Privacy Policy

Who we are

HopLobby is operated by its owner as an independent project. In this policy “we” and “us” mean HopLobby. You can reach us using the contact details at the bottom of this page.

What we collect

• If you sign in with Google: your Google account name and email address, plus a stable Google account identifier. We never see your Google password, and we do not request access to your contacts, files or anything else in your Google account.
• If you join a lobby: the display name you type, which other players in that lobby can see, and the choices you make in the game. Lobbies are kept in server memory and are removed when they end or go idle.
• If you buy premium: you pay on Stripe’s checkout page, so we never see or store your card details. We keep a record of each checkout: its Stripe reference, amount, currency, status and the account it belongs to.
• If you donate: the same checkout record, plus the display name and message you choose to add (both optional). They can be shown publicly, for example on our livestream, and we can hide a message. They are deleted with your account; the payment record stays for accounting.
• If you link Discord: your Discord user ID and username, so our Discord bot can give you your HopLobby roles (HopLobby Player, Premium, Early Access). The bot only learns your HopLobby display name, premium status, pass tier and whether you have early access, never your email. You can unlink at any time from your dashboard.
• Technical data: like any web server, ours handles your IP address and browser details to deliver the site and keep it secure.

Information we receive from Google

Signing in with Google is optional. If you choose it, Google tells us three things: your name, your email address (which Google must have verified), and a unique Google account ID. We use these only to create and recognise your HopLobby account, to show your name in the app, and to save your progress to you. We do not receive your Google password, we do not ask for access to Gmail, Drive, Calendar, contacts or any other Google data, and we do not store your profile photo.

Our use and transfer of information received from Google follows the Google API Services User Data Policy. We do not share Google user data with third parties, do not use it for advertising, and do not allow people to read it except as needed to run and secure the service or to comply with the law.

How we use it

• To sign you in and recognise you when you come back.
• To run lobbies and games, and show your name to the other players in them.
• To keep the service working and secure.

We do not sell your data, show ads, or use analytics or advertising trackers.

Cookies and storage

• Lobby cookie (hl_session): lets the server recognise you inside a lobby. It lasts up to 24 hours.
• Sign-in cookie (hl_user): set only if you sign in with Google. It lasts up to 30 days or until you sign out.
• Browser storage: your game settings are saved in your browser (local storage). XP, coins, pass rewards, premium and your character are saved to your account on our server.

These are all essential to how the site works, so there is no cookie banner. Google loads its own sign-in button on the sign-in dialog, and Google’s privacy policy applies to that part.

Where it is stored and who handles it

Account records (name, email, Google identifier and sign-in sessions) are stored in a database on our server. The site is delivered through Cloudflare, which processes traffic on our behalf. Payments are processed by Stripe (with Link, Stripe’s checkout service, as seller of record); when you buy premium or donate we send Stripe your account ID and email so it can match the payment to you and send your receipt, and Stripe’s privacy policy covers what you enter on its page. We share data with Google only as part of signing you in, with Stripe only for payments, and otherwise only if the law requires it.

How long we keep it

Sign-in sessions expire after 30 days. Your account record (name, email and Google account ID) stays until you ask us to delete it. Lobby data disappears when the lobby ends. Purchase records are kept as long as we need them for accounting, refunds and disputes.

Your choices

You can sign out at any time and clear your browser data to remove saved progress. To have your account record deleted, email us from the address on your account and we will delete it. You can also review or remove HopLobby’s access at any time in your Google account settings.

Children

HopLobby is not aimed at children under 13, and we do not knowingly collect their personal information.

Changes

If we change how we handle data, we will update this page and its date.

Contact

Questions, or want your data deleted? Email melvuapp@gmail.com.