HYPER LIGHT Terms of Service and Privacy Policy
- Version
- 1.0
- Updated
- 2026-09-27
- SHA-256
- d4bc52624804c4e4…
Draft, pending legal review. This text describes how HYPER LIGHT works today; the Owner's legal details and governing law are still to be confirmed, and it is not yet in force as a contract.
These terms govern the HYPER LIGHT website and portal (the "Site"), operated by HYPER LIGHT (the "Owner"). The console software itself is governed by its own End-User Licence Agreement, which it shows when it first starts. By creating an account you agree to these terms.
1. Accounts
- You must give a working e-mail address and keep your password to yourself. You are responsible for what is done with your account.
- One person or organisation per account. An account holds the machines (Machine Codes) you register and the licences issued for them.
- The Owner may suspend an account that breaches these terms or is used to attack the Site.
2. Licences
- A licence is requested on the Site for one machine and issued by the Owner as a signed Licence File. The Site never signs a licence; it verifies each one against the Owner's public key before storing or serving it.
- Prices are shown on the Site where the Owner has set them; otherwise they are on request. No payment is taken on the Site at this time.
- The use of the console under a licence is governed by the End-User Licence Agreement.
3. The Academy and practice shows
- Lesson videos, captions and pages are published for anyone to watch. Practice show files are for accounts holding an active licence, for learning the console; they may not be redistributed.
- Screens and videos on the Site are recordings of the console. They may not be reused without the Owner's permission.
4. Acceptable use
You may not:
- attempt to access another account, licence or practice show, or any part of the Site you are not authorised to use;
- probe, scan or test the Site's security, or overload it, without the Owner's written permission;
- use the Site to send spam or to store unlawful content;
- scrape the Site by automated means beyond what a search engine's crawler does.
5. Intellectual property
The Site, the console, their designs, texts, recordings, trademarks and logos are the Owner's or its licensors'. These terms grant no right in them beyond viewing the Site and using your account.
6. Privacy policy
6.1 What the Site keeps
- Account: your e-mail address, your name if you give one, and your password as a bcrypt hash — never the password itself. For a Google or Apple sign-in, where the Owner enables it: the e-mail address that service confirms.
- Machines and licences: the Machine Codes you register, the labels you give them, and the licences requested and issued for them, including the signed Licence File and the last characters of an activation key — never the whole key.
- Terms accepted: the version of these terms you accepted, with its digest and the time.
- Early-access requests: the e-mail address, name, organisation, platform and note you send from the download page, the version of these terms you accepted, and the time.
- Server records: request logs a hosting provider keeps (address, time, page), for security.
6.2 What it is used for
To run your account, issue and serve your licences, answer early-access requests, and protect the Site from abuse. It is not sold, and it is not used for advertising or profiling.
6.3 Who else sees it
Hosting and, where enabled, the Google or Apple sign-in service. The licence service the Owner runs receives a Machine Code and activation key when you activate.
6.4 How long it is kept
Account, machine and licence data: while the account exists, and afterwards only as long as the law requires for licences issued. Early-access requests: until the private beta ends, or until you ask for their deletion. Rate-limit counters live in memory for minutes.
6.5 Your rights
You may ask to see, correct, export or delete your data, and to withdraw an early-access request, through the portal's contact route. Depending on where you live, you may also complain to your data protection authority.
6.6 Security
Passwords are hashed with bcrypt; sessions are signed; every page carries a strict Content Security Policy; sign-in, registration and downloads are rate-limited; licences and practice shows are served only to their owners. The Site's security measures are described in its security document.
7. Cookies
The Site sets only cookies it needs to work. It sets no analytics, advertising or tracking cookies, and so asks for no cookie consent.
| Cookie | Purpose | Lifetime |
|---|---|---|
next-auth.session-token (__Secure- over HTTPS) | Keeps you signed in: a signed session, readable only by the server | 14 days |
next-auth.csrf-token (__Host- over HTTPS) | Protects sign-in and sign-out forms against cross-site requests | Session |
next-auth.callback-url (__Secure- over HTTPS) | Where to return after signing in | Session |
next-auth.state, next-auth.pkce.code_verifier, next-auth.nonce | Only during a Google or Apple sign-in, where enabled | 15 minutes |
8. Availability and changes
The Site is provided as it is, without a promise that it will always be available. The Owner may change these terms; a new version is shown with its version number and date, and accounts are asked to accept it.
9. Liability
To the extent permitted by law, the Owner is not liable for indirect or consequential loss arising from the use of the Site. Nothing in these terms limits a right the law gives a consumer that cannot be limited by agreement.
10. Governing law
The governing law and courts of these terms are to be confirmed by the Owner before they come into force.
11. Contact
Questions, and requests about your data: through the portal's contact route.