advertising.

5. Data Retention

Your Discord ID, linked IGNs, settings, and stats are retained for as long as your account remains active. If you delete your account, this data is removed within 7 days, except where we need to retain certain records to investigate an open report or suspected abuse.

Your Hypixel API Key is retained until you remove it or delete your account. Separately, Hypixel requires you to refresh a development key every one to three days at https://developer.hypixel.net/dashboard regardless of how long we hold it.

Reports submitted against users are retained for 14 days for moderation purposes.

Information held by the third-party providers listed in Section 3 is retained according to their own policies, not ours.

6. Data Security

We use AES-256 encryption to protect data stored on our systems, and access to this data is limited to those who need it to operate and maintain the Service. We do not store your Microsoft/Mojang credentials or any payment card details.

No method of storage or transmission is completely secure, and while we take reasonable steps to protect your data, we cannot guarantee its absolute security.

7. Aggregate Metrics

We may display the total number of players currently connected to the Service in real time. This is an aggregate figure only; it is never stored, logged, or linked to any individual user.

8. Subscriptions and Payments

We offer subscription services:

Celestial: A one-time purchase subscription that grants permanent subscription benefits.
Divine: A monthly recurring subscription that grants ongoing subscription benefits.

Subscription purchases are initiated through our dashboard and processed by Tebex. Your payment and billing information is handled entirely by Tebex and is not stored on our systems. Tebex's privacy policy governs the handling of your payment details.

9. Your Rights

If you are located in the EEA, UK, or California, you may have rights under the GDPR or CCPA in relation to your personal data, including the right to request access to the data we hold about you, request that it be corrected or deleted, request a copy of it in a portable format, and object to or restrict certain processing. To exercise any of these rights, contact us using the details in Section 11.

10. Children's Privacy

The Service is not directed at children. As Discord authentication is required, you must meet Discord's minimum age requirement (13, or higher where required by local law) to use the Service.

11. Contact

If you have any questions about this Privacy Policy, or want to exercise any of the rights described above, you can reach us via Discord or by email at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and material changes will also be announced on our Discord server.