Privacy Policy

Hideout is operated by an individual operator based in the Republic of Belarus, who is the data controller for the personal data described here. Contact: legal@hideout.live.

• Account: email, display name, handle, and your date of birth (for age verification only).
• Linked platforms: when you link Steam, your Steam ID and the public library, playtime and achievement data it exposes. We only read — never your credentials, never your account.
• Content: posts, messages, community contributions and anything else you create here.
• Usage and logs: IP address and user agent, kept for security and rate-limiting.

• Contract: running the service you signed up for — your profile, sync, feed, communities.
• Legitimate interest: security, abuse prevention and keeping the platform working.
• Consent: marketing email and the aggregate-insights program below. Both are off by default and can be withdrawn any time in Settings.

If — and only if — you opt in, your play statistics can be included in aggregated, cohort-level industry insights (for example, "how many players in a region play roguelikes"). Aggregate only: never your individual row, never your identity, never sold as individual data. You can opt out at any time in Settings and your data leaves future aggregations.

• Account data: until you delete your account.
• Security logs: 90 days.
• Backups: purged within 30 days after account deletion.

Processors that run the service on our instructions: Resend (transactional email), Cloudflare (hosting and storage) and Vercel (web hosting). We do not sell personal data. No ad networks, no data brokers.

Hideout is operated from the Republic of Belarus and relies on processors located outside the EEA (including the United States — see section 6). Where data leaves the EEA, those transfers rely on EU Standard Contractual Clauses or an equivalent lawful mechanism.

You can access your data (Settings → Export my data), correct it (edit your profile), erase it (Settings → Delete account), take it with you (the export is machine-readable JSON), and object to processing based on legitimate interest. You can also complain to your data protection authority. Everything self-serve lives in Settings; for the rest, email us.

Hideout is not for children under 13, and not for under-16s in the EEA/UK without the consent local law requires. Accounts below the age requirement are removed when discovered.

One essential session cookie to keep you signed in, plus two preference cookies (region, language). No advertising trackers, no third-party analytics cookies. Because the list is essential-only, our cookie notice is a one-time acknowledgement, not a consent wall — there is nothing to opt out of.

Questions, rights requests, complaints: legal@hideout.live. If this policy changes materially we'll notify you in-app or by email before the change takes effect.