HyperRaiders Privacy Policy

The controller responsible for data processing in connection with the Game is:

Hyper Hollow Games
Germany
Email: [email protected]
Website: www.hyperhollowgames.net

A data protection officer is not required as the company regularly employs fewer than 20 persons engaged in automated data processing.

HyperRaiders does not directly collect personal information such as your name or email address. The Game:

• Does not require account creation or sign-up
• Does not ask for your name, email address, or other personal details
• Does not use third-party analytics or tracking SDKs and does not build behavioural profiles
• Does not contain advertisements of any kind
• Does not use Google Play Games Services, leaderboards, or any social sign-in

A pseudonymous player ID and inventory data are synchronised with our backend as described in the In-App Purchases and Gold Balance sections below. The Game also sends anonymous gameplay events and limited diagnostic error reports to our own servers, as described in the sections below.

The first act of HyperRaiders is free. After it, one one-time purchase through the Google Play Store unlocks every act. One-time purchases from earlier versions of the Game ("The Rest of the Story", "Book II") stay honoured. The Game sells no in-game currency, subscriptions, or consumables. An unlock bought with HyperGold in an earlier version of the Game is still honoured.

• Purchases are processed entirely by Google Play Billing; we do not collect, store, or have access to your payment information
• The purchase screen sits behind a simple arithmetic gate intended for a parent or guardian; the Game does not record whether the gate was passed beyond an anonymous event (see Anonymous Usage Analytics)
• Ownership is kept by Google Play: when it confirms a purchase, or restores one after a reinstall or on a new device, the Game unlocks the acts on your device; the purchase token itself stays between the Game and Google Play and is not sent to our backend

Processing is necessary for the performance of the purchase contract. Refunds are handled by Google Play under Google's own terms.

To preserve your gold balance across sessions and devices and to deliver the in-game items you have unlocked with gold, HyperRaiders synchronises the following data with our backend, hosted by Hetzner Online GmbH in Germany:

• A pseudonymous player ID, generated as a random UUID on your device
• Your current gold balance
• Aggregate lifetime counters (gold earned, gold bought, gold spent)
• A transaction log entry for each gold gain or spend (amount, type, source, the store item concerned where applicable, game, and timestamp)
• A random session identifier and session start time attached to each transaction log entry, generated anew for every play session and used solely to group the gains and spends of one session; it is not derived from your device and is not linked across sessions
• Your in-game inventory (purchased store items and their quantities)

We do not link this data to your name, email address, or payment details. Processing is necessary for the performance of the contract that begins when you spend or purchase gold in the Game.

HyperRaiders reports gameplay events to our self-hosted analytics service, hosted by Hetzner Online GmbH in Germany, so that we can see which parts of the Game are played and where players stop. An event contains the game's ID, an event name (for example "duel_started", "duel_ended", "item_equipped", "act_chosen" or "offer_shown"), the build version, whether the Game runs as an app or in a browser, and gameplay values belonging to that event (such as the monster fought, the outcome of a duel, the act reached, or which product and price the purchase screen showed). Our server additionally records your device's browser user agent string and, where provided by the network, a coarse country code.

No player ID, device identifier, advertising ID, or session identifier is attached to these events, we do not link them to your gold data, and we do not build user profiles from them; they are used only as aggregate statistics. The requests may expose your IP address to our hosting provider Hetzner; the IP address is not stored with the events. Based on our legitimate interest in understanding how the Game is played and in improving it.

If a technical error occurs, for example a failed gold synchronisation or store request, HyperRaiders sends a diagnostic report to our self-hosted logging service, hosted by Hetzner Online GmbH in Germany. A report contains:

• The game identifier and a severity level
• A short technical error message
• Technical context about the failure; where the error concerns gold synchronisation or account linking, this context may include your pseudonymous player ID

Reports never include your name, email address, advertising ID, or location, and we do not use them to track your behaviour or build profiles. The request may expose your IP address to our hosting provider Hetzner; the IP address is not stored with the report. Processing is based on our legitimate interest in detecting and fixing defects to provide a stable Game.

After your first finished duel the Game may ask for permission to show notifications. If you allow it, HyperRaiders schedules a small number of local reminders on your device (a gift waiting at the armoury the next morning, and a note that your knight is still standing on his road after a few days away). These reminders are created and stored entirely on your device by the Android notification system; nothing is sent to us or to any third party, and every launch of the Game moves them further out so a returning player never sees them. You can withdraw the permission at any time in Android's app settings.

All your knight's career (level, experience, skill points and perks, equipment, company, act and road position), achievements, cached gold data, the unlock status of the story, scheduled reminders, settings, and preferences are stored locally on your device using the Android SharedPreferences mechanism. This data never leaves your device and is not accessible to us.

Local storage is technically necessary for the Game to function and is therefore exempt from the consent requirement under the German Telecommunications Digital Services Data Protection Act.

The Game is distributed through the Google Play Store. Google may collect certain information as part of their platform services, including:

• Download statistics
• Crash reports (handled by Google Play Console)
• Device compatibility information

We may access aggregated, anonymized statistics provided by Google Play Console to understand game performance and stability, based on our legitimate interest in maintaining and improving the Game. This data is not stored separately by us.

The Game integrates with the following third-party services, which may process data as described above:

• Google Ireland Limited / Google LLC (Ireland/USA) — Google Play Billing for gold pack purchases, Google Play Console for crash reports and statistics
• Hetzner Online GmbH (Germany) — hosting of our backend, including the database that stores gold balances, transaction logs, in-game inventory, cross-game promotional content, diagnostic error reports, and aggregated promotion interaction events

Data may be transferred to the United States. Where applicable, transfers are safeguarded by the EU-US Data Privacy Framework. Google LLC is DPF-certified. Hetzner Online GmbH processes data exclusively within the EU. No third-party analytics, advertising, or user tracking services are used.

Retention periods depend on the data category:

• Gold balance, aggregate counters, transaction log, and inventory (Hetzner) — retained for as long as the player ID remains active. Deleted on request to [email protected]
• Diagnostic error reports (Hetzner) — kept only as long as needed to diagnose and fix the underlying issue, then deleted. Deleted earlier on request to [email protected]
• Promotion interaction events (Hetzner) — stored without player or device identifiers and retained as aggregate statistics
• Google Play purchase records — retained by Google per their retention policy
• Google Play Console crash reports — retained by Google for up to 180 days
• Server logs from our backend (Hetzner) — retained per Hetzner's data processing practices, typically no more than 30 days
• Local device data — retained until you uninstall the Game or clear app data

We implement appropriate technical measures to protect data related to the Game. All network communication between the Game and third-party services uses SSL/TLS encryption (HTTPS). Local game data is stored within Android's application sandbox, which restricts access to other applications.

Under the GDPR, you have the following rights regarding your personal data:

• Access — obtain confirmation of whether your data is processed and receive a copy
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data under the conditions specified by law
• Restriction — restrict the processing of your data in certain cases
• Data portability — receive your data in a structured, commonly used, machine-readable format
• Object — object to processing based on legitimate interests (see Section 15)
• Withdraw consent — withdraw any consent at any time without affecting the lawfulness of prior processing
• Automated decision-making — we do not use automated decision-making or profiling that produces legal effects

You can exercise rights over the gold balance, transaction log, and inventory we hold on our Hetzner-hosted backend by contacting [email protected]. Rights relating to data held by third parties, such as your Google Play purchase history, are exercised through the respective third-party services. We will respond within 30 days.

HyperRaiders is made to be played by children, including children under 13, as well as by adults. It is built so that it does not collect personal information from children within the meaning of the US Children's Online Privacy Protection Act (COPPA) and does not rely on consent under Art. 8 GDPR:

• No account, name, email address, phone number, photo, voice recording, or location is ever requested or collected
• No advertising, no advertising ID, and no third-party advertising, analytics, or sign-in SDKs
• No chat, leaderboards, or any way to share content with or contact other players
• The only persistent identifier is the random player ID described in the Gold Balance & Inventory Sync section; it is used solely to support the internal operation of the Game (keeping gold and unlocked items), never for advertising, profiling, or contacting anyone
• Purchases sit behind a parental gate

A parent or guardian can ask us to delete the data held for a player ID at any time by emailing [email protected].

Where we process data on the basis of legitimate interests, you have the right to object at any time for reasons relating to your particular situation. This applies to anonymous usage analytics (Section 5), diagnostic error reporting (Section 6), reminders on your device (Section 7) and Google Play Store analytics access (Section 9). If you object, we will no longer process your data for those purposes unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. To object, email [email protected].

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. You may contact any EU supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. For Germany, a list of all data protection authorities is available at www.bfdi.bund.de. For the United Kingdom, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.

We may update this Privacy Policy from time to time to reflect changes in our data processing activities or legal requirements. Any changes will be posted in the Game and on our website with an updated "Last updated" date. The current version is always available at www.hyperhollowgames.net/games/hyperraiders/privacy.

If you have any questions about this Privacy Policy or wish to exercise any of your data protection rights, please contact us at:

Hyper Hollow Games
Germany
Email: [email protected]
Website: www.hyperhollowgames.net

We will respond within 30 days.