Privacy policy

DropDev AB is the controller of the personal data in Lumihatch. Questions and requests go to hello@lumihatch.com.

Company

DropDev AB

Country

Sweden

E-mail

hello@lumihatch.com

• Your sign-in. Your e-mail address and, if you sign in with Google, the name and picture on your Google account. We use them to let you in, to help you if you lose access, and to warn you if a username looks like your real name. The picture and name are never shown to other keepers. Why we may: to carry out our agreement with you.
• Month and year of birth. Asked once, to check that you are 13 or older and whether a purchase needs a parent's yes. Never the day, never shown to anyone. Why we may: our legal duties toward children, and our legitimate interest in keeping the game suitable for its players.
• What you do in the game. Your username, keeper, creatures, eggs, research, Glim, items, friends, groups, lines, posts, info sign, photos and clips, and when you last played. This is the game itself. Why we may: to carry out our agreement with you.
• Purchases. What you bought, when, for how much, and the reference Stripe gives us for you. Not your card number. Why we may: our agreement with you, and bookkeeping law.
• Reports and moderation. Reports you send or that are sent about you, and what the team decided. Why we may: our legitimate interest in a safe game.
• Technical logs. The servers note the IP address, time and page of each request for a short time, to keep the game running and to stop abuse. Why we may: our legitimate interest in a working, secure service.
• What you write to us. E-mails you send, so we can answer.

We don't use your data for advertising or profiling, and no decisions about you are made by machines alone.

Your username, your keeper, your creatures and their family trees, your profile, your info sign and what you post are visible to others in the game, and some of it to anyone on the web who opens your profile. Your e-mail address, your age and your purchases are never shown.

We share data only with the companies that run parts of the game for us, under agreements that bind them to our instructions:

• Google (Firebase and Google Cloud): sign-in, the database, stored pictures and the servers.
• Stripe (and its reseller Link, where it is the seller): payments, receipts, tax and fraud checks. Stripe is responsible on its own for the payment details you give it.

These companies may handle data outside the EU/EEA, mainly in the United States. When they do, it is protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

We hand data to authorities only when the law requires it.

• Your account and everything in it: until you delete the account.
• When you delete your account: your sign-in, e-mail address, username, keeper, posts, friends, notifications and Glim history are removed at once, and your creatures are released. Creatures you bred that live with other keepers stay with them, without your name.
• Records of purchases: seven years after the year of the purchase, as Swedish bookkeeping law requires.
• Technical logs: up to 30 days.
• An account that turns out to belong to someone under 13: removed at once. Only a cookie in that browser remembers, for 30 days, that the game is not open to them yet.

You have the right to know what we hold about you and get a copy, to have it corrected, to have it erased, to have its use restricted, to object to uses that rest on our legitimate interest, and to take your data with you. Write to hello@lumihatch.com and we answer within a month. The quickest way to erase everything is Delete account under Your account in the game.

If you think we handle your data wrongly, tell us. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or to the authority where you live.

Lumihatch is not for children under 13, and we don't knowingly keep data about them. If you are a parent or guardian and believe your child under 13 has an account, write to hello@lumihatch.com and we remove it.

Parents and guardians of keepers under 18 are welcome to ask us what we hold about their child, and to have the account deleted.

We only use what the game can't work without, so there is no cookie banner to click away:

• a sign-in cookie, so you stay signed in (up to 30 days);
• a cookie that remembers, for 30 days, that someone in this browser was too young to play;
• your sound setting, kept in the browser's own storage.

Signing in with Google and paying through Stripe happen on their pages, which set cookies of their own for security.

If we change how we handle your data in a way that matters, we tell you in the game first. The date at the top shows when this policy last changed. See also the terms.