Privacy policy
Last updated 12 October 2026
Who we are
The Hollow Dream is operated by Igor Alcantara, 160 Sessingham Lane, Johns Creek, GA 30005, United States, the data controller for the personal data described here.
What we collect
Your email address and password (stored as a secure hash by our authentication provider). The name you choose, an optional shorter name, your form of address, language and department. The month and year of your birth and your country, to check the minimum age. Your settings. What you do in the game: objects you handle, clues you reveal, stamps you earn. Reports you file. A portrait photograph, only if you upload one.
Why
To run the game you signed up for (contract). To check that you are old enough and to keep the game safe, including moderation of anything other players can see (legal obligation and legitimate interest). We do not sell your data or use it for advertising.
Emails we send
We email you to sign in and confirm your address, to send receipts, and, only if you ask for it, the Morning Gazette. We also send a reminder when a case you lead has had nothing done on it for two days: at most one a day, for up to fourteen days. If you leave the first case open and play nothing for about a day, we write once about it, and twice at most in all. If you have not played at all for three days, we send a letter about the soul of a case you lead, the first case included: then one every five days while you are away, and one a week after thirty days, until you come back. You never receive more than one reminder a day. Reminders are on when you join, because they are about a game you are already playing (legitimate interest). Every reminder has a link that turns reminders off at once, without signing in, and you can also turn them off in Standing preferences, under Tube deliveries. A reminder holds only your case number and, once the soul has told you its name, that name. It is sent through our email delivery provider.
Artificial intelligence
Characters, stories and some moderation decisions are produced by AI models from Anthropic (Claude) and TypeSafe (Jev). We send them game text only: never your email address, your real name, your photograph or payment details. Anything doubtful goes to a person.
Who processes data for us
Supabase (database, authentication, file storage), Vercel (web hosting), Anthropic and TypeSafe (AI), an email delivery provider, and Stripe (payments). Each works under a data processing agreement.
Payments
When you buy Lumens, your payment is handled by Stripe, Inc. (and its affiliates), which receives your card or payment details directly; we never see or store your full card number. We receive and keep: the amount, currency, date, the country used for tax, the last four digits and brand of the card, and Stripe's reference for the payment. We keep these records for 10 years because tax law requires it, even if you delete your account; they are then no longer linked to your game profile. Stripe's privacy policy: stripe.com/privacy.
Where
Our database, files and web servers are in the United States (Oregon). If you play from the European Union or the United Kingdom, your data is transferred there under standard contractual clauses. Some processors may process data in other countries under the same safeguards.
How long
Until you delete your account. When you do, your personal data is deleted, and so is our record of which reminders we sent you and about which case. Objects you handled stay in the world, credited to "a former keeper". Records we must keep by law (for example payment records, once payments exist) are kept for the legal period without game data.
Your rights
You can see and download your data (Settings, Export my data), correct it, delete your account (Settings, Close my file), object to processing, and complain to your data protection authority.
Age
You must be 16 or older to play. We keep only the month and year of birth and your country.
Contact
luzzifuge@gmail.com