Privacy Policy

1. Information We Collect

We intentionally keep data collection minimal.

Personal Information You Provide

• Email address — Used for account creation, login, password recovery, and important account-related communication.
• Date of birth — Collected during registration solely to verify that users are at least 13 years old, as required by law. Date of birth is not displayed publicly or shared.

Information Collected Automatically

• IP address and device/browser information — Collected for security, fraud prevention, abuse detection, and system integrity.
• Basic usage logs — Such as login timestamps or account activity events related to security.

Gameplay Data

• In-game progress and configuration data (e.g., hamster stats, enclosure layouts, inventory) — This data is tied to your account for gameplay purposes but is not used for advertising or marketing.

2. How We Collect Information

We collect information in the following ways:

• Directly from you during account registration (email and date of birth)
• Automatically through standard web technologies when you use the Service
• Cookies and local storage, limited to essential functionality

3. Cookies and Local Storage

We use only essential technologies:

• Cookies — A session cookie is used to keep you logged in.
• Local storage — Used to save preferences such as interface settings.

You can manage cookies through your browser settings, though disabling them may affect login functionality.

4. How We Use Your Information

We use collected information only to:

• Create and manage user accounts
• Provide and maintain the Service
• Ensure security and prevent abuse or fraud
• Comply with legal obligations
• Provide customer support

5. Legal Bases for Processing (Where Applicable)

Depending on your location, we process personal data based on one or more of the following legal grounds:

• Consent (e.g., account registration)
• Contractual necessity (providing the Service you request)
• Legitimate interests (security, fraud prevention, system integrity)
• Legal obligations (compliance with applicable laws)

6. Payments and Third-Party Services

If you purchase optional premium features or virtual currency (such as Sunflower Coins), payments are processed by third-party providers (e.g., PayPal).

• We do not store full payment or financial information.
• Payment providers process data according to their own privacy policies.

The Service may link to external websites. We are not responsible for the privacy practices of third-party sites.

7. Sharing of Information

We do not sell or rent personal information.

We may share limited data only in these circumstances:

• With service providers that help operate the Service (e.g., hosting providers), under confidentiality obligations
• When required by law, legal process, or governmental request
• To protect the rights, safety, and integrity of Whisker Hollow and its users

8. Data Retention

We retain personal data only as long as necessary:

• Account information is kept while your account remains active
• Security and audit logs may be retained for up to one (1) year
• Some data may be retained after account deletion where required for:
  • Legal compliance
  • Security
  • Abuse or fraud prevention

9. Children's Privacy (COPPA)

Whisker Hollow is intended for users 13 years of age or older.

• We do not knowingly collect personal information from children under 13.
• Date of birth is used solely for age verification.
• If we learn that personal data from a child under 13 has been collected without appropriate consent, we will delete it as quickly as reasonably possible.

Parents or guardians with concerns may contact us at admin@yourdomain.com.

10. Your Privacy Rights

Depending on your jurisdiction (such as California under the CCPA/CPRA), you may have the right to:

• Request access to your personal information
• Request correction of inaccurate data
• Request deletion of personal data
• Receive information about how data is used

We do not discriminate against users for exercising privacy rights.

To make a request, contact us at admin@yourdomain.com. We respond within legally required timeframes (for example, within 45 days for CCPA requests).

Rights vary by jurisdiction and are honored where required by applicable law.

11. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information, including:

• Encrypted storage where appropriate
• Access controls
• Limited staff access on a need-to-know basis

No system is 100% secure, but we work to protect your information responsibly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

• The "Last Updated" date will reflect changes
• Material changes may be communicated via the Service or email

We encourage you to review this policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at: