Hatchfire is a browser game where you hatch, raise and breed dragons. This page explains what we store about you, why, who helps us run the game, and how to delete everything. The short version: we keep only what the game needs, we don't show ads, we don't sell data, and we don't use tracking or analytics cookies.
Who we are
Hatchfire is a hobby project run by the operator of macsebi.com, who is responsible for your data (the “controller”). Questions or requests: privacy@macsebi.com.
What we store
- A random account ID. When you start playing we create an anonymous guest account. It isn't linked to your name, email or device identity.
- Your game data: your keeper name, coins, dragons and eggs, conquests, sieges, friends, dragon gifts, invite code and similar progress.
- Multiplayer data, only if you turn multiplayer on: whether you're online, which part of the game you're in, your dragon's position on the Realm map and the dragon you fly with.
- Social login details, only if you connect Google, Apple or Facebook: the account ID that provider gives us, your email address, and the name and profile picture the provider shares. We use them only to sign you in and to show you which account your keeper is saved with. With Apple you can choose to hide your real email address.
- Technical logs: our hosting providers briefly log requests (such as IP address, browser type and time) to keep the service running and secure.
What other players can see
Friends you add (and who add you) can see your keeper name. If multiplayer is on, friends can also see whether you're online, your flying dragon on the Realm map and your part in shared sieges and boss fights. Your email address and social accounts are never shown to other players.
Why we use it
To run the game you asked to play: saving your progress, signing you in, and multiplayer features you turn on (performance of a contract, GDPR Art. 6(1)(b)). Technical logs are kept to protect the service against abuse (legitimate interest, Art. 6(1)(f)). We don't use your data for advertising or profiling.
Cookies and browser storage
We store your login session in your browser's local storage so you stay signed in. That's strictly necessary for the game to work. There are no advertising, tracking or analytics cookies.
Who helps us run Hatchfire
- Supabase: database and sign-in. Game data is stored in the EU (Frankfurt, Germany).
- Vercel: hosts the website and serves it from locations worldwide, which may include the USA.
- Google, Apple and Facebook (Meta): only if you choose to sign in with them. Their own privacy policies apply to what happens on their sign-in pages.
Where data leaves the EU, these providers rely on the EU–US Data Privacy Framework or the EU's Standard Contractual Clauses. We never sell your data.
Deleting your data
You can delete your keeper and everything linked to it at any time, straight from the game:
- Keeper saved with Google, Apple or Facebook: go to Profile → Account → Delete keeper and confirm. Your account, keeper, dragons, progress, friendships and connected sign-in details are deleted immediately and permanently.
- Guest keeper: go to Profile → Account → Start over as a new keeper. The old keeper and all its data are deleted.
- Can't sign in any more? Email privacy@macsebi.com from the address connected to your keeper (or tell us your keeper name) and we'll delete it within 30 days.
Removing Hatchfire from your Google, Apple or Facebook settings stops that sign-in but doesn't delete your keeper. Use one of the options above for that. Server logs held by our hosting providers expire on their own within a few weeks.
How long we keep it
Your game data is kept for as long as your keeper exists and is deleted as soon as you delete it (see above).
Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict or object to its use, and take it with you (data portability). Email privacy@macsebi.com. If you think we've handled your data wrongly, you can also complain to your local data protection authority.
Children
Hatchfire can be played without giving us any personal information. If you connect a social account, you must meet that provider's minimum age, or have a parent or guardian's permission where your local law requires it.
Changes
If we change this policy we'll update this page and the date at the top. For significant changes we'll also let you know in the game.