Privacy Policy — Hushvale: Night Hunt

Last updated: 2026-11-14

This policy explains what data Hushvale: Night Hunt ("Hushvale", "the game") collects, why, who it is shared with, how long it is kept and how you can exercise your rights. It follows Brazil's General Data Protection Law (LGPD, Law 13,709/2018).

Controller: Marcelo Batalha Hattori, Campinas/SP, Brazil.
Contact: [email protected].

1. What we collect

1.1 Game account (created automatically, no sign-up). On first launch the game creates on your device a random account identifier and a random secret key. The identifier is sent to our server; for the key, the server keeps only a salted hash. The account gets an automatically generated nickname (for example, "Nimble Firefly"), which you can change, with a number (#tag) that tells it apart from others.

1.2 Progress and matches. Level and XP, missions, items, in-game currency (gold and gems), chests, fragments, skins, prizes, match history (mode, side, result, score and the nicknames shown on the scoreboard), Survival leaderboards and a record of in-game currency earned and spent. For online matches we also keep a recording of the match commands (replay).

1.3 Session data. When the game connects: date and time, app version, platform (Android/iOS), device model and language.

1.4 Game usage. Screens opened and how long each stayed open; first-time steps (tutorial, first match, first chest, etc.); actions such as the mode picked, settings changed, structures built in a match and buttons tapped (we record the button's internal name, never what you type). This goes to our server linked to a code derived (hashed) from the account identifier.

1.5 Analytics by GameAnalytics. The GameAnalytics SDK receives progression events (match start and end, mode, side, map, length), usage events and already-filtered errors. It uses its own device identifier, the device model and OS, and estimates your country from your IP address.

1.6 Crash and error reports by Sentry. When the game crashes or hits an error, Sentry receives a technical report: where in the code, device model and OS, game version, a Sentry installation identifier and the game's last log lines. Before sending, the game removes e-mails, tokens, IP addresses, file paths, web addresses and long identifiers, and clears the user's name, e-mail and IP from the report. No screenshots are sent.

1.7 Feedback and survey (only if you send them). The text you write (up to 500 characters), its type (bug, idea, other), your survey answers and automatic context: version, platform, device model and OS, language, open screen, mode and side of your last match, average FPS and the game's last 40 log lines, filtered as in 1.6. Please don't write personal data in feedback.

1.8 Sign in with Google or Apple (optional). Used to recover your progress on another device. The game asks only for the account identifier. Google's token also carries your e-mail: our server only checks the token and does not store your e-mail, name or photo; it keeps only a SHA-256 hash of the Google or Apple identifier. For Apple, the game asks for neither name nor e-mail.

1.9 IP address. Needed to connect to the server. The server does not write IP addresses to its database; they may appear in technical network-error logs, kept for up to 30 days.

1.10 On your device. The game stores the account, settings and queues of events and feedback not yet sent. On Android, the system's automatic backup may copy this data into your Google account backup.

We do not collect: real name, phone number, precise location (GPS), contacts, photos, audio or payment data. The game has no chat, shows no ads and does not track you across other apps or websites.

2. Why we use it

• To run the game: keep your account and progress, set up online matches, rooms, leaderboards and prizes.
• To recover your account on another device (optional sign-in).
• To improve the game: understand how it is played and where players quit, fix bugs and balance difficulty.
• To answer your feedback and support requests.
• Security: stop others from using your account, prevent cheating and abuse.

Legal bases (LGPD): performance of the service you requested by installing and playing (art. 7, V) and legitimate interest in keeping the game safe and improving it (art. 7, IX). You may object to legitimate-interest processing through the contact above.

3. Who we share it with

We do not sell data or use it for advertising. These providers process data on our behalf:

Transfers outside Brazil follow LGPD art. 33. Other players see your nickname#tag, level, character and results in matches, rooms and leaderboards. The "Discord" button opens an external service with its own policy.

4. How long we keep it

• Account, progress and history: while the account exists. Deleting the account deletes them (section 5).
• Online match replays: 90 days.
• Database backups: 7 days (one per day; older ones are deleted).
• Usage data, sessions and feedback on our server: up to 24 months, then deleted or anonymized.
• GameAnalytics and Sentry: Sentry up to 90 days; GameAnalytics per its retention policy.
• Server technical logs (may contain IP addresses): up to 30 days.

5. Your rights and account deletion

You may request confirmation of and access to your data, correction, anonymization, deletion, portability, information about sharing, and object to processing (LGPD art. 18). We reply within 15 days. You may also complain to Brazil's data protection authority (ANPD).

Delete your account in the game: Settings (gear icon) → Language tab → Delete account → Continue → Delete forever. An internet connection is required. We delete from the server the account and everything that is yours (progress, items, currency, nickname, keys, linked Google/Apple sign-ins, messages, usage data and feedback). Aggregate match history (for example, who won a match, in-game currency spent) is kept without any link to you: your identifier is replaced by a random code and your nickname on scoreboards becomes "Deleted player". Backups roll off within 7 days. Data already sent to GameAnalytics and Sentry carries neither your nickname nor your account identifier and expires per each service's retention.

Without the game installed: see /delete-account/.

Sign out (Settings → Language → Sign out) only disconnects the account on this device; it does not delete server data.

6. Security

The account key is stored on the server only as a salted hash; Google/Apple sign-ins only as a hash. Server access is restricted. GameAnalytics and Sentry receive data over encrypted connections (HTTPS). Today, traffic between the game and our match server is not yet encrypted; full encryption of this connection arrives in the next game update, and this policy will be updated. No system is 100% secure; we will report relevant incidents as required by law.

7. Children

The game is not directed to children under 13 and we do not knowingly collect data from children under 13. If you are a parent or guardian and believe a child used the game, contact us or use "Delete account" in the game.

8. Changes

We may update this policy. The date at the top shows the current version; important changes will be announced in the game.