Privacy Policy
Effective 16 October 2026. The data controller is HATCHideas, reachable at contact@HATCHideas.com. This policy says exactly what GigaDungeon stores about you, why, and for how long.
What we collect
- Account. Your email address and a password hash (held by our authentication provider, Supabase — we never see the password), your chosen username and display name, and when you signed up. Guest trials have a placeholder email until you keep the character.
- Network address. The IP address you signed up from and the one you last played from, with the time. We use these only to limit abuse: how many guest trials one address can start, rate limits, and blocking addresses that attack the service. Administrators can see them; other players cannot.
- Play data. Your characters, inventory, position, the parts of the dungeon you have explored, quests, achievements, lifetime statistics (kills, deaths, distance, crafts and the like), leaderboard entries, in-game chat, and world membership. Leaderboards and achievements show your display name and character names to other players.
- Subscription. If you subscribe, Stripe gives us a customer id, a subscription id, the plan, its status and renewal date. Stripe holds your card details and billing address under its own privacy policy; we never receive your card number.
- Technical logs. Server logs with a request id, the route called, timing, status, your user id if signed in, and your IP address, for failed or slow requests and for errors. These are used to keep the service running and are kept for a limited time (see retention).
We do not use advertising or analytics trackers. The only thing stored in your browser is the sign-in session (local storage) and small conveniences such as the map you have seen, which are not sent to anyone but us.
Why we use it
To run the game and your account (performance of our contract with you); to bill subscriptions (contract and legal obligation); to prevent abuse and keep the service secure (our legitimate interest); and to answer you when you write to us. We do not sell personal data and we do not share it except with the processors below.
Who processes it for us
- Supabase — database, authentication and file storage.
- Stripe — payments and the billing portal.
- Hostinger — hosting of the game server.
- Email delivery for account confirmation and password resets, sent through our authentication provider.
These providers may store data in the United States and other countries. We do not use them for anything beyond running the game.
How long we keep it
- Account and play data: while your account exists. Guest trials are deleted automatically after the period shown in the game.
- Subscription records: while the subscription is active and for as long as tax and accounting law requires afterwards.
- Server and error logs: up to 90 days.
- Blocked network addresses: until an administrator unblocks them.
Your choices and rights
- Delete your account yourself from the profile screen. This removes your profile, characters, inventory, explored maps, quests, achievements and chat, cancels any subscription, and deletes your sign-in. Leaderboard history tied to the account is removed with it. Stripe keeps the payment records the law requires.
- Access, correction, export. Write to contact@HATCHideas.com and we will send you a copy of what we hold or correct it. If you live in the EU/EEA, UK, California or another place with a privacy law, you also have the rights that law gives you, including to object or complain to your supervisory authority.
- Email. We send only the emails the service needs (confirmation, password reset, billing). There is no marketing list.
Children
GigaDungeon is not for children under 13 and we do not knowingly collect their data. If you believe a child under 13 has an account, tell us and we will delete it.
Security
Connections are encrypted (HTTPS). The database is reachable only by the game server with its own key, and row-level policies keep one player's data from another. No system is perfectly secure; if we learn of a breach affecting you we will tell you as the law requires.
Changes
When this policy changes the effective date above changes; for material changes we will say so in the game or by email.