Privacy Policy
Last updated: September 28, 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) for the processing of personal data on this website (hashempire.app) and in the game HashEmpire is:
Kevin Koch Brahmsstr. 3 72355 Schörzingen Germany Email: support@hashempire.app
2. General information on data processing
We process personal data of our users only to the extent necessary to provide a functioning website and our content and services (in particular the game HashEmpire). Legal bases include Art. 6(1)(b) GDPR (performance of a contract/pre-contractual measures, e.g. account creation and HashCoin purchases), Art. 6(1)(f) GDPR (legitimate interest, e.g. in secure and functional operation), and Art. 6(1)(a) GDPR (consent, e.g. for voluntary contact requests).
3. Visiting the website (server log files)
When you visit this website, our hosting provider automatically processes technical connection data transmitted by your browser, including:
- IP address (shortened/anonymized where technically possible)
- date and time of the request
- page/file accessed and referrer URL
- browser type and version, operating system used
This data is processed exclusively to ensure reliable and secure operation (e.g. error analysis, defense against attacks) and is not combined with other data sources (legal basis: Art. 6(1)(f) GDPR). Server logs are automatically deleted after a short period unless retention is required for security reasons.
This website is hosted by OVH SAS (“OVH”). The HashEmpire game itself (at play.hashempire.app) is hosted by Netlify, Inc. (“Netlify”); when you access the game, Netlify processes the same type of technical connection data described above. Where required, a data processing agreement under Art. 28 GDPR is in place with both hosting providers, or the EU Commission’s standard contractual clauses are used for any transfers to third countries.
4. Cookies and local storage
The website itself does not set its own tracking or marketing cookies. We only use technically necessary data to provide basic functionality (e.g. your selected language and your cookie choice itself), stored locally in your browser (local storage) and remaining on your device only. No consent is required for this purely technical data (§ 25(2) TTDSG / Art. 6(1)(f) GDPR).
On our Wiki page, we offer a chat assistant provided by the third party JotForm (see section 6.2). It is not loaded automatically: on your first visit we show a cookie banner where you can choose whether to allow this category. Only once you agree — either in the banner (“Accept all” or specifically in its settings area) or directly via the “Enable chat” button on the Wiki page — is the chat embedded and JotForm allowed to set its own cookies. You can change your choice at any time via the “Cookie Settings” link in the footer. The legal basis for this category is exclusively your consent (§ 25(1) TTDSG, Art. 6(1)(a) GDPR); you may withdraw it at any time with effect for the future.
5. Registration and use of the game
A user account is required to use HashEmpire. We process:
- email address (for login, security notices, and to match HashCoin purchases per section 7)
- chosen player name
- password (stored encrypted), if applicable
- game progress and status data (e.g. balances, hashrate, ranking values, attack/defense history)
- technical metadata for fraud and abuse prevention (e.g. timestamps of actions, IP address at login)
The legal basis is Art. 6(1)(b) GDPR (performance of the usage agreement under our Terms) and, for fraud prevention, Art. 6(1)(f) GDPR.
Only your chosen player name and public game values (e.g. hashrate, PvP rating, league) are publicly visible on the leaderboard; your email address and password are never displayed publicly.
Hosting of game data
Game data is stored and processed in a database provided by our database provider Supabase (Supabase Inc.). Access via this website occurs exclusively through public, read-only interfaces (e.g. leaderboard, news); direct access to the underlying tables is blocked by database policies (row-level security). Where required, a data processing agreement is in place with Supabase, or the EU Commission’s standard contractual clauses are used for any transfers to third countries.
6. Contacting us
6.1 Contact form / email
If you contact us by email or via a contact form, we process the data you provide (including email address, name, and message content) solely to handle your request (Art. 6(1)(b) or (f) GDPR). This data is deleted once it is no longer required for that purpose, unless statutory retention obligations apply.
6.2 Chat assistant (JotForm)
On our Wiki page, we offer an AI-powered chat assistant (“Hashy”) provided via the service JotForm (JotForm Inc.). When you use the chat, your input is transmitted to and processed by JotForm to display a response; JotForm may also set cookies or similar technologies in the process. JotForm’s own privacy policy additionally applies, available at www.jotform.com/privacy. The legal basis is your consent through active use of the chat (Art. 6(1)(a) GDPR); you may instead use the standard email contact at any time.
7. Premium Shop purchases (HashCoins via Ko-fi)
If you choose to purchase HashCoins for a voluntary payment, you are redirected to the payment service Ko-fi (Ko-fi Labs Ltd.) to complete the transaction. Ko-fi processes your payment and contact data (including email address and payment information) on its own responsibility under its own privacy policy, available at ko-fi.com/privacy.
From Ko-fi — or via the payment confirmation Ko-fi provides (e.g. a webhook) — we receive the data necessary to credit HashCoins, in particular the email address you provided to Ko-fi, the amount paid, and a timestamp. We use this data solely to match the payment to your game account and for fraud prevention (legal basis: Art. 6(1)(b) and (f) GDPR). We never receive or store card data or other sensitive payment data ourselves.
8. Recipients and processors
We use the following service providers, acting either as processors on our behalf or as independent controllers, for the processing described above:
| Provider | Purpose | Location/region |
|---|---|---|
| OVH SAS | Hosting of this website | EU (France) |
| Netlify, Inc. | Hosting of the HashEmpire game | see netlify.com/privacy |
| Supabase Inc. | Database for game and leaderboard data | see supabase.com/privacy |
| Ko-fi Labs Ltd. | Payment processing for HashCoin purchases | see ko-fi.com/privacy |
| JotForm Inc. | Chat assistant on the Wiki page | see jotform.com/privacy |
Your data is transferred to any other third party only where legally permitted or where you have consented.
9. Retention period
We retain personal data only as long as necessary for the respective purpose or as required by statutory retention obligations. Account data is deleted or anonymized when you delete your account, unless statutory retention periods (e.g. commercial or tax law requirements for completed payments) require otherwise.
10. Your rights
Under the GDPR, you have the right to:
- access the data we hold about you (Art. 15 GDPR)
- rectify inaccurate data (Art. 16 GDPR)
- erasure of your data (Art. 17 GDPR), unless retention obligations apply
- restrict processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
- withdraw consent given, with effect for the future (Art. 7(3) GDPR)
To exercise these rights, contact us via Contact or the email address above.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR).
11. Changes to this Privacy Policy
We will update this Privacy Policy whenever changes to our data processing or to the legal situation require it. The version published on this page at the time of your visit applies.