← yaks.tools

Privacy Policy

Yak's DayZ Toolchain ("Yak", "we", "our", "us")

Effective date: March 23, 2026

1. Who We Are

Yak's DayZ Toolchain is a server management platform for DayZ Xbox communities. It currently operates as a Discord application, with a web dashboard planned at yaks.tools. Yak is operated by an independent developer and we are the data controller for all information described in this policy.

2. What Data We Collect

We collect only the minimum data necessary to operate the service.

From Discord

Data	Why we collect it
Discord user ID	Uniquely identifies you and links your account to your community
Discord guild (server) ID	Identifies which DayZ server community you belong to
Discord username	Displayed in admin interfaces and audit logs
Guild membership and role data	Used to enforce access controls between administrators and players

From Nitrado (provided by server administrators)

Data	Why we collect it
Nitrado API token	Stored encrypted; used to manage your DayZ server on your behalf
Nitrado service ID	Identifies which physical server your community manages
Server credentials	Stored encrypted; used to apply configuration changes to your server

Player activity data

Data	Why we collect it
In-game gamertag (Xbox tag)	Links Discord identity to in-game identity for moderation purposes
Ban records	Maintains server safety; includes reason, timestamp, and issuing admin
Reputation scores	Tracks community standing based on in-game behavior
Economy balances	Tracks in-game currency and item values per player

Technical data

Data	Why we collect it
IP address	Rate limiting, fraud prevention, and session security
Session ID (dashboard cookie)	Maintains your authenticated dashboard session
Operational logs	Service debugging; not tied to individual users in normal operation

3. What We Do Not Collect

• Passwords, payment information, real names, postal addresses, or government IDs
• Biometric data of any kind
• Cross-site tracking data or advertising profiles
• Any data shared with or sold to third parties for commercial purposes

4. How We Use Your Data

Purpose	Legal basis
Providing bot commands and server management features	Contract (service operation)
Applying DayZ server configuration changes on your behalf	Contract
Enforcing access controls for administrators	Legitimate interest
Sending critical service alerts (e.g. loss of server access)	Legitimate interest
Dashboard authentication and session management	Contract
Account recovery via email verification	Consent
Maintaining ban records and moderation history	Legitimate interest (community safety)
Audit trail for administrative actions	Legitimate interest (security and dispute resolution)

5. How We Store and Protect Your Data

All data is stored on Amazon Web Services infrastructure in the us-west-1 (Northern California) region.

• Nitrado tokens and server credentials are stored in AWS Secrets Manager, encrypted at rest using AWS-managed encryption keys. They are never logged or exposed in plaintext under any circumstances.
• Player records, ban history, and economy data are stored in Amazon DynamoDB with encryption at rest.
• Server configuration data is stored in a private, encrypted system accessible only to Yak's automation and the server administrator.
• Dashboard sessions use HttpOnly, Secure, SameSite=Lax cookies with a 2-hour expiry. Session records are automatically deleted after expiry.
• All data in transit is encrypted using TLS 1.2 or higher.

6. Data Retention

Data type	Retention period
Active tenant and player records	While your community uses Yak
Dashboard sessions	2 hours (automatically deleted on expiry)
Nitrado tokens and server credentials	Until you rotate or delete them via the dashboard
Audit log entries	2 years
Ban records	Until removed by a server administrator
Server configuration data	While your community uses Yak
Operational logs	30 days

Upon offboarding, all tenant records, player data, and stored credentials are permanently deleted within 30 days upon written request to privacy@yaks.tools.

7. Data Sharing

We do not sell, trade, or share your personal data with third parties for commercial purposes. We share data only in the following limited circumstances:

• Discord — We interact with Discord's API to provide bot functionality. Discord's Privacy Policy governs how Discord handles your data.
• Nitrado — We interact with Nitrado's API on your behalf using the credentials you provide. Nitrado's privacy policy governs their data handling.
• Amazon Web Services — All data is hosted on AWS, which acts as a data processor under our agreement with them.
• Configuration infrastructure — Server configuration data is processed by Yak's internal automation systems on your behalf.
• Legal authorities — We may disclose data if required by law, court order, or to protect the safety of users or the public.

8. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access — Request a copy of the data we hold about you
• Correction — Request that inaccurate data be corrected
• Deletion — Request permanent deletion of your personal data
• Portability — Request your data in a machine-readable format
• Objection — Object to processing based on legitimate interests
• Withdraw consent — Where processing is based on consent (e.g. recovery email), you may withdraw it at any time

To exercise any of these rights, contact privacy@yaks.tools. We will respond within 30 days. If you are located in the European Union or United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

9. Cookies

The Yak dashboard uses a single session cookie:

Cookie	Purpose	Expiry
yak_session	Maintains your authenticated dashboard session	2 hours; cleared on logout

This cookie is HttpOnly, Secure, and SameSite=Lax. We do not use advertising, tracking, or analytics cookies of any kind.

10. Children's Privacy

Yak is not directed at children under 13. DayZ is rated M (17+) and our services are intended for adult server administrators and players. If you believe we have inadvertently collected data from a minor, contact privacy@yaks.tools and we will delete it promptly.

11. International Data Transfers

Data is stored in the United States (AWS us-west-1). If you are located in the European Economic Area or United Kingdom, your data may be transferred to and processed in the United States. We take appropriate measures to ensure your data remains protected in accordance with this policy.

12. Changes to This Policy

When we make material changes, we will post a notice in the Yak Hub Discord server and update the effective date above. Continued use of Yak after the effective date constitutes acceptance of the updated policy.

13. Contact