Privacy policy

Last updated: October 31, 2026

Hedgekeep is operated by Jomho ("we," "us," "our"). This page says what we collect when you play, why, how long we keep it, who else handles it, and what you can do about it. It goes with the Terms of service. Questions go to [email protected].

1. What we collect, and why

Your account. Your email address, a salted hash of your password (never the password itself), and the Keeper name you choose. Needed to run your account and to let you sign in and recover it. A guest Keeper has none of this until it is saved.
Your game. Everything about your Keeper, creatures, items, gold, dice, progress, friends, stall and guestbook lines, keepsakes and the books you've read. Needed for the game to work. Some of it is public by design: your Keeper name, creatures, keepsakes, stall and guestbook lines can be seen by other players.
Signing in and out. Each time you log in, log out or your session is replaced, we record your IP address, a rough location worked out from it on our own server (country, region, city), and your browser, operating system and device type. Used for account security and abuse prevention, and to understand how the game is played. This is our legitimate interest in keeping accounts safe.
Your time zone and hemisphere, as your browser reports them, so your village keeps your own seasons and daylight.
Your location, only if you turn it on in Settings. Rounded to about a kilometre, used for your local weather, never shown to other Keepers, and deleted the moment you turn it off.
Onboarding steps. Which step of onboarding you reached (the notice, the starter picker, the gold roll, and so on), tied to an anonymous id in a cookie until you have a Keeper. Only the step and the time; nothing about what you did on the page. Used to see where new players give up.
Reports. If you report a bug, we keep what you wrote, the page you were on, your browser and screen size, and your Keeper name. If you report a Keeper or something they wrote, we keep your report, your Keeper name, and a copy of what was reported as it stood. The reported Keeper is not told who reported them.
Blocks. Which Keepers you have blocked, so the block can be kept.
Analytics. Google Analytics tells us where visitors arrive from (a search, a link, a campaign) and which pages are read. We run it without cookies and with advertising features off, so it cannot recognise you between visits. Contentsquare may record how a page is used — clicks, scrolling and on-screen activity — to help us find bugs. Neither is used to build an advertising profile, and we don't sell your data to anyone.
Errors and performance. When something goes wrong on our server we log the error with a random code, the page, and your Keeper id so we can fix it. New Relic monitors the server's health.

2. Cookies and device storage

We use cookies to keep you logged in, to remember that you've started onboarding and accepted the flashing-lights notice, to carry your time zone and hemisphere, and to give you an anonymous id for the onboarding steps above. Your browser's own storage holds device preferences: sound, music, the screen effect and captions. None of these are used for advertising, and we don't let third parties set advertising cookies.

3. How long we keep it

Your account and game: for as long as your account exists.
A guest Keeper that is never saved: until its session lapses, after which it is deleted.
Sign-in records: for the life of the account.
Notifications and onboarding steps: 90 days.
Password-reset and email-confirmation links: until used, or a short time after they are sent.
Bug reports and reports about Keepers: until they are dealt with and no longer needed; a report about a Keeper is kept while any action taken on it stands.
Your location: until you turn it off.

4. Who else handles it

We don't sell or rent your data. Companies that run parts of the service handle it on our behalf: DigitalOcean and Cloudflare (hosting and network), Neon (database and file storage), Resend (sending email), New Relic (server monitoring), Google (analytics, cookieless) and Contentsquare (page-use recording). Each only gets what its job needs. Some of them are in the United States; where you are elsewhere, the usual contractual protections apply to the transfer. We may also disclose data where the law requires it, or to protect players and the service.

5. What you can do

See and change your name, email and settings any time in your keep. Your creatures, items and progress are there too.
Delete your account from Settings. It removes your Keeper, creatures, items, sessions and the rest at once. Your guestbook lines and reports about other Keepers are detached from your name rather than deleted, so the record still makes sense.
Ask us for a copy of your data, to correct it, to delete it, or to object to a use of it, at [email protected]. We answer within a month. If you're in the EU, UK or a place with a data-protection authority, you can also complain to them.
Turn off your location in Settings, and block any Keeper from their page.

6. Children

Hedgekeep is for players 13 and older. We don't knowingly collect data from anyone younger; if we learn that we have, we delete the account. If you're under the age of majority where you live, a parent or guardian should have agreed to the Terms for you. Parents who believe a child under 13 has an account can write to us and we'll remove it.

7. Security

Passwords are hashed, sessions are random tokens that expire, connections are encrypted, and access to the database is limited to the people who run the game. No service is perfectly secure; if a breach affects your data we'll tell you and, where the law requires it, the authorities.

8. Changes

When this policy changes we'll post the new version here with a new date, and for a change that matters we'll say so in the game's announcements.

9. Contact

Jomho, by email at [email protected]. Reports about content or other players can also be made from any Keeper's page, stall or guestbook line, or at the report page.