Privacy Policy

What the game stores

Your progress — currencies, stage and ring, permanent upgrades, relics, equipment, the keeper and companion you chose, what you bought in the shop, and your sound settings — is written to a single save file on the device you play on.

• On Android and iOS, that file lives in the app's own private storage and is removed when you uninstall the app. It also keeps the store's reference for your most recent purchases, so that a purchase is never delivered twice.

Nobody else can read it, including us. There is no cloud save, so progress does not follow you between devices. On Android and iOS a second file beside it holds play statistics waiting to be sent, and the code they go with.

Play statistics (Android and iOS)

So that we can see how much the game is played, whether players come back and where they get stuck, the phone versions send us a short record of play:

• when the game is opened and put away, how long it was played, and whether it last closed unexpectedly;
• each run: its stage or side mode, the keeper, companion and gear you took and how strong they were, how it ended, how long it took, the waves and creatures it got through, the skills learned, what felled the keeper, and how smoothly the game ran;
• how far your camp has come: the furthest stage cleared, the ring, your upgrade and relic levels, the keepers and companions you have, how many runs you have started, and your gold and gems;
• what you do in the camp: which screens you open, the upgrades you buy, the rewards you claim, the achievements you earn, and the keeper and companion you choose;
• what you spend: gem packs bought, purchases started, cancelled or failed, gems spent in the shop and on a Rekindle, and which rewarded ads you watched;
• that you wrote to Help & feedback, and its topic, but never what you wrote;
• your phone: its model (for example "iPhone15,3"), system version, language, time zone and screen size, and how long the game took to start;
• the platform (for example "iOS") and the game's version.

These go with a random code the game makes for this purpose only. It is not your advertising ID or the code used for Help & feedback, and it is not linked to your name, email, store account or any other app. We do not keep your IP address: our service notes only the country it reads from the connection, as two letters.

The statistics go to our own service, which runs on Cloudflare. They are never shared, sold or used for advertising, and they are deleted after 400 days, about 13 months.

Your choice. Settings → Statistics turns them off. Turning them off deletes what we hold from your phone and stops anything more being sent; turning them on again starts afresh under a new code. Where the law asks for your consent first (the European Economic Area, the United Kingdom and Switzerland), statistics are off until you turn them on.

Ads (Android and iOS)

The phone versions offer rewarded ads: you tap to watch one, and the game gives you a reward when it finishes — a second chance after a fall, double gold for an hour, or a relic draw. Nothing in the game requires watching an ad, and none plays unless you ask for it: there are no banners and no ads between levels.

The ads are served by Google AdMob. When the game asks for an ad, Google's software on your device collects and sends to Google:

• Device identifiers — the advertising ID on Android; on iOS, Apple's advertising identifier only if you allow tracking when asked, and otherwise an identifier limited to this app.
• Your IP address, from which an approximate location can be inferred.
• How you interact with ads, such as which were shown and whether they were watched or tapped.
• Diagnostic information about the ad software, such as crashes and performance.

Google uses this to deliver and measure ads, to prevent fraud, and, if you consent, to show ads that are more relevant to you. How Google handles it is set out in how Google uses information from apps that use its services and Google's privacy policy. Ads are limited to content rated for general audiences.

Your choices. In the European Economic Area, the United Kingdom and Switzerland, the game asks for your consent before personalised ads are shown, and you can change your answer at any time under Settings → Privacy choices. On iOS, the game asks whether it may track you; you can change that under Settings → Privacy & Security → Tracking on your device. On Android, you can reset or delete your advertising ID under your device's Google or privacy settings. Declining only changes which ads you see; every reward works the same.

Purchases (Android and iOS)

The phone versions sell optional packs of gems. Everything gems buy can also be earned by playing. Payment is handled entirely by Apple's App Store or Google Play, under Apple's or Google's privacy policy. The game receives only the store's confirmation that a pack was bought, which it uses to deliver the gems. We never see your name, payment details or account.

On Android, before the gems are delivered, the game sends that confirmation's purchase reference, the pack, and a random code it keeps with your save to our server, which asks Google Play whether the pack was really bought. We keep the store's order number, the pack, the random code and when it was checked, so that one purchase delivers its gems once. Nothing in it says who you are, and it is used for nothing else.

Support requests

Settings → Help & feedback lets you ask for help, report a bug or share an idea from inside the game, and read our replies there. Nothing is sent until you tap Send. Then we receive what you wrote, an email address if you choose to give one, and details about your game, so we can see what you see: your platform (for example "iOS"), the game's version, your phone's model and operating system version, and your progress (the furthest stage you have cleared, your keeper, keepers and partners, your gems and gold, and how many runs you have played). While play statistics are on, your statistics ID goes too, so we can look at the sessions behind a report; with them off, it is not sent.

There is no account. To keep your conversations together, the game makes a random code the first time you write to us and keeps it with your save. It goes with your messages so that only you can read your conversations. We may also send a gift to that code from one of your conversations (gems, gold, relic draws, a partner or a keeper); it waits in that conversation until you claim it, and when you do, the game tells us it was claimed. The code is used for nothing else. After you have written to us, the game asks for our replies and gifts when it starts and when you open Help & feedback; until then it asks nothing.

We use what you send only to answer you. Requests are kept in our support system, which runs on Cloudflare, and are never shared, sold or used for anything else. To have a request and our replies removed, ask in Help & feedback or at the address under Contact.

Fixes between updates (Android and iOS)

So that a bug can be fixed without waiting for a store update, the phone versions ask our service, each time they start, whether a fix has been published for the version they are. The request names the platform (for example "iOS"), the version's build number and whether the phone is set to receive test fixes. A fix is downloaded in the background and used from the next start. The game checks each fix against our signature before using it, and goes back to the version as installed if a fix stops it from starting.

While play statistics are on, the game also tells our service whether a fix was used, kept, undone or refused. These are counted per day and carry no code, ID or anything else that tells one phone from another. With statistics off, nothing about fixes is sent beyond the request for them. Our service, which runs on Cloudflare, keeps the counts and the fixes, and not your IP address.

Your account: Invite friends and the raids' leaderboards (Android and iOS)

Shop → Gems → Invite friends gives you a code to share. When a friend enters it and then clears stage 4, you each get gems. Each raid's leaderboard (Dens → Leaderboard) shows the fastest wins over its boss, the Hollow Heart or the Wintershell. Nothing is sent until you open one of them or win a raid.

To know it is you without a sign-up, the game signs in with Game Center on iOS or Google Play Games on Android and sends us the proof that service gives. We check it with Apple's public key or with Google, and keep a one-way hash of your Game Center or Play Games player ID, which is your account, and the nickname you chose there, which the leaderboards show. We never receive your email or friends list. With the account we keep:

• your nickname, as it was when you last signed in;
• your code;
• which code you entered, if any;
• the furthest stage you have cleared;
• the gems owed to you, and when they reached your game;
• your fastest win over each raid, the Hollow Heart and the Wintershell, this week and of all time, how long each of its phases took, and when you won it.

The leaderboards are public to everyone who plays: they show each player's nickname, place and time.

The game keeps a random key with your save to reach the account. Signing in to Game Center or Play Games is covered by Apple's or Google's privacy policy.

You see only how many friends entered your code and cleared stage 4, never who they are, and they see nothing about you.

Invite friends → Delete account deletes the account: your code stops working, and your nickname and times leave the leaderboards. We keep only the one-way hash and a note of whether you had already entered a friend's code or cleared stage 4, so the same player cannot collect a friend's welcome twice. Gems already in your game stay there. The account server runs on Cloudflare.

What we do not do

• We do not ask for your name, contact details or a password. Apart from what you choose to send in a support request, nothing we hold says who you are: the account knows you by a one-way hash and the nickname you chose in Game Center or Play Games.
• Apart from the play statistics above, which you can turn off, we run no analytics, crash reporting or telemetry of our own.
• We do not sell or share data. The only data we hold is support requests (with any gifts we sent in them), kept to answer them, play statistics, kept for 400 days, and accounts, kept until you delete them.
• No permissions are requested beyond what the operating system grants any app by default, and on iOS the tracking question described above.

Children

Hollowkeep is not directed at children under 13, and we do not knowingly collect personal information from anyone. Google is told that ads in the game must be suitable for general audiences.

Hosting

This page is served as a static file by Cloudflare Pages. As with any website, Cloudflare processes the network request needed to deliver the page, which may include your IP address, under its own privacy policy. That is a function of hosting, not of the game, and no such data is collected, stored, or seen by us.

Changes

If this policy changes, the date at the top changes with it, and anything new the game collects is described here before it ships. The previous version of this policy, from before ads and purchases, said the game collected nothing at all. The version of 2 October 2026 had no Help & feedback, and the version of 5 October 2026 had no play statistics, the version of 7 October 2026 had no Invite friends, and the version of 8 October 2026 had no leaderboard and kept no nicknames. The version of 10 October 2026 did not ask for fixes, and kept wins over one raid, the Hollow Heart. A browser version, which collected nothing unless you sent a message, was withdrawn on 10 October 2026.

Contact

Questions about this policy, or requests about your data, can go to mattpanton1@gmail.com, which is also where to ask for an account to be deleted if you no longer have the game. Apart from support requests, play statistics and accounts we hold no data about you, so requests about data collected for ads are answered by Google, through the links above. Turning statistics off in Settings deletes yours straight away.