PRIVACY POLICY

Collect less.
Explain everything.

Leviathan is designed so registration data and optional processing do not start until you actively accept the applicable policies.

LAST UPDATED

4 October 2026

For this policy, “Leviathan” means the operator of leviathanclient.com and official Leviathan software. Privacy and data-rights requests can be submitted through the Leviathan Support Center.

01

Before you accept

Leviathan does not intentionally submit registration form contents, start Turnstile, begin account creation, set a new account session, or enable optional analytics or telemetry before you actively accept the policies. Information typed into the form remains in your browser until that action.

02

Unavoidable delivery data

Like any website, delivering a page requires network infrastructure to receive technical request data such as an IP address, requested URL, browser headers and timing information. Cloudflare or other infrastructure providers may process this data to transmit and secure the service even before account consent.

03

Account information

After acceptance and when you submit registration, Leviathan may process your chosen username, email address, birthday, password hash and salt, legal-policy versions accepted, acceptance time, account identifiers, settings and verification state.

04

Authentication

Passwords are never intended to be stored in plaintext. Signed-in sessions use secure HTTP-only cookies. Google or Microsoft data is processed only when you deliberately choose those providers.

05

Minecraft identity

If you link or verify Minecraft, Leviathan may process Minecraft UUIDs, usernames, ownership-verification status, verification method and timestamps needed to represent that link securely.

06

Security data

After acceptance, Leviathan may process limited security information such as sign-in failures, rate-limit state, verification attempts, correlation IDs and abuse-prevention results to protect accounts and infrastructure.

PURPOSE & LEGAL BASIS

Data is used only for defined purposes.

Depending on the feature and applicable law, processing may be necessary to provide the service you requested, protect legitimate security interests, comply with law, or rely on your consent for optional processing.

1Provide the accountRegistration, authentication, recovery, settings and linked identity features.
2Protect the serviceAnti-abuse controls, fraud prevention, rate limits and security investigations.
3Optional featuresOnly enabled when you deliberately choose them or give the required consent.
Privacy modelMinimal by default
0

Before acceptanceNo registration submission or optional tracking

Local
1

After acceptanceOnly data needed for chosen features

Limited
2

Third partiesOnly when required or deliberately selected

Controlled

THIRD PARTIES

Providers are used for specific functions.

Cloudflare may deliver and protect the website and provide Turnstile when it is used. Email delivery providers may send verification or recovery messages. Google and Microsoft receive data only when you choose their sign-in flows. Minecraft/Xbox services are used when you choose relevant ownership or identity features. Each provider may process data under its own terms and privacy policy.

RETENTION & DELETION

Keep data only as long as needed.

Account data is retained while the account exists and as reasonably necessary for security, dispute handling, fraud prevention or legal obligations. Temporary verification challenges should expire automatically. Users may request access, correction, deletion, restriction, portability or other rights available under applicable law through Support.

A

Access and correction

You may request a copy of personal information Leviathan holds about you and correction of inaccurate account information, subject to identity verification.

B

Deletion

You may request account deletion. Some limited records may need to be retained where required by law, necessary to prevent abuse, or needed to resolve disputes.

C

Withdrawal

Where processing relies on consent, you may withdraw that consent for future processing. Withdrawal does not make earlier lawful processing unlawful and may make optional features unavailable.

CHILDREN & INTERNATIONAL USERS

Local legal requirements still apply.

Leviathan does not knowingly ask users to bypass local age or parental-consent rules. Data may be processed in countries where infrastructure providers operate, subject to applicable safeguards and provider terms. Users in the EEA, UK and other jurisdictions may have additional statutory privacy rights.

Questions about these policies?

Use the Leviathan Support Center for account, privacy, legal or data-rights requests.