Privacy notice

1. Who controls your information

Hazerefuge Ltd ("Hazerefuge") is the controller of personal information processed through Hazerefuge. Contact our privacy team at hello@hazerefuge.com. This notice applies to the website, accounts, games, daily activities, leaderboards, and support interactions.

2. Information we collect

Information you provide

• Account information: name, public username, email address, password hash, acceptance time for our Terms, and security settings.
• Support information: messages and information you choose to provide when requesting help or exercising a privacy right.

Information created through play

• Gold balance, wagers, game selected, reel results, wins, total spins, daily activity progress, reward claims, and leaderboard totals.
• Account security events such as sign-in attempts, password resets, passkey enrollment, and two-factor settings.

Technical information

• IP address, browser and device type, requested pages, timestamps, session identifiers, and diagnostic or security logs produced when you use the Service.
• We do not request payment details, government identifiers, precise location, contacts, health data, or access to your camera or microphone.

3. Why we use information

Where consent is legally required for a future optional use, we will ask first and let you withdraw consent. Hazerefuge currently sends no marketing email and uses no behavioral advertising.

4. Cookies and local storage

We use strictly necessary cookies for account sessions, security, cross-site request forgery protection, and interface preferences. The public demo stores its temporary Demo Gold only in page memory and resets when the page is closed or refreshed. We do not currently use advertising or third-party analytics cookies.

5. When we share information

We disclose only what is reasonably needed to:

• Infrastructure providers that host the application, database, email delivery, security, or backups under contractual confidentiality and security terms;
• Professional advisers such as legal, audit, or security specialists when necessary;
• Authorities or other parties when we reasonably believe disclosure is required by law, protects rights or safety, investigates abuse, or supports a legal claim; and
• A successor organization involved in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and notice where required.

Your public username, leaderboard rank, lifetime Gold won, and lifetime spin count are visible to visitors. Your name and email are not displayed publicly.

6. No sale or targeted advertising

Hazerefuge does not sell personal information and does not share it for cross-context behavioral advertising. We do not knowingly use or disclose sensitive personal information for purposes that require a right to limit under California law. If these practices change, we will update this notice and provide required choices, including honoring legally recognized opt-out preference signals such as Global Privacy Control.

7. Retention

We keep account and gameplay records while your account is active. After a verified deletion request, we remove or de-identify active account data within 30 days unless a longer period is needed for security, fraud prevention, dispute resolution, or legal compliance. Encrypted backups are overwritten on a rolling schedule, ordinarily within 90 days. Security and diagnostic logs are generally retained for up to 12 months. We may retain a minimal record of a request or enforcement action when necessary to demonstrate compliance or prevent repeat abuse.

8. Security

We use safeguards appropriate to the information we process, including hashed passwords, encrypted transport, access controls, rate limiting, account security options, logging, and restricted production access. No system is perfectly secure. Contact hello@hazerefuge.com if you believe your account or personal information is at risk.

9. Your choices and rights

Depending on where you live, you may have rights to know or access personal information, correct it, delete it, receive a portable copy, restrict or object to processing, withdraw consent, or appeal a denied request. California residents may also have rights to equal treatment and to opt out of sale or sharing. Hazerefuge does not discriminate for exercising a privacy right.

You can update profile details or delete your account in Account Settings. For access, portability, objection, restriction, appeal, or any other request, email hello@hazerefuge.com from the address on your account. We may verify your identity before completing a request. An authorized agent may submit a request where applicable, subject to proof of authority and identity verification.

You may complain to your local data protection authority. In the European Economic Area, a list of authorities is available from the European Data Protection Board. In the United Kingdom, you may contact the Information Commissioner’s Office. California residents may contact the California Privacy Protection Agency or Attorney General.

10. International processing

Hazerefuge is operated from the United States. Providers may process information in the United States and other countries where privacy laws differ. When required, we use an approved transfer mechanism and contractual, technical, and organizational safeguards for international transfers.

11. Adults only

The Service is for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact hello@hazerefuge.com so we can investigate and delete the account.

12. Automated decisions

Random game outcomes and automated abuse controls operate as part of the Service. They do not make decisions that produce legal or similarly significant effects. Leaderboard placement is an automatic calculation based on lifetime Gold won.

13. Changes and contact

We will update this notice when our data practices change and give reasonable notice before a material change takes effect. Questions or requests may be sent to hello@hazerefuge.com.