Privacy Policy

Rocky Hub is a private, members-only arcade and creator studio. You play polished mini-games with your circle, family, or team, and you can build your own games just by describing them in plain words. It's invite-and-account based, not a public free-for-all, and what you make stays inside the trusted groups you share it with.

This policy explains, in plain language, exactly what we keep, what we never touch, and the choices you have. The service is operated by Inverpatagon LLC.

We keep only what we need to run your account and keep the community safe:

• Your profile, the name or username you choose.
• Your account email, used to sign in, verify you, and reach you about your account.
• Your date of birth, asked once when the account is created so we can apply our age rules (see Children and families below). It is never shown to anyone else.
• Your password, hashed, if you sign in with a password, we store it only as a salted hash. We can never read or recover your actual password.
• Sign in with Apple, if you choose it, we store the identifier Apple gives us, not your Apple password.
• A 6-digit email code, a short-lived code we send to confirm it's really you at sign-up and sign-in (two-factor).
• Granted apps, which games and tools you've been given access to.
• Blocks and reports, the safety signals you send us, so we can keep your groups healthy.
• Content you create, the games and creations you build with our tools.

Your game progress lives on your device. Scores and how far you've gotten are saved on the device you play on, not on our servers.

You buy credits on the website to create and iterate on games. Payments are handled by Stripe, a third-party payment processor. Rocky Hub never sees or stores your full card number, that goes straight to Stripe. On our side we keep only a record that a purchase happened (such as the date and amount) and your current credit balance.

Credits are a prepaid digital good. They have no cash value, are not transferable, and are generally non-refundable except where the law requires.

Just as important as what we keep is what we never gather:

• No phone number.
• No location. We don't track where you are.
• No contacts or address book.
• No advertising identifiers.
• No third-party analytics or trackers.

There is no advertising on Rocky Hub, and we never sell your data, not to advertisers, not to anyone.

We use your information only to run the service you asked for: to set up and secure your account, verify sign-ins with the email code, show you the games and tools you have access to, keep your groups safe when you block or report, process your credit purchases, and answer you when you get in touch. We don't use it to build advertising profiles.

Multiplayer messages aren't stored. When you play live with others, those messages are relayed between players in the moment and are not saved on our servers, once they're delivered, they're gone from our side.

Created games run in a safe sandbox. Every game built with our tools runs in a contained space and is automatically checked before it goes live, so a creation stays inside its box and can't reach into your device.

Security is built in, not bolted on:

• Everything is encrypted in transit, all traffic between you and Rocky Hub travels over an encrypted connection.
• Passwords are never stored in the clear, only as a salted hash.
• Card numbers never touch our servers, Stripe handles them.
• Created games are sandboxed and checked automatically before going live.

No online service can promise perfect security, but we work to keep the amount of data we hold small and well-guarded.

You're in control. You can delete your access at any time from Settings inside the app, or by emailing us at our support form. When you delete your account, we remove your profile and account data. (We may keep a minimal purchase record where the law requires it, and content you've shared into a group may remain visible to that group unless you remove it first.)

You must be 13 or older to create a Rocky Hub account. Before an account exists, the sign-up asks for your date of birth. It is a plain date question: we don't tell you the cut-off first, because an age question that hints at the right answer isn't really a question.

If the date says under 13, we refuse the account and we keep nothing. No email address, no name, no username, no password, no verification code, no account row, and no message is sent. The only thing that stays behind is a one-way fingerprint of the address that was used, so the same sign-up can't be retried straight away with a different year. That fingerprint is scrambled with a secret key, it can't be turned back into an email address, and it expires after 30 days and is then deleted. This is deliberate: by collecting nothing from a child under 13, we never hold a child's personal information in the first place.

If you are 13 to 17, you can have an account. We store the date of birth you gave us so we know you're a minor, and we use it only to keep age-appropriate limits in place, such as keeping adult-only features switched off. It is never shown on your profile or to other members.

If a member tells us later that they're under 13, we close their access right away and we do not keep their date of birth. A parent or guardian can then get in touch with us to sort out what happens next.

For parents and guardians. A responsible adult should set up and supervise a young player's access, and adults who invite children into their circle are responsible for supervising them. If you believe a child under 13 has an account here, or you want a young person's account and data removed, write to us through our support form and we will close the account and delete the information associated with it. You don't need an account of your own to ask.

If we make a meaningful change to this policy, we'll update this page and revise the date above. Questions, requests, or anything at all about your privacy, email us at our support form. The service is provided by Inverpatagon LLC.