Privacy Policy

This policy explains what Haddzy.com collects, why, and what control you have over it.

1. Information we collect

You sign in with your Google account, and you can link your Kick and Discord accounts to it. Below is what we keep, grouped by why we keep it. A daily clean-up deletes records once they reach the ages given.

To run your account:

• From Google: your email address, Google account ID and profile picture, and your name if it fits our display name rules.
• From Kick and Discord, if you link them: your username, email address and account ID, and your Discord display name. Linking Kick also stores the keys that let you post in Kick chat from this site. Linking either one stores your StreamNeeds viewer ID, so points you earn on stream reach your account.
• What you add yourself: display name, avatar, bio, country, and your FPL team if you join the FPL league. We keep a log of your display name changes: your last three names show on your player card, and staff use the log to trace a player behind a new name.
• If you submit a win to the Hall of Fame or a challenge: the Stake and Kick usernames, Discord handle and proof you send, so staff can check it. The win is shown under your display name, never your Stake username.
• Prize details, only if you enter them: contact details, shipping address, Stake username and crypto wallet addresses, so we can deliver a prize.
• When you confirmed you are 18 or over and accepted the terms.
• Your email choices: whether you want an email when Haddzy goes live and whether you want promos and offers, with when and where you made each choice and the wording you saw, as a record of what you agreed to.
• The referral link or code you joined with, if any, and a coded fingerprint of your IP address at sign-up, to catch people referring themselves.

Your activity:

• Coin balance and transactions, XP and level, game and raffle history, missions and the items you own.
• Chat messages you send. They are deleted once they are 24 hours old, unless a report about them is still open.
• Moderation records: reports, mutes, bans, restrictions, chat-filter strikes and notes staff write about your account. A report keeps a copy of the reported message until 24 hours after it is resolved. Chat-filter records keep the flagged text for 24 hours, or up to 72 hours while it waits for review.

Security and fair play. These let staff and automatic checks spot one person running several accounts or a banned player coming back, and stop abuse:

• A coded fingerprint of each IP address you use, not the address itself. Each one is deleted 180 days after we last see it. We also keep one for the address you last signed in from.
• A device token: a random code saved in your browser when you sign in. We keep a coded fingerprint of it, deleted 180 days after we last see it.
• A log of the features you use and when, with your IP address. The IP address is removed after 30 days.
• A log of access checks on games and other features: your IP address, browser type and what was requested. The IP address is blanked after 90 days.
• A log of changes to your fair-play seeds, with your IP address and browser type. Both are blanked after 90 days.
• Request counters tied to your account or IP address, to stop abuse. Each is deleted 30 days after it was last reset.

Messages you send us:

• Contact form: your name, email address, subject and message.
• Be a Guest form: your name, email address, channel handle and message.
• Both are deleted once they are 180 days old.

2. How we use your information

We use this data to run your account: keeping your balance and level correct, entering you into raffles you join, showing your name and avatar in chat and on leaderboards, and contacting raffle winners. We do not sell your personal information, and we do not use it for advertising.

Emails are optional and off until you turn them on. If you ticked the old “Email me drops & bonuses” box, we kept that as promos and offers only. If you ask for them, we use the email address on your account, normally your Google one, to send only what you chose: an alert when Haddzy goes live, promos and offers, or both. You can turn either off at any time in Account, Preferences.

3. Cookies

Every cookie we set is there to make the site work. None is used for advertising or analytics.

• Signing in and security. Keep you signed in, show the signed-in layout, block forged requests, remember where to send you after signing in, and protect your Google sign-in. Two are set on your first visit, before you sign in. The sign-in cookie lasts 30 days from your last visit and is removed when you sign out. The Google sign-in check lasts 15 minutes. The rest are deleted when you close your browser.
• Linking Kick or Discord. Keep a Kick or Discord link safe while it is in progress. They last 10 minutes and are cleared as soon as linking finishes.
• Referral links and sign-up choices. Remember a referral link you opened or a code you entered, and the email choices you ticked on the sign-up form, until your account is made. The referral cookies last 30 days and the email choices cookie lasts an hour. All three are cleared when sign-up finishes.
• Game and account messages. Hold your demo balance when you play a game in demo mode, and show the reason when a suspended account tries to sign in. The demo balance lasts 30 days. The suspension notice lasts 5 minutes.

Page views are counted with Vercel Web Analytics, which sets no cookies. The site also uses your browser's own storage for settings and reminders, such as sound, favourite games, whether the chat is open and which tips you have seen, plus the device token from section 1. Some of these include your account ID. Some pages show content from other services: the Kick stream player and chat, live dealer tables, and slot games that run in their provider's own game frame. Anything those services store is covered by their own privacy policies.

4. Sharing & public information

We share personal data with these services so the site can work, and where the law requires it:

• Vercel, Neon and Fly.io host the site, its database and its live game servers.
• Google, Kick and Discord, to sign you in and link your accounts. Kick also receives the chat messages you post to Kick from this site.
• StreamNeeds receives your account ID and linked Kick and Discord IDs, so your stream points sync.
• Game providers receive a player or session ID when you open their games. Live dealer tables also receive your country.
• Fantasy Premier League, to load your FPL team if you join the league.

Some information is public by design: your display name and last three names, avatar, level, join date, leaderboard position, chat messages, big wins (in the live feed and the Haddzy Discord) and your game stats. You can hide your name in public feeds and your game stats in Account, Preferences.

5. Security & retention

Your email addresses, linked account IDs, prize details, crypto wallet addresses and Kick chat keys are encrypted with a key unique to your account. We keep your data while your account is active and for as long as we need it to operate the service and meet legal obligations.

6. Your rights & deleting your account

Depending on where you live, you may have the right to access, correct or delete your personal data. You can change your details in your account, delete your account in Account & security, or contact us for a copy of your data or any other request. You can also complain to the Information Commissioner's Office (ico.org.uk).

If you delete your account:

• We destroy your account's encryption key, so everything encrypted with it can never be read again.
• The account is renamed “deleted-user”, its avatar, bio and country are cleared, and it is signed out everywhere.
• We delete your email addresses and the link to your Google, Kick and Discord accounts, your prize details, Kick chat keys and StreamNeeds link, your email choices, the avatar images you uploaded, your FPL team, your chat messages and the quotes of them in other people's replies, staff notes, your affiliate code, your IP and device fingerprint history, and the feature-use log.
• We remove your names from the display name log and from staff records of name and Kick handle changes, the Stake and Kick usernames and Discord handle from your Hall of Fame and challenge submissions, the IP address and browser type from your fair-play seed log, and the link between your account and any Stake leaderboard entry.
• We delete Contact and Be a Guest form messages sent from an email address on your account. A message sent from an email address your account never held is removed by the 180-day clean-up instead.

Some records stay, under the renamed account:

• Coin, game, raffle, mission and item records, including the game outcomes needed for fairness checks.
• Moderation and security records, such as mutes, bans, restrictions, chat-filter strikes and account flags, without any chat text. An account flag can include an IP address.
• The display name log, with its dates but without the names.
• Hall of Fame and challenge wins you submitted, with the proof you sent but without your name or usernames.
• The access-check log, with browser type and what was requested. Its IP addresses are blanked 90 days after each check.
• A coded fingerprint of the IP address you last signed in from, and your referral record with its coded fingerprint of your sign-up IP address, if you joined with a referral.
• The record of the deletion, with the IP address and browser used, and a coded fingerprint of each account you signed in or linked with, so a returning account can be recognised.

7. Age

The site is for adults aged 18 or over. We do not knowingly hold data on anyone younger, and we will delete any such account we find.

8. Changes to this policy

If we change how we handle your data, we will update this page and the date at the top. Material changes will be highlighted on the site before they take effect.

9. Contact

Questions about your privacy or a data request? Email support@haddzy.com or use the Contact page.