Privacy policy

Policy version: 2026-10-17

Operator: Small Hours. Contact: Contact details must be configured before public launch.

This release is intended for people aged 13 or older. Guest play is available without an account. If we learn that an account belongs to a child under 13, contact us so we can remove it. A child-directed release requires a separate policy and consent process.

Game and account data

The game saves scores, preferences, demo lives, and a random explorer key on your device. Connected rankings send a private explorer key, the daily course, score, time, and clean or rescued category. The server stores a hash of guest explorer keys and displays generated explorer names.

Browser accounts use Google sign-in and collect your Google account identifier, verified email, session records, ranking identity, and best scores. Google handles your Google password; Orbit Hop never receives it. If the optional email/password fallback is enabled, it stores a salted password hash and expiring verification/recovery tokens. Passwords and email addresses are never published or sent in analytics. Essential session cookies are HttpOnly and used to keep you signed in. Browser accounts are optional; the native apps currently offer guest play.

Optional analytics

Analytics are off until you choose to enable them and confirm you are 13 or older. We collect random device and session identifiers, platform, sessions, run starts and outcomes, score milestones, rescues, and pack interest. Identifiers are hashed by the server. If signed in on the website, events can be associated with your account. We do not collect gameplay recordings, precise location, contacts, advertising identifiers, or your password. We do not use these analytics for cross-app tracking or sell this data.

Use Privacy choices to stop collection and request deletion of this device's analytics. If offline, deletion retries when connected. Analytics remain in active storage for 30 days. Reports include consenting players only and may not represent all players.

Retention and deletion

Daily rankings are pruned after about a week. Account best scores remain until account deletion. Sessions expire within 30 days; unverified accounts are removed after seven days. Minimal hashes of retired account explorer keys are kept for 30 days to prevent stale clients recreating deleted rankings.

Sign in and use Account → Export data or Delete account. Deletion removes your account, sessions, saved account rankings and balances, and account-linked analytics. Deletion does not clear guest data on other devices. Purchase providers may retain transaction records as required by law; the game retains unlinked receipt markers to prevent duplicate credits. Operator-controlled backup retention and hosting regions must be finalized before launch.

Service providers

When connected, hosting providers process network requests and your IP address. Request limits temporarily use IP addresses in memory, cleared within about two minutes after their window expires. Google processes browser sign-in through its identity service. Only the openid and email scopes are requested; no Google files, contacts, calendar, or photos are accessed. If email/password fallback is enabled, account verification/recovery emails use the configured transactional email provider. This build has no live payment or advertising service. If enabled later, payment and ad providers, their data uses, consent controls, and policies must be disclosed before release.

Your choices

You can play as a guest, decline optional analytics, clear local game data through your browser or device settings, export or delete your account, and contact the operator about access, correction, or deletion. Privacy rights depend on your location. Changes to data uses require an updated policy and consent where required.