Privacy

Hide and Seek 3D is a small hobby game. This page explains what it keeps about you.

Your age

• The welcome card asks whether you are 13 or over. The answer is stored in your browser and sent to the server with each connection, not saved with your account. Players under 13 cannot type in chat or buy anything, and any adverts shown to them are not personalised. No date of birth is asked for or kept.

Playing as a guest

• Your browser stores your chosen name, look, settings, a random device id and and a signed record of your XP, game stats (rounds played, hiders found and so on), coins, diamonds and shop skins. Clearing site data removes them.
• Nothing about guests is saved on the server. Your name, position and chat are only kept in memory while you're connected.

Signing in

• Sign-in is handled by Google Firebase Authentication. If you use Google, Google shares your email address and name with the game. If you use email and password, Firebase stores your email and a secured password (the game never sees your password).
• The game saves your player name, level/XP, coins, diamonds, shop skins you own, chosen skin and colour, game stats, your last 10 matches (date, room name, placing, score and XP), your daily streak (the last day you came and how many days in a row) and your settings (chat filter, camera, sound and bot difficulty) in Google Cloud Firestore, linked to your account.
• You can download everything saved about you from Account → Download my data, and end your sign-in on every device with Sign out on all devices.
• You can delete your account at any time from Account → Delete account. You are signed out straight away, and 30 days later the saved progress and the sign-in account are removed for good. If you sign in again within those 30 days you are asked whether to keep the account, and can cancel the deletion.

Chat, reports and moderation

• Chat messages are only kept in memory (the most recent 200 per room) and disappear when the room closes.
• Chat messages are checked for bad language on the server as well as in your browser.
• If someone reports a message, the message, the sender's name, device id and account id (if signed in), the reporter's name, the reason and where everybody in the room had been for the previous 30 seconds are saved (in Google Cloud Firestore when accounts are switched on) so the operator can review it.
• Room hosts can ban players. A ban remembers the player's device id, account id and IP address in memory until the room closes.

Anti-cheat

To stop cheating, the server notes suspicious activity (such as flooding the game with messages or tampering with saved progress) together with the player's name, device id, account id and IP address. Players removed for cheating are banned by device and account for up to 24 hours. This information is kept in the server's memory and is cleared when it restarts, except for removals, which are saved so the operator can review them.

Operator dashboard

The game's operator can see who is currently connected (name, level, room, device id, account and IP address), reports, and anti-cheat records, and can remove or ban players.

To see how many people play and how many come back, the server keeps a count for each day (in Google Cloud Firestore when accounts are switched on): a scrambled (hashed) form of your device id, which cannot be turned back into the id, and the day your device first played - plus totals of sessions, minutes played and matches. Nothing else about you is in it: no name, account or IP address. Your browser keeps the day you first played (hs-first) so it can say so.

If you first came to the game through a link from another player (an invite, a shared match result or a room link), the link says which kind, and your browser keeps that (hs-source). On your first day, the server adds one to that day's total for that kind of link. Only the totals are kept: nothing links them to you, and they don't say who sent the link.

Contact messages

If you send a message with the Contact button, we keep your message, your player name, the email address you give (or your account's email), your device and account ids, and technical details (browser, screen size and where you were in the game) so we can reply and fix problems. New messages are emailed to the game's operator using Resend. You can ask for your messages to be deleted by sending another message.

Settings kept only on your device

• Some choices are kept only in your browser's storage (localStorage) on the device you are using, and are not saved to your account: the cosmetics you have equipped, your saved room presets, the title you have chosen to show, and whether streamer mode is on.
• They do not follow you to another device. Clearing site data removes them.
• While you are connected, the game is told what you have equipped and your title so other players can see them. Streamer mode and room presets stay on your device.

Purchases (if and when they are switched on)

Purchases are switched off at the moment. This section describes what would happen if and when they are switched on. See also the terms of sale and use.

• You can only buy while signed in to an account. Guests cannot buy.
• Payment is taken by Stripe on Stripe's own checkout page. Your card number, expiry date, security code and billing details go straight to Stripe. The game's server never sees or stores them.
• To start a payment, the game sends Stripe your account id, your account's email address (so Stripe can fill it in and send a receipt), what you are buying, the price and the currency.
• Stripe processes the payment on the operator's behalf. Stripe also uses payment information for its own purposes, such as preventing fraud and meeting its legal duties, and is responsible for that use itself. Stripe's privacy policy explains what it does. If tax calculation is switched on, Stripe uses your location or billing address to work out the tax.
• The game keeps a purchase record for each checkout: Stripe's reference for the checkout and for the payment, your account id, the product, the amount, the currency, the status (pending, paid, failed, cancelled, refunded or disputed), when it was created and last updated, and the references of Stripe's notices about it. It is kept in Google Cloud Firestore, like the rest of your account.
• What you bought (diamonds, items and time-limited features) is saved with your account's progress, in the same place as your skins.
• Purchase records are kept for 6 years after the purchase, because the operator has to keep tax and accounting records. They are kept for that time even if you delete your account; they hold your account id, but no card details, name or email address.
• You can see your own purchases in the game, and the operator can see purchase records to deal with refunds and problems.

Adverts (if and when they are switched on)

Adverts are switched off at the moment. This section describes what would happen if and when they are switched on.

• The only adverts would be ones you choose to watch for a small reward of coins. They are never shown during a match, nobody has to watch one, and no more than 5 a day earn a reward.
• The adverts would be supplied by Google. When one is shown, your browser connects directly to Google, which receives your IP address and details about your browser and device, and may use cookies or similar storage. Google is responsible for what it does with that information; see how Google uses information from sites that use its services.
• Because children are likely to play this game, adverts are requested with Google's child-directed treatment, and the operator leaves that on. That asks Google not to personalise adverts and to show only adverts suitable for children. Nothing from Google is loaded until you press the button to watch an advert, and before adverts are switched on, a choice about consent will be added that is shown before any advert loads.
• The game does not send Google your name, email address or account id. The game's server only counts how many advert rewards you have collected today, against your account id or device id, and keeps that count in memory.

Hosting

The game server runs on Render. Like most websites, the hosting provider may keep standard request logs (such as IP addresses) for security and operations.

Questions

Contact the person who runs this server if you have questions or want your data removed.

← Back to the game