Privacy Policy

Halloway: The Call · last updated July 2026

The game runs on your device. Without an account, your progress lives in your browser or phone. There are no ads, no third-party advertising trackers, and no sale of personal data.

What we collect, and why

With an account: your email address, a hashed password, optional ledger name, purchases and refund history, cheat-key balance, key-reveal records, and hunt progress - so they can follow you across devices. Emails are used for sign-in security (verification, password resets, email changes and login notices) and purchase confirmations.

Cheat-key reveals: when a key tells you a word, the account records the hunt and station so the same reveal can be shown again without charging another key. The answer table itself stays server-side.

Purchases: web payments are processed by Stripe; we receive confirmation of the purchase, never your card. App Store and Google Play purchases are verified with Apple and Google using their receipts. We keep the verified transaction id, product, refund status, and any support reason needed to resolve a manual refund or revocation.

Optional updates: a mailing-list address stays pending until its owner follows a short-lived confirmation link. Confirmed addresses receive only launch updates and important product news, and every such message includes an unsubscribe path.

Anonymous funnel counts: the service has a signed-out metrics path for coarse, allowlisted events (for example: app opened, hunt opened, paywall shown, purchase completed). These counts carry no account id, name, email address, or free-text notes; the client-side sender honors Do Not Track and sends only the step name.

What we keep, and for how long

Account data is kept while the account exists. Deleting your account from the ledger removes the account and its server-side purchases, synced progress, metrics, key balances, key purchase records, and durable key reveals. A store transaction id remains as an anonymized fraud/refund tombstone so a redeemed or refunded receipt cannot be reused; it no longer identifies the deleted account. Deletion does not erase progress that only lives in a browser or on a phone; clear that device's browser/app data to remove it there. Server logs rotate on a short schedule.

Your choices

Play without an account and nothing personal is collected. With one, you can download your account data, change your email, reset your password, or delete the account entirely from the ledger. For anything else, email halloway@noevilstar.studio.