Privacy Policy

The short version

You can play Hyperoo without an account. We have no ads, we do not sell or share your data, and we do not use tracking cookies. If you create an account, we store only what is needed to save your progress and show the leaderboards.

Playing without an account

Your progress (coins, items, avatar, settings, high scores) is saved only in your own browser, using local storage. Game clips you record are saved in your browser too (IndexedDB). None of this is sent to us. You can delete it at any time in Settings or by clearing your browser data for this site.

If you create an account

We store:

• Your e-mail address and password. We use these only to let you sign in and to send account e-mails, such as a password reset. Your password is stored encrypted (hashed); we cannot read it.
• Your username. It is shown publicly on the leaderboards.
• Your cloud save: a copy of your game progress, so you can play on other devices.
• Your best score per game. It is shown publicly on the leaderboards next to your username.
• Your friends and friend requests, and a short Player ID (for example #4F9A2C) that others can use to add you.

We use this data to provide the account service you ask for (contract). We keep it until you delete your account.

Playing online and friends

If you are signed in, other signed-in players can see that you are online, your username and which game you are playing, so your friends can find and invite you. Friend lists and friend requests are stored with your account. When you play online, game data (like where your character is) is sent directly between the players' devices (peer-to-peer). This means the other players in your room can technically see your IP address, like in most online games. If a direct connection is not possible, the game data goes through our provider Supabase instead. We do not record what happens in a match, and there is no free text chat: only fixed quick messages.

Visitor statistics

To see how many people visit Hyperoo and which games are popular, we count page views. For each page view we store only: the page, the day, the type of device (mobile, tablet or desktop), the website you came from (only its domain, for example google.com) and whether it is your first visit. To know that, your browser remembers one small flag in local storage. We do not store your IP address, we do not use cookies and we cannot tell who you are from these numbers. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, we do not count you at all. Page view records are deleted after about 13 months.

Who processes the data

The website is hosted by Netlify. Accounts, cloud saves, leaderboards and visitor statistics are stored with Supabase on servers in Frankfurt, Germany (EU). These providers process data on our behalf and may keep standard technical logs (such as IP address and time of a request) for security and to keep their service running. Fonts are loaded from Google Fonts, which means your browser connects to Google's servers and Google receives your IP address. See Google's privacy policy.

Children

If you are under 16, please ask a parent or guardian before creating an account. You do not need an account to play.

Your rights

You can see your data on your Account page, change your password there, and delete your account at any time with the "Delete my account" button. This removes your e-mail, username, cloud save, leaderboard scores and friends for good. You can also ask us to see, correct or delete your data, or object to how we use it, by e-mailing carlosmilos10@gmail.com. You have the right to complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).

Changes

If this policy changes, the new version will be posted on this page.