Privacy policy

Effective October 14, 2026

Hidden Hive Games is a trade name of Dawn Leap Digital Solutions LLC ("we", "us"). This policy explains what personal information we collect through hiddenhive.games and the games played on its subdomains (such as puce.hiddenhive.games), why we collect it, who processes it for us, how long we keep it, and the choices you have. Questions or requests: support@hiddenhivegames.com.

The short version

We collect only what we need to run your Hidden Hive account, keep it secure, store your game saves, and let you play with other people in games that have multiplayer.
We don't sell or rent your personal information, we don't show ads, and we don't use analytics or tracking cookies.
You can download your saves and delete your account, and everything in it, at any time.

Information we collect

When you create an account

Email address: to sign you in, confirm your account, and send account emails (see below).
Display name: shown to you on the site and in our games (for example "Signed in as …").
Avatar, if you pick one: which of our pixel avatars you chose. Our games can show it, or your Google or Discord picture if you haven't picked one.
Password, if you choose one: stored only as a secure one-way hash. We never see or store your actual password.

When you sign in with Google or Discord

If you choose "Sign in with Google" or "Sign in with Discord", that service shares with us, with your permission:

Google (permissions: openid, email, profile): your Google account ID, name, email address (and whether Google has verified it), and profile picture.
Discord (permissions: identify, email): your Discord user ID, username, email address, and avatar.

We use this only to create and sign in to your Hidden Hive account, to link it to an existing account with the same verified email, and to show your name and picture on your account. We don't request access to your contacts, files, messages, servers or anything else, and we don't post anything on your behalf.

When you play

Cloud saves: the game progress you save to your account, a short summary of each save (for example your character's name, play time and badges), when it was saved, and a label for the device that saved it (such as "Phone" or "Windows PC").
Invitations: email addresses we've invited to the site or to an invite-only game, an optional note we add (such as who it is), whether you're invited as a player or a beta tester, and when we emailed the invitation and when it was accepted.
Beta applications: when you apply to join a closed beta, your account, the game, the message you write (if any), and whether we let you in.
Feedback: when you send feedback, your message, which game it's about, and your device type and browser (to help us reproduce bugs). It's linked to your account so we can reply to your email address. When we reply, we keep the reply with your feedback and note whether the email was sent.

When we run the service

Activity: when you sign in, how (email and password, Google or Discord) and on what kind of device ("Phone", "Windows PC"); when you were last on the site or in a game, to the hour; and which games you've opened, with the first and last time. We use it to count active players and to see whether an invitation was taken up. We don't record your IP address for this.
Account status: if we suspend an account (for example for abuse), when and why, so it can't be used to sign in until we lift the suspension.
Admin log: a record of changes our administrators make, such as inviting someone, changing who can see a game, or suspending an account. An entry can name the account or email address it was about.

When you play with other people

Some games let you join a room with other players (for example a lounge where you can battle and trade).

What other players see: your display name, and whatever the game sends while you're in the room (for example where your character is, what you say in chat, your trainer card, and the offers you make in a trade). Only people in the same room receive it.
What we keep: while you're in a room, our room service knows your account ID, display name and connection, and which shared seats you hold. It passes messages between the players in the room and doesn't store them. For trades, we keep a record of the trade's ID, the two accounts and whether it went through, for 30 days, so a game that was interrupted can finish the trade correctly.
You can only join rooms while signed in with a confirmed email address.

Automatically, to keep you signed in and protect accounts

Sessions: when you sign in we create a session (stored in our database and referenced by a cookie in your browser) that records when it was created and expires, your IP address, and your browser's user agent (browser and device type). This keeps you signed in for up to 30 days and lets us spot misuse.
Security limits: we briefly count sign-in and sign-up attempts per IP address to block password-guessing and abuse.
Server logs: like any website, our hosting provider records standard request information (IP address, page requested, time, browser type) for security and troubleshooting.

How we use it

To provide your account, sign you in across our site and games, and sync your saves between devices.
To send account emails you need: confirming your address, resetting your password, and similar messages about your account. We don't send marketing emails.
To keep the service secure: preventing abuse, fraud and unauthorized access.
To understand how many people play and which games, so we know what to work on.
To decide who may see and play invite-only games and betas, to answer beta applications, and to email invitations to the people invited.
To read and reply to feedback you send, and to fix the problems it reports.
To comply with the law.

We don't use your information for advertising, and we don't sell it, rent it, or share it for others' marketing.

Google user data

Hidden Hive Games' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Information from your Google account (ID, name, email, picture) is used only to sign you in and run your Hidden Hive account as described above. It is not used for advertising, not sold, not used to train AI models, and not shared with anyone except the service providers listed below, who process it only to run our service.

Who processes it for us

We use a few service providers, each only to run our service and under their own privacy and security commitments:

Netlify: hosts our website and games, and runs our servers.
Neon: hosts our database (in the United States).
Resend: sends our account and invitation emails (it receives the recipient's address and the email's contents).
Cloudflare: runs our multiplayer rooms. It receives your account ID, display name, IP address and the messages passed between players in a room while you're in one. It also runs Turnstile, the check on our sign-up and password-reset forms that tells people from bots: it looks at your IP address and your browser and device, doesn't set advertising cookies, and tells us only whether the check passed.
Google and Discord: only if you choose to sign in with them.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a sale or reorganization of our business (in which case this policy continues to apply to it).

Cookies and browser storage

One essential cookie keeps you signed in (set for hiddenhive.games and its game subdomains). There are no advertising, analytics, or third-party tracking cookies.
Our games save your progress in your browser's own storage on your device, and may cache game files so they load faster. The site may briefly remember which game to return you to after you sign in.
On the sign-up and password-reset forms, Cloudflare Turnstile may store what it needs in your browser to run its bot check (see above).

How long we keep it

Your account, linked sign-ins, cloud saves, feedback and our replies to it, and beta applications: until you delete them or your account.
Notifications (our messages to you on the site, such as a reply to your feedback): read ones for 180 days, unread ones until you delete your account.
Invitations: until we withdraw them. The admin log and the record of sign-ins: one year. When you were last seen and which games you've opened: until you delete your account.
Sessions: until they expire (30 days without use) or you sign out.
Multiplayer: who's in a room, until you leave it (or a minute after you lose your connection); trade records, 30 days. Messages between players aren't stored.
Security counters: a per-IP-address count that resets every minute. Email confirmation and password-reset links: until used or expired.
When you delete your account, we delete it with its sessions, linked sign-ins, cloud saves, feedback, replies, beta applications, notifications and activity records from our database right away. Admin log entries about it stay until they're a year old. Copies in our providers' backups and logs are removed on their normal schedules.

Your choices and rights

See and download your cloud saves on your account page.
Change your name, avatar and password, and link or unlink Google and Discord, on your account page.
Delete individual saves, or your whole account, on your account page at any time.
For anything else, including a copy of the information we hold about you or a correction, email support@hiddenhivegames.com. Depending on where you live you may have additional rights; we honor requests regardless of where you are.
You can remove our access in your Google account (Security → Third-party connections) or Discord settings (Authorized Apps) at any time; your Hidden Hive account keeps any other sign-in method you've set up.

Children

Our service is not directed to children under 13, and we don't knowingly collect personal information from children under 13. A child can play our games without an account; their progress then stays only on their device. If you believe a child under 13 has created an account, contact us and we will delete it.

Security

All connections use HTTPS. Passwords are stored only as secure hashes, sessions can be ended by signing out, and access to our systems is restricted. No service can be perfectly secure, but we work to protect your information.

Where your information is processed

We're based in the United States, and our providers store and process information in the United States. The one exception is multiplayer: Cloudflare runs each room in one of its data centers, usually one near the players, which may be outside the United States.

Changes to this policy

If we change this policy we'll update the date at the top, and for significant changes we'll tell you on the site or by email before they take effect.

Contact

Dawn Leap Digital Solutions LLC, doing business as Hidden Hive Games: support@hiddenhivegames.com.