Privacy Policy

1. Who we are

GameHub (operating at games.hamorbit.com) is a personal browser-games project run by an anonymous indie developer. Site contact: hello@hamorbit.com.

This privacy policy covers this games site only.

2. What we collect

We collect the minimum information needed to run the site:

• Hashed visitor identifier — a SHA-256 hash of (IP + user-agent), used only to deduplicate likes/plays and to apply per-IP rate limits. We cannot reverse the hash to retrieve your IP.
• Country code — derived from your IP at the edge (Cloudflare/IONOS) to show regional leaderboards. Stored as a 2-letter ISO code, never the full IP.
• Leaderboard nickname — only if you choose to submit a score (you pick the nickname once and we remember it in localStorage).
• Email address — only if you create an account (email-code login or password) or subscribe to the newsletter on hamorbit.com. Email is never sold or shared.
• Game scores — when you finish a game, your final score + nickname is stored to build the leaderboard. We apply server-side sanity caps to prevent cheating.
• Aggregate analytics — page views, downloads, country, referrer (no personal identifiers).

3. Cookies & tracking

We use the following categories of cookies:

• Strictly necessary — session cookies for admin login. Not used for visitors.
• Functional — localStorage entries: your nickname, achievements, theme preference, cookie consent choice. Stored in your browser only.
• Advertising — Google AdSense sets cookies to serve relevant ads and measure performance. You can opt out of personalization via our cookie banner (Reject button) or globally at Google Ad Settings.

If you reject in our banner, ads still appear but are non-personalized — they're not based on your browsing history.

4. Google AdSense disclosure

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this site and other sites on the Internet. Google's use of advertising cookies enables it and its partners to serve ads based on user visits to this site.

Users may opt out of personalized advertising by visiting Google Ads Settings, or opt out of a third-party vendor's use of cookies for personalized advertising by visiting aboutads.info.

Google's privacy policy: policies.google.com/privacy.
Information on how Google's partners use data: policies.google.com/technologies/partner-sites.

5. Multiplayer rooms

When you create or join a multiplayer game (Tron, Bomberman, Pong, etc.), the following data is exchanged:

• 4-letter room code — random, expires after 2 hours of inactivity, then deleted from our DB.
• Game state — relayed between players via our backend OR directly peer-to-peer (WebRTC). For P2P, your IP is briefly visible to the opponent (standard for any WebRTC chat/game). We store no game-state content beyond what's needed for active routing.
• No chat messages, voice, or persistent player history is stored from these rooms.

6. Children under 13/16

The site is not directed at children under 13 (under 16 for EU). We do not knowingly collect personal data from minors. If you believe a child has provided data, email privacy@hamorbit.com and we'll delete it immediately.

7. Your GDPR rights (EU/UK/EEA users)

You have the right to:

• Access — request a copy of your data. We expose this via Account Settings → Export my data.
• Rectification — correct your nickname, email or other data.
• Erasure — delete your account and all associated scores. Self-service from Account Settings → Delete account, with email code verification.
• Portability — download your data as JSON.
• Object/withdraw consent — change your cookie consent at any time by clearing localStorage for this site, or contact us.
• Complaint — you may file a complaint with your local data-protection authority in your country of residence.

8. California / CCPA users

California residents have the right to request what personal information we hold, request deletion, and opt out of sale of personal information. We do not sell personal information. To exercise your rights, email privacy@hamorbit.com.

9. Data retention

• Scores — retained indefinitely on the leaderboard unless you delete your account.
• Anonymous play/like events — aggregated; raw rows pruned after 90 days.
• Auth codes (email login) — deleted after expiry (10 min) or use.
• MP rooms — auto-deleted after 2 hours of inactivity.
• Account data — kept while your account is active; deleted within 30 days of account closure.

10. Security

• HTTPS for all connections (HSTS enforced).
• Passwords hashed with bcrypt; we never see plaintext.
• Visitor IDs are SHA-256 hashed.
• Server-side rate limits on every endpoint.
• Database not exposed publicly; admin panel behind login + Google Sign-In whitelist.

11. Changes

We may update this policy. Material changes will be announced via a banner on the home page. The "Last updated" date at the top reflects the current version.

12. Contact

Questions, complaints or data requests: privacy@hamorbit.com · hello@hamorbit.com · contact form.