Privacy policy

Last updated 30 October 2026

HIDE & SNIPE ("the game") is run by Hide and Snipe ("we"). This policy explains what the game stores about you, why, and how to have it deleted. It covers the Android app, the iOS app (iPhone and iPad) and the browser version. For questions or requests, email support@hidesnipe.com.

Accounts

You play with a guest account. We do not ask for your name, phone number or a password. When you start, the server creates a random player ID and a sign-in token that stays on your device. Your player name (nickname) is the one you choose at the first start, or a generated one you keep; it is unique and shown to other players.

You do not have to give an email address. If you want to get your account back on another phone or browser, you can optionally link a Google account, an Apple Account (in the iOS app) or an email address in Settings › Account. With Google, Google sends us a signed sign-in token for the account you pick; we keep only its Google account ID and its verified email address, not your name, picture or anything else Google knows about you. With Sign in with Apple, Apple sends us a signed sign-in token; we keep only its Apple user ID and the email address Apple shares with us (with Hide My Email, a private address of Apple's that forwards to yours), not your name. With email, we send a 6-digit code to your address, valid for 10 minutes, and keep only a keyed hash of it until it is used or expires (and, for a day, a count of the codes sent to the address, to stop abuse). We use the address only to let you sign in, never for marketing, and we send no other mail. You can remove it again in Settings › Account, and it is deleted with the account.

What we store

• Account and progress: player ID, player name, level, XP, trophies, gems, gold, weapons, cosmetics, crates, loadout, Snipe Pass progress, quests and login rewards.
• Linked sign-in (only if you link one): the Google account ID, email address and the other email address you linked, with the dates you linked it and last signed in.
• Sign in with Apple (iOS app, only if you use it): the Apple user ID and the email address Apple shares with us, with the dates you linked it and last signed in, and a token from Apple that lets us end Sign in with Apple for the game when you delete the account.
• Matches: results of your matches (mode, rounds, who won, the other players' IDs) and, in tournaments, the bracket with player names. When few players are online, matches can be filled with computer-controlled opponents, and clan lists and clan events can include computer-run clans.
• Clans and clan chat: the clan you are in, your role, what you gave and won for it, and the messages, stickers and reactions you send in its chat. The chat keeps the last 300 messages per clan and shows them only to the clan's members. A message someone reports is copied, with the report, for our moderators. Clan, player and tournament names and chat messages pass a word filter. When you delete your account you leave your clan and your messages are shown as from "Deleted player".
• Blocks and reports: the players you block (until you unblock them or delete your account), and the reports you send about a player from a match or from voice chat: the match or run, the player, the reason and the note you add. Our moderators use reports to review what happened; the reported player is not told who reported them.
• Purchases: product, amount, date, status and the payment provider's reference (Google Play order ID and purchase token, App Store transaction ID, or the Stripe payment ID). We never see your card or bank details.
• Invites and creator codes: who invited whom and the invite rewards. To stop invite rewards being farmed we store a keyed hash of the network an invite was used from (derived from your IP address: the IPv4 address or the first half of an IPv6 address). The hash cannot be turned back into the address. For Squad Builder we also note whether an invited friend's first game with you paid, and we check whether the two accounts share a device, a sign-in email address, a wallet or a network, from records we already keep (nothing new is stored for it). If you enter a creator code, the creator's earnings report counts your purchases without your name.
• Usage events: the day you played, finished matches (mode and result), purchases, quest and login rewards claimed, tournament entries, and app installs and launches with the platform (Android, iOS or desktop). We use them only for game statistics such as daily players and retention. When your account is made we also note once where you came from, to learn which channels bring players who stay: the kind of link (a friend's invite, Discord, our website and so on), the campaign name a link carries, the site you came from (its name only, such as reddit.com, never the page), the platform and the first part of the address you landed on. The campaign, site and address are erased after 180 days; the rest goes with your account. Before an account exists the game counts a first visit the same way, without any ID. If your browser sends "Do Not Track" or "Global Privacy Control", the game sends none of this.
• Anonymous device and performance statistics: when the game has started and when you leave it, it sends our own server a small report that contains no player ID, device ID, advertising ID or account, only broad groups: the kind of install (browser, installed web app, Android app, iOS app, or a browser on an iPhone or iPad), the version of the game, the graphics quality in use, how smooth it ran (a frame-rate group such as "under 20" or "45 and up"), how long loading took (a time group), whether the graphics had to reset, the memory and number of processor cores of the device in rough groups (such as "2 GB" or "5 to 8 cores"), the browser family, and the minutes the game was open. If the game crashes or hits an error it also sends that error message, cut to 200 characters with web addresses, codes, email addresses and IDs removed, at most five a visit. Where our web server can tell the country of your connection we count the visit per country per day (a number, never an address or ID). We add the reports up per day; they are not linked to your account, your device or your IP address, and no IP address is stored with them. We use them only to find slow devices, crashes and blank screens. If your browser sends "Do Not Track" or "Global Privacy Control", the game sends none of this.
• Bug reports you send: only when you choose Settings › Help › Report a bug (or the same button in the match menu). A report holds what you type, the kind of problem, your player ID and name when you are signed in, the email address if you give one for an answer, and, unless you switch it off in the dialog (which lists it before you send), technical details of that moment: the kind of install and version, screen size, graphics quality, frame rate, graphics chip, the browser or device description, the screen you were on, whether you were online, and the last few error messages (web addresses, codes, email addresses and IDs removed). It is stored on our server, mailed to the people who run the game and shown to our staff in the admin dashboard. We use it only to find and fix the problem and, if you gave an address, to answer you.
• Device check (Android app only): before ranked matches, tournaments and purchases the app asks Google Play whether it is the unmodified app from Google Play on a device that passes Google's checks (Play Integrity). We receive only the answer (app recognised, device check passed, licence), never a device identifier, keep it in memory for up to an hour and note it in our server logs with your player ID. Practice, casual matches, the campaign and offline play never ask.
• Wallet (browser version only): if you link a crypto wallet, its public address, items and token balances read from public blockchains, and the reward vouchers issued to it.

IP address and server logs

Your IP address is used while you are connected: to limit the rate of requests, to keep two accounts on one connection from being matched in ranked games, and (where available) to read the country your connection comes from, to switch off paid tournament features where they are not allowed. It is not stored with your account, and the anonymous statistics reports above use it only for the rate limit of the request itself. Our servers' technical logs contain IP addresses and the requests made; they are kept for a short time (at most 30 days) for security and troubleshooting.

What we do not do

• No advertising except the rewarded videos you choose to watch in the Android app (see below), no ad IDs in the browser version, no third-party analytics or tracking. The statistics above are our own, collected by our own server: no analytics or crash-reporting service of another company, no tracking cookie, no device ID and no advertising ID is involved, and the reports cannot be linked to you.
• No location, contacts, camera or files. The microphone only for voice chat, while you have it on (see below).
• We do not sell or rent your data, and we do not use it for profiling beyond matchmaking (trophies and loadout strength).

Rewarded videos (Android app)

In the Android app the shop lets you watch a short video for a reward you pick, at most two a day. The videos are shown by Google AdMob (Google), from app version 1.0.18. The browser version has no videos: it loads nothing from AdMob and sends nothing to an ad network. This is how it works:

• Only when you choose to watch. Nothing is loaded from the ad network until you start a video. Not watching costs you nothing else in the game.
• What the ad network receives: what it needs to show and count a video: your device and app details, your IP address and, in the Android app, the device's advertising ID. We tell it the random player ID of the view, never your name.
• Your consent first where the law asks for it (the European Economic Area, the United Kingdom and Switzerland): a consent screen before the first video. The videos are never personalised, for anyone, with or without consent: no advertising profile is built, and the ads are limited to a content rating that suits teenagers.
• Changing your mind: you can change or withdraw your consent at any time in the shop, under the videos ("Ad privacy choices"), and reset or delete the advertising ID in your device settings.
• What we keep: which reward you picked and when the video ran, to pay the reward and keep the daily limit.

Voice chat (optional)

In Zombie Night you can talk with friends on your team. Voice chat is off until you turn it on in Settings › Voice chat, and you can turn it off there again at any time. Nothing else in the game needs it. This is how it works:

• Only friends on your team: you hear, and are heard by, only players who are your friends (both ways), are on your team (the same run, or the same party in the team screen before a run) and have voice chat on too. Never strangers, opponents or computer-controlled teammates. A block ends voice chat between the two of you at once, both ways.
• The microphone: the game uses it only while voice chat is on, and with push-to-talk (the default) only while you hold the talk button and for a few seconds after. In "listen only" mode it never uses the microphone. Your device asks for your permission first, and you can take it back in the device's settings.
• Encrypted and never recorded: the sound goes encrypted from your device to your teammates' devices, through a relay server (ours, or Cloudflare's when ours cannot be reached) that passes on the encrypted packets but cannot listen to them. Thanks to the relay, players never see each other's IP address. The relay sees the IP addresses of the devices and how much data passes. Nobody, us included, records, stores, transcribes or analyses what is said.
• What we keep: who was in voice chat with whom, in which run or party, and when (30 days, to handle reports); the voice chat reports you send (the player, the reason and your note, never any sound); and voice chat suspensions our moderators set.

Why we may use it

To run the game you asked to play (your account, progress, matches, purchases and the voice chat you turn on), to meet legal duties (payment records for bookkeeping and tax), and in our legitimate interest in keeping the game fair, secure and working (rate limits, anti-abuse checks, logs and statistics).

Who processes it for us

• Our hosting provider runs the game servers, the database and our voice chat relay.
• Google processes purchases in the Android app (Google Play Billing), distributes the app (Google Play) and, in the app, runs the device check above (Play Integrity).
• Apple (Apple Distribution International Ltd., Cork, Ireland) sells and processes purchases in the iOS app through the App Store, and distributes that app. You pay Apple with your Apple Account; we receive the purchase as Apple signs it (product, transaction ID, date, price and currency, and a code derived from your player ID that ties it to your account), never your Apple Account, name or payment details.
• Stripe Payments Europe, Ltd. (Dublin, Ireland) processes purchases in the browser version: you pay on Stripe's own page (card, iDEAL and other methods).
• Our email service delivers the sign-in codes you ask for (your address and the code, once).
• Google also runs "Sign in with Google" if you use it, under its own privacy policy.
• Apple runs "Sign in with Apple" if you use it, under its own privacy policy.
• Google (AdMob) shows the rewarded videos in the Android app, for the videos you choose to watch.
• Cloudflare, Inc. (San Francisco, USA) relays the encrypted sound of voice chat when our own relay cannot be reached: it sees the IP addresses of the devices and how much data passes, never what is said.

Google, Apple and Stripe handle payment details under their own privacy policies. What a public blockchain records (browser version wallet features only) is public and permanent.

On your device

The game keeps your sign-in token and settings in the app's or browser's storage, and the browser version stores the game files for offline play. Uninstalling the app or clearing the browser's data removes them, and with them access to the account unless you linked a way to sign in again or saved a recovery code.

Reminders (Android and iOS apps): only if you turn them on (the game asks once, after your first match, and Settings › Notifications switches each kind off). The app plans them on your phone or tablet itself, at most one a day: your daily streak, Duel Night and the last day of a limited skin. Nothing about them is sent to us or to anyone else: no push service, no device token.

How long we keep it

• Account data: as long as the account exists. Delete it at any time (see below).
• Payment records: up to 7 years, as bookkeeping and tax law require, also after the account is deleted (then without your name).
• Anti-abuse records other players' limits depend on (invites, ranked wins, a wallet's season pass): also after the account is deleted, with the random player ID only.
• Bug reports: 180 days after they were handled (a report nobody handled is deleted after a year), or until you delete your account. A copy that was mailed to us stays in our mailboxes until we delete it.
• Server logs: at most 30 days.
• Voice chat: who was in voice chat with whom, and when: 30 days. Voice suspensions: until they end.

Your rights and deleting your account

You can see most of your data in the game, change your player name in Settings, and delete your account in Settings › Account › Delete account. How deletion works, what is kept, and what to do if you lost access: Delete your account. You may also ask us for a copy of your data, or to correct or restrict it, and you may complain to your data protection authority.

Changes

If this policy changes, the new version is published on this page with a new date.