Legal

Privacy Policy

Effective date: July 9, 2026  ·  Last updated: July 9, 2026

This Privacy Policy explains how Hidden Stats Studio LLC (“Hidden Stats Studio,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with the website at hiddenstatsstudio.com (the “Site”). It covers the public Site only; our games and any player accounts are separate services with their own privacy notices. For example, a future subscription-based game may collect account and payment information (with payments handled by a third-party payment processor) under that game’s own terms and privacy notice; this Policy does not cover those game services.

1. Who we are

Hidden Stats Studio is an independent game development studio and the “controller” (GDPR) / “business” (CCPA) responsible for personal information processed through the Site. You can reach us at contact@hiddenstatsstudio.com or Hidden Stats Studio LLC, Maine, USA.

2. Information we collect

Information you provide. If you contact us (for example by email, a contact form, or a press/creator inquiry), we collect the information you choose to share — typically your name, email address, and the contents of your message. We do not offer public user accounts on the Site.

Information collected automatically. When you visit the Site, our hosting and content-delivery infrastructure automatically logs standard technical data such as your IP address, browser type and settings, device and operating system, referring/exit pages, approximate location (derived from IP), and the dates/times of your requests. We may collect similar information through cookies or comparable technologies (see Section 3).

Information we do not intentionally collect. We do not seek to collect sensitive personal information (such as government IDs, precise geolocation, health, or financial account data) through the Site, and we ask that you not send it to us.

Current state: the studio Site is a lightweight informational site with no analytics, advertising, newsletter, or account system. If we add any of these later (for example, a privacy-focused analytics tool), we will update this Policy first.

3. Cookies & tracking technologies

The Site does not currently set cookies or use analytics, advertising, or other tracking technologies. If we add cookies or analytics in the future, we will update this section and, where required by law, present a consent mechanism before any non-essential cookies are set.

The Site is fully self-contained: fonts, styles, scripts, and images are all served from our own infrastructure, so loading the Site makes no requests to third-party servers and does not disclose your IP address or other data to any third party for content delivery.

4. How we use information

  • to operate, maintain, secure, and improve the Site;
  • to respond to your inquiries and communicate with you;
  • to understand and analyze how the Site is used (in aggregate);
  • to protect against, investigate, and deter fraud, abuse, and security incidents;
  • to comply with legal obligations and enforce our Terms of Service.

5. Legal bases for processing (EEA/UK)

If the GDPR or UK GDPR applies to you, we rely on the following legal bases:

  • Legitimate interests — to operate and secure the Site and understand aggregate usage, balanced against your rights;
  • Consent — where required, for non-essential cookies/analytics; you may withdraw consent at any time;
  • Legal obligation — to comply with applicable law;
  • Performance of a request — to respond to communications you initiate.

6. How we share information

We do not sell your personal information. We share it only as follows:

  • Service providers/processors that host the Site and support our operations, under contracts that limit their use of the information (see Section 7);
  • Legal and safety — when required by law, subpoena, or legal process, or to protect the rights, property, or safety of Hidden Stats Studio, our users, or the public;
  • Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy;
  • With your direction or consent — for example, if you ask us to share information.

7. Service providers we use

We rely on a small number of reputable providers. The specific list may change; representative providers include:

  • Google Cloud / Firebase Hosting — cloud hosting and content delivery (the Site is served from Firebase Hosting) and related logging.
  • Google (Google Workspace) — the business email service we use to receive and respond to your messages.

We do not currently use an analytics or advertising provider. If we add one, we will list it here.

Some US state laws (including in Minnesota, Delaware, and Oregon) give you the right to obtain a list of the specific third parties to which we have disclosed personal information; you can request this using the contact details in Section 18.

8. AI / model-training disclosure

We do not sell your personal information, and we do not use personal information collected through the Site to train large language models or other generative-AI models, nor do we share it with third parties for that purpose. If this ever changes, we will update this Policy and, where required (for example, under Connecticut law), provide the appropriate disclosures and choices.

9. Data retention

We keep personal information only as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. Because the Site uses no analytics, we retain very little: any technical logs generated by our hosting provider are kept only for a short period for security and operations and then discarded or aggregated, and email correspondence is kept for as long as needed to handle your request and for reasonable record-keeping. We will publish specific retention periods here if we later add tools that store personal information.

10. Security

We use reasonable technical and organizational measures designed to protect personal information, including encryption in transit (HTTPS), access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International data transfers

We are based in, and host the Site in, the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States and other countries that may have different data-protection laws than your own. Where required for transfers from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the EU/UK/Swiss–US Data Privacy Framework (where our providers participate) and/or Standard Contractual Clauses.

12. Your rights (EEA/UK/Switzerland)

Subject to applicable law, you have the right to: access your personal information; correct inaccurate data; erase data; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact us using Section 18. Because the Site is a general informational site that does not specifically target or monitor individuals in the EEA/UK, an EU/UK representative is generally not required; we will reassess if that changes (for example, if a game is marketed to those regions).

13. Your rights (US states)

Depending on your state of residence (including California, Virginia, Colorado, Connecticut, and others with comprehensive privacy laws), you may have the right to:

  • Know/access the categories and specific pieces of personal information we collect, use, and disclose;
  • Correct inaccurate personal information;
  • Delete personal information we hold about you;
  • Opt out of the “sale” or “sharing” of personal information and of targeted advertising and certain profiling;
  • Limit the use of sensitive personal information (where applicable);
  • Non-discrimination for exercising your rights; and, in some states, to appeal a denied request.

California “shine the light”: California residents may request information about disclosures of personal information to third parties for their direct-marketing purposes; we do not currently share personal information for such purposes. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not knowingly sell or share the personal information of consumers under 16. To exercise any of these rights, see Section 18. You may use an authorized agent where the law permits, and we will verify requests as required.

14. “Do Not Sell or Share” & opt-out preference signals

We do not sell or share your personal information for cross-context behavioral advertising. Where applicable, we honor recognized opt-out preference signals such as Global Privacy Control (GPC) transmitted by your browser. If we ever engage in activities that qualify as a “sale” or “share,” we will provide a clear “Do Not Sell or Share My Personal Information” mechanism and display confirmation when an opt-out is processed.

15. Children’s privacy

The Site is not directed to children under 13 (or the applicable age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at contact@hiddenstatsstudio.com and we will take appropriate steps to delete it. Individual games may have their own age policies and, where applicable, comply with COPPA and similar laws through their own notices.

The Site may link to third-party sites and services we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them. Please review the privacy notices of any third-party services you use.

17. Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice as required by law. We encourage you to review this Policy periodically.

18. Contact & how to exercise your rights

To exercise any privacy right, or for questions about this Policy, contact us at contact@hiddenstatsstudio.com or by mail at Hidden Stats Studio LLC, Maine, USA. We will respond within the timeframes required by applicable law and may need to verify your identity before acting on a request.