PRIVACY

What we keep, and why.

HoodHaven needs no account to play. If you connect a wallet, we keep just enough to save your kingdom, run the leaderboard and keep it fair. No ads, no tracking cookies, nothing sold. Last updated 24 October 2026.

EVERYONE WHO PLAYS

Without a wallet.

  • Your save stays in your browser (local storage), with a random device id the game makes up. Clearing your browser data deletes both.
  • Play events. When a session or run starts and ends, with the score, wave and length, tied to that random device id. We use them to see how the game is played and balanced.
  • Error reports. If the game crashes, the error message, where in the code it happened, the game version and your browser's user agent (for example "Chrome on Android"), at most 5 per visit.
  • Run tickets. The time each Survival or Story run starts, so a score can prove it was really played. Deleted after a day.
  • Other players on your island. While you're on the isles, your position, look and name are sent live to players on the same island so they see you walk by. This is passed along, not stored.

IF YOU CONNECT A WALLET

With a wallet.

  • Your wallet address, proven by a message you sign (no transaction, no fees, we never see your keys). It becomes your account.
  • Your leaderboard name and scores: name, score, wave and the token-holder crest. These are public on the leaderboard.
  • Your cloud save: your kingdom's progress, so you can carry on from another device.
  • Balance history: gold, materials and gear counts over time, taken from your cloud save, to spot cheating and keep the economy fair.
  • Token holdings: your $HAVEN balance, read from the public Robinhood Chain, to show the holder crest.

WHERE AND HOW LONG

Where it lives.

Supabase

Our database (servers in Seoul, South Korea). Only the team can read it; players can read their own save and the public leaderboard.

Cloudflare

Serves the website and game files. Like any web host it sees your IP address when you load a page. Its Web Analytics counts page visits without cookies.

Google Fonts, jsDelivr

The pixel font and one code library load from these, so they also see your IP address.

  • Play events and error reports: 90 days (after that only daily totals, with no device ids).
  • Balance history: 180 days.
  • Run tickets: 1 day. Sign-in codes: 1 hour.
  • Account, name, scores, cloud save: until you ask us to delete them.

YOUR DATA, YOUR CALL

Deleting it.

  • No wallet: clear this site's data in your browser. That removes your save and device id.
  • With a wallet: send a direct message to @HoodHaven_RH on X with your wallet address. We delete your account, name, scores, cloud save and balance history within 30 days and confirm when it's done. We may ask you to sign a message to prove the wallet is yours.
  • Copy of your data: ask the same way and we send it to you.
  • Anything already public on the blockchain (your wallet and its tokens) is outside our control.

We'll update this page when what we store changes, and change the date at the top.