Alterhaven Privacy Policy
Updated November 7, 2026.
Alterhaven is run by Hunter Thomas LLC, Oregon, USA. This page tells you what data Alterhaven keeps, why, and what you can do about it. Questions or requests: email chase@hunterthomasllc.com.
The short version
- We never show ads, never sell your data and use no analytics or tracking scripts.
- You can play without an account. Then we keep a one-way code for your device, not your address.
- We keep what we need to run your account, your games, your saves and your credits.
When you sign in
- You sign in with Google. Google gives us your email address, your name, your profile picture link and a fixed account id. We ask only for "openid", "email" and "profile".
- Your public profile shows your handle, your picture and your Arcade games. It never shows your email address.
- Your picture loads from Google. We do not copy it.
Cookies and storage in your browser
kb_sessionkeeps you signed in. It lasts 14 days and renews while you use the site.kb_oidcprotects the Google sign-in step. It lasts 10 minutes.- One local storage item remembers that you saw the feedback hint.
- Games run on a separate play address that sets no cookies. A game's saved data goes to your save slot on our server, so your saves follow you. You can download your saves.
Network addresses
- Our server logs record your network address with each page request, to keep the service working and safe.
- We turn your address and browser into a one-way code to count plays and keep guest saves, likes and scores. We cannot turn that code back into your address.
- To stop abuse of free welcome credits, we keep a one-way code of your network, not your address.
- Short-term speed limits use your address in memory only. It is gone within an hour.
What you make and post
- Your games, ideas, notes, pictures, test reports and feedback are kept so that you and your team can use them.
- New games are private. You choose when a game is unlisted or in the Arcade.
- Discussion posts and Arcade games are public, with your handle. Rating text is shown only to you; others see the average.
- Feedback can include device details (screen size, browser, game errors) only when you tick the box.
Payments
- Stripe runs checkout. We send Stripe your account id, your email address and what you buy.
- We never see or keep your card number. We keep a record of each purchase and your credit balance.
Services that get data
| Service | What it gets | Why |
|---|---|---|
| Your sign-in | To sign you in | |
| Stripe | Account id, email, purchase | To take a payment |
| Cloudflare Turnstile | Your network address, at sign-in and at a new account's first post | To stop bots |
| Email service | Your email address and the note text | Only if you turn on email messages |
| Telegram | Your Telegram chat and the note text | Only if you link Telegram |
| AI model providers | Your game ideas, code and notes | To build and change your games |
| GitHub or your git host | Your game code | Only if you connect a repository |
- If you add your own model keys, we keep them encrypted and use them only for your games.
- If you pair your own computer, it sends us basic system details so that it gets the right jobs.
Your choices
- Sign out at any time. That ends your session at once.
- Remove access tokens, model keys, repositories and git accounts in your settings.
- Turn email and Telegram messages on or off in your settings. They start off.
- To get a copy of your data, or to delete your account and its data, email us. We answer within 30 days.
Children
- Some studios make calm games for young children. Children can play them without an account. Feedback and test forms on those games are marked "For grown-ups", and their games have no discussion board.
- Accounts are for people 13 and older. If you think a child under 13 made an account, email us and we delete it.
Changes
We can change this policy. We tell you first, on this page and by email.