Privacy Policy
Lab Hangout is a small multiplayer pixel game run by Josh Mathers, who is responsible for your data. This page explains what the game stores about you, why, and what you can do about it. If anything is unclear, email joshmathers3@gmail.com.
What we collect
- Your player ID. When you play as a guest, you get a random ID. Nothing else is needed.
- Your login details, if you log in with Discord or Google. The provider shares your email address, your account ID with them and basic profile details (such as your name and profile picture link). We use these only to log you in. They are never shown to other players.
- Your game profile. The in-game name you pick and how your character looks. Other players can see these.
- Your progress. Your tokens, prizes, unlocked items, starred friends (their player IDs and names), your fish log, found constellations and your high score.
- Chat and reports. Chat messages are shown to players in the same room. They are also kept in a moderation log with your player ID and the time. If you report a player, or someone reports you, the report is stored with that player's recent chat messages.
- Live play. Where you walk, your emotes and what you're doing are sent live to other players on your server. None of this is stored.
- Security and technical data. We keep invite-code attempts (to stop guessing) and which server you're on. Cloudflare Turnstile checks your browser to tell people from bots. Our hosting providers keep standard server logs, which include IP addresses.
Why we use it
We use your data to run the game: to log you in, save your progress and show you to other players. We also use it to keep the game safe: to filter chat, stop spam and bots, and deal with reports. We do not sell your data. We don't use it for advertising and we don't use any analytics or tracking.
Who else handles it
These services run parts of the game for us and process data on our behalf:
- Supabase (database, logins and live multiplayer)
- Vercel (hosts the website)
- Cloudflare (Turnstile bot check for guests)
- Discord or Google (only if you choose to log in with them)
- Google Fonts (the game's fonts are loaded from Google's servers)
Some of these services may process data outside your country.
Browser storage
The game uses your browser's local storage to keep you logged in, remember your settings and keep a copy of your save. There are no advertising or tracking cookies. If you clear your browser data while playing as a guest, that guest player can't be recovered. Log in with Discord or Google to keep your progress.
How long we keep it
We keep your account and progress for as long as your account exists. We keep chat logs and reports for as long as they're needed to moderate the game. We may delete guest players that haven't been used for a long time. You can ask us to delete your data at any time.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything linked to it. Email joshmathers3@gmail.com from the email address you log in with, or include your in-game name. If you're in the UK and unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).
Children
Lab Hangout is not for children under 13. If you think a child under 13 has an account, email us and we'll delete it.
Changes
If this policy changes, we'll update this page and the date at the top.