Privacy Policy: Hand Egg
Last updated: 11 October 2026 (rev. 1)
Controller: Amir Angel (אמיר אנג'ל, עוסק מורשה), a sole proprietor in Israel ("we", "us"). Contact: support@hustlemania.dev">support@hustlemania.dev.
This policy explains what information the game Hand Egg: Arcade Gridiron Football (the "Game", on iOS, Android and the web) collects, why, who receives it, how long we keep it and what your rights are. The Game has no accounts, passwords or email sign-up, and it does not ask for your real name, phone number, contacts or location. The Game is intended for people aged 13 and over and is not directed at children.
1. Summary
- Playing online needs a random Player ID, a Display Name you choose (or a random one we give you), and your IP address, which is technically needed to connect you to the server and to your opponent.
- Online matches run peer to peer (directly between the two players' devices). Your opponent's device can learn your IP address (see section 5). If a direct connection fails, the match goes through our relay instead.
- Our online service runs on Cloudflare (Workers and Durable Objects, plus Cloudflare's relay network). Cloudflare handles connections on our behalf.
- We keep server logs, which can include IP addresses, for up to 14 days. IP addresses are used only for rate limiting, abuse prevention and connecting players, and are not stored in match records or on leaderboards.
- No ads, no analytics, no tracking, no sale of data. We do not use the Apple advertising identifier and do not show the App Tracking Transparency prompt.
- The Game does not use your camera or microphone and has no voice or text chat.
2. Defined terms
- Player ID: a random identifier we create for you when you first play online.
- Session Token: a random secret saved on your device so that you keep the same Player ID and rating next time. On our servers we keep only a one-way hash of it, not the token itself.
- Display Name: the name shown to your opponent, in results and on the leaderboard.
- Ranked Data: your rating, the number of ranked games, wins, losses and draws, and the platform (iOS, Android or web) you played on.
- Match Record: the technical record of a finished online match (see section 3).
- Server Logs: technical event logs of our online service (see section 3).
- Relay: our fallback path that forwards game packets between the two players through our server when a direct connection is not possible.
3. What we collect and why
| Data | What it is | Why we use it |
|---|---|---|
| Player ID and Session Token (hash) | Random identifiers, not linked to your real identity | To keep your identity and rating between sessions and to stop two connections from using one player |
| Display Name | 1 to 16 characters: letters, numbers, spaces and _ . - ! ? only. Chosen by you, or generated by us as a word plus a number. You can change it in the Game |
To identify players to each other, in results and on the leaderboard |
| Room codes | A 4-letter code for private rooms; it exists only while the room is open (rooms close after 30 minutes of inactivity) | To let you play a friend. There are no free-text room names |
| Ranked Data | Rating, ranked games, wins, losses, draws, platform counts, last-update time | Ranked matchmaking and fair ratings, and the leaderboard |
| Match Record | Time, match type (quick, ranked or private), result, score, whether the Relay was used, and per player: Player ID, platform, app/build version, selected character, and rating before and after | Ranked fairness, detecting disputed results and cheating, and fixing compatibility problems between platforms and versions |
| IP address | The network address of your connection, seen by our servers (and Cloudflare) and, in peer-to-peer play, by your opponent's device | Connecting you, rate limiting, security and abuse prevention. Not stored in Match Records, Ranked Data or on leaderboards |
| Technical connection data | Game version, platform, build identifier, connection events, errors, and timestamps | Operating the service, compatibility checks, security, debugging |
| Game packets | The real-time inputs and state exchanged during a match. In normal play they go directly between the players. They pass through the Relay only when needed, and are forwarded, not stored | To play the match |
Stored on your device only: your settings (such as audio, controls and layout), your tutorial progress, your Session Token and Display Name. On the web this uses your browser's local storage; in the apps it uses the app's private storage. Deleting the app or clearing site data removes it (you then get a new Player ID; see section 10 for rating records).
What we do not collect: your real name, email, phone number, contacts, photos, precise or approximate location, advertising identifiers, microphone or camera data, or any chat (there is no chat). The Game contains no analytics, crash-reporting or advertising SDK. We do not currently use over-the-air update services; if that changes we will update this policy first.
Purchases. The Game has no in-app purchases today. If we add them, they will be processed by Apple or Google (the "merchant of record"), under their terms and privacy policies. We would receive only confirmation of what was bought, not your payment details.
4. Legal basis (EU, EEA and UK users)
Where the GDPR or UK GDPR applies, we rely on:
- Performance of a contract (Art. 6(1)(b)): the Player ID, Session Token, Display Name, room codes, connection data and game packets are needed to provide online play, matchmaking and ranked ratings under our Terms.
- Legitimate interests (Art. 6(1)(f)): IP addresses and Server Logs for security, rate limiting and abuse prevention; Match Records and Ranked Data for fairness, anti-cheating and compatibility. We have considered your interests; the data is limited, pseudonymous and kept for short periods. You may object (section 10).
We do not rely on consent, because we do not use optional tracking or marketing. Providing the data above is required to play online; you can play offline modes without connecting. [verify: offline modes remain available without any server connection]
5. Peer-to-peer connections and IP exposure
Online matches use WebRTC, which connects the two players' devices directly to reduce delay. To do that, each device must learn its public address using a STUN server, and the two devices exchange connection candidates (which include IP addresses) through our lobby server. As a result:
- your opponent's device receives your public IP address (and, depending on your network, possibly local network addresses), and you receive theirs. The Game does not display it, but a technically skilled opponent could extract it;
- the STUN server you contact also sees your IP address when you ask it for your public address. The Game currently uses public STUN servers operated by Google [verify and update if the STUN provider changes, for example to Cloudflare STUN];
- if a direct connection cannot be established (for example on a strict corporate or mobile network), after a few seconds the Game automatically switches to the Relay: your game packets then go through our servers on Cloudflare's network instead of directly to your opponent. The candidates were already exchanged during setup, so the Relay does not guarantee that an opponent never receives your address;
- there is currently no setting to turn off peer-to-peer or to force the Relay. [verify at release; if a "relay only" setting is added, describe it here] If you do not want an opponent's device to see your IP address, do not play online matches, or use a VPN.
6. Cloudflare: hosting and relay
Our lobby and matchmaking service, which handles Player IDs, room codes, Ranked Data, signalling and the Relay, runs on Cloudflare, Inc. (Workers and Durable Objects). Cloudflare's relay (TURN) network is used for players on strict networks. Cloudflare acts as our hosting provider and processor, and processes data on our behalf under its terms and data processing addendum [verify: accept Cloudflare's DPA in the dashboard].
Cloudflare, and our service running on it, may log IP addresses and connection metadata. We use them only for security, abuse prevention, rate limiting and connecting players. We keep Server Logs for up to 14 days. IP addresses are not written into Match Records, Ranked Data or leaderboards. Cloudflare may keep its own operational and security logs for the periods stated in its own documentation and privacy policy (https://www.cloudflare.com/privacypolicy/).
The web version of the Game is also served from Cloudflare's network, which sees the usual web request data (IP address, browser type, requested file) for delivery and security. [verify: web hosting is on Cloudflare]
7. Retention
| Data | Retention |
|---|---|
| Server Logs (which can contain IP addresses, Player IDs and Display Names) | up to 14 days, then deleted |
| IP addresses | Only in Server Logs (14 days) and in short-lived memory for rate limiting; never in Match Records, Ranked Data or leaderboards |
| Active session in memory | About 15 minutes after you disconnect |
| Private room | Until closed; closes after 30 minutes of inactivity |
| Ranked Data (including leaderboard entry) | Until [24 months] after your last ranked game, or until you ask us to delete it |
| Match Records (no IP addresses) | [12 months], then deleted or anonymised |
| Data on your device | Until you delete the app or clear site data |
8. Sharing
We share data only with the providers that make the Game work:
- Cloudflare: hosting, networking, relay and security (section 6).
- Apple and Google: distributing the apps (App Store, TestFlight, Google Play) and, if we add them, processing purchases. They have their own privacy practices.
- STUN provider: sees your IP address when you ask for your public address (section 5).
- Other players: your opponent sees your Display Name and, as explained in section 5, can obtain your IP address; everyone using the leaderboard sees the Display Name, rating and number of games of ranked players.
- Authorities and legal needs: if required by law, or to protect our rights or others' safety.
We do not sell personal information, we do not share it for advertising, and we do not track you across other companies' apps or websites.
9. International transfers
We operate from Israel. Cloudflare runs a global network, so your data can be processed in many countries, including the United States and Israel, near where you play. Personal data from the EEA and UK is transferred to Israel based on the European Commission's adequacy decision and the UK equivalent [verify current status of both]. Transfers to Cloudflare and its sub-processors rely on appropriate safeguards such as the EU-US Data Privacy Framework and/or Standard Contractual Clauses in Cloudflare's data processing addendum [verify]. Transfers from Israel are handled in line with Israeli law [verify under the Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001].
10. Your rights
You can ask us to: access the data we hold about you, correct it, delete it, object to our processing based on legitimate interests, restrict it, or give you a copy (portability), where the law gives you those rights. Because we do not know who you are, please email support@hustlemania.dev">support@hustlemania.dev from the device or with your Player ID and Display Name (shown in the Game's settings or profile [verify: confirm where the Player ID is visible in the app; if it is not, add a "copy Player ID" feature or describe how we can identify your records]). We will answer within 30 days.
Deleting a player's Ranked Data removes the leaderboard entry and the linked rating; Match Records that remain contain only the Player ID and not your name. Deleting the app does not delete server records, so please contact us if you want them removed.
Israeli law (the Privacy Protection Law, 5741-1981, as amended by Amendment 13, which strengthens data-subject rights and enforcement) also gives you the right to review and correct information held about you [verify scope and effective date of Amendment 13]. You may complain to the Privacy Protection Authority (Israel) or to your local data protection authority (for EU/UK users, in the country where you live or work).
11. Children
The Game is for people aged 13 and over. It is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child under 13 has used the Game, contact us and we will delete the data. Parents or guardians of teenagers under 18 can contact us to ask for access or deletion.
12. Security
Connections to our servers use encryption in transit (HTTPS / secure WebSocket) [verify: production uses wss:// only]. We store only a hash of Session Tokens, keep IP addresses out of long-term records, and limit access to the data. No system is perfectly secure, so we cannot guarantee absolute security.
13. California and other US states
We do not sell personal information and do not share it for cross-context behavioural advertising, as those terms are defined in California law. You may ask us to access or delete your data using the contact details below. We will not discriminate against you for doing so.
14. Changes
If we change this policy we will update the date above, and for material changes we will tell you in the Game or on our website before they take effect where appropriate.
15. Contact
Amir Angel (אמיר אנג'ל, עוסק מורשה), Israel. Email: support@hustlemania.dev">support@hustlemania.dev
16. Platform privacy labels (summary)
This section summarises the Game for the App Store "App Privacy" and Google Play "Data safety" forms.
- Data collected: User ID (Player ID); display name; gameplay results and ranked rating; IP address and technical connection data (diagnostics).
- Purpose: app functionality, security and fraud prevention. Not used for advertising, analytics or personalisation.
- Linked to identity: the Player ID and rating are linked to a pseudonymous player profile, not to a real-world identity.
- Tracking: none. No data is used to track you or shared with data brokers.
- Shared with third parties: none, apart from service providers acting on our behalf (Cloudflare) and the other player (Display Name and, in peer-to-peer play, IP address).
- Encryption in transit: yes.
- Deletion: on request by email, see section 10.
- Camera, microphone, location, contacts, photos, health data: not collected.