Account information
We store your screen name, email address, password hash, date of birth, UK eligibility confirmation and acceptance time. Passwords are hashed rather than stored as readable text. Sessions let the server recognise a signed-in account; signing out invalidates the current session.
Product activity and preferences
The server records your fictional credit balance, the welcome allocation, Daily Stash claims, settled game rounds and bounded credit activity. It also stores the scarf, vault-glow and session-reminder settings you explicitly choose, and the end date of any account break. These records provide continuity, calculate your Hoard Shelf, prevent repeated claims and enforce your limits.
Support and password recovery
Support stores your reply email, topic, message and reference. Do not include sensitive documents, passwords or payment information. Password-reset tokens are stored as digests. Brevo delivers account confirmation, password recovery and support messages. ImprovMX forwards inbound support email to the support inbox and administration system. These providers process message content and delivery information to deliver the service.
Cookies and optional services
Essential cookies maintain sessions and protect state-changing requests. Optional comfort cookies remember your reading light. With your separate permission, Google Analytics 4 measures visits and navigation on public pages using cookie identifiers and technical information such as browser and device details. The Google tag is downloaded when a page loads, so Google receives connection information, including your IP address, for that download. Analytics events and cookies remain disabled until you grant analytics permission and the measurement setup is active. We do not send account details, credit balances, support messages, URL query strings or password-reset tokens. Advertising features are not enabled. Optional Google sign-in is explained separately below. You can refuse or withdraw analytics in Cookie Preferences.
Google Analytics and international processing
Google provides the optional analytics service and may process measurement information on servers outside the United Kingdom, including in the United States. Analytics is based on your consent. See Google’s Privacy Policy at policies.google.com/privacy and its partner-site data explanation at policies.google.com/technologies/partner-sites. Withdrawing consent stops future collection; it does not automatically delete measurements already received by Google. Contact hello@alokasko.com with privacy questions.
Security and retention
Server validation, password hashing, protected requests and rate limits help reduce misuse. Account records are retained while necessary for account continuity, security and support. Cloudflare provides DNS, HTTPS delivery and network protection; the application and database run on our hosting server. These services may process connection information, including IP addresses. Contact us to request deletion; we may retain limited records needed to enforce an active exclusion or resolve misuse.
Your choices and questions
Use Support to ask about access, correction or deletion of your information. Use Cookie Preferences to withdraw optional storage and Player Care to manage access breaks. Contact hello@alokasko.com for privacy requests and product questions.
Optional Google sign-in
When you choose Google sign-in, Google shares your verified email address, basic profile name and a stable Google account identifier with Hamster Hoard. We store the identifier to recognise your linked account and use your verified email as the account contact. Google does not provide us with your password. We do not request access to Gmail, Drive, contacts or other Google services, and do not retain Google access or refresh tokens. New users must still confirm their date of birth, UK location and acceptance of our Terms. Existing accounts are linked only after password confirmation. Google processes the sign-in on its own systems, potentially outside the United Kingdom, under its Privacy Policy at policies.google.com/privacy.