Privacy Policy

This policy explains what information the Shh Head app and website collect, why, and what you can do about it. Shh Head is run by Humpback Corp (“we”, “us”). If anything here is unclear, email humpbackcorp@protonmail.com.

The short version

We collect what we need to run the game: your email address, your account and your games.
No ads, no advertising ID, no third-party analytics, and no tracking across other apps or websites.
We never sell your information.
You can delete your account from inside the app at any time.

What we collect

Account information. Your email address, which we use to send you sign-in codes. If you sign in with Apple or Google, we receive the email address they share with us (with Apple this can be a private relay address) and, if you allow it, your name. Each account gets a unique ID.

Your profile. The display name other players see. If you have not set one, it is taken from the part of your email address before the @.

Gameplay. The games you play and how they turn out: the moves needed to run each match, results, rankings, private rooms, the house rules you choose, and invitations you send or accept.

Reports. If you report another player, we keep the report and the details you include.

Technical information. A random identifier the app creates when it is installed, so our servers can tell your devices apart; your app version; and, as with any server, the IP address and time of each request, which are recorded in our logs.

Support messages. Anything you send us by email.

This website sets no cookies and runs no analytics.

What we do not collect

We do not collect your location, contacts, photos or advertising identifier, and the app contains no advertising or third-party analytics code.

How we use it

To create and secure your account and send you sign-in codes.
To run matches, private rooms, invitations and rankings.
To show your display name, results and rankings to other players.
To prevent cheating, abuse and fraud, and to act on reports.
To reply when you contact us.
To keep the service working, such as fixing bugs and handling load.

We share information only with the service providers that run Shh Head for us, and only what they need:

Supabase, for sign-in and our database.
Our email delivery provider, to send sign-in codes, invitations and account emails.
Our hosting provider, where our servers run.
Apple or Google, only if you choose to sign in with them.

Other players can see your display name, your in-game activity and your rankings. We may also disclose information when the law requires it, or to protect players and the service.

How long we keep it

We keep your account and game history for as long as your account exists. When you delete your account, we deactivate it straight away and delete or anonymise your personal information within 30 days. Server logs are kept for a limited time and then deleted.

Deleting your account

In the app, open Settings and choose Delete account. If you can’t get into the app, email humpbackcorp@protonmail.com from the address on your account and we will delete it for you.

Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal information, and to object to or restrict how we use it. Email humpbackcorp@protonmail.com and we will reply within 30 days.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our agreement with you (running your account and your games), our legitimate interests (keeping the service secure and fair, and fixing problems), and legal obligations where they apply. You can also complain to your local data protection authority.

Children

Shh Head is not directed at children. You must be at least 16 years old to create an account. We do not knowingly collect personal information from anyone under that age, and if we learn we have, we will delete the account and its data. If you believe a child is using Shh Head, email humpbackcorp@protonmail.com.

Security and international transfers

We use encrypted connections and limit who can access personal information. Our service providers may process information outside your country; where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

Changes to this policy

If we change this policy, we will update the date at the top of this page and, for significant changes, let you know in the app or by email.

Contact

Humpback Corp. Email: humpbackcorp@protonmail.com.