Legal

Privacy.

We are a two-person studio, not an advertising business. We collect as little as each product can actually run on, we do not sell anything about you to anyone, and where the answer is "nothing at all" we say so plainly.

Last updated 15 August 2026

What this covers

• This website, hauntedspacehotel.com.
• Manager Online — the browser game at manager.hauntedspacehotel.com, including play through Discord.
• Vacancy — our game on Steam.
• The playtest list — the signup at /playtest.
• Our mobile games — BumpHex, WordHex and their siblings, which collect nothing and have their own policy: privacy for our mobile games. That is the page to read if you are a parent.
• Large Language Murder — the one game of ours that talks to anything. It has no accounts and collects nothing, but if you give it an API key of your own it sends what the table typed to a language model, so it is documented on its own: privacy for Large Language Murder.

Our shop is run by a third-party storefront, and the physical board game is sold by The Game Crafter. Those companies handle their own checkout and their own privacy policies; we never see your payment details.

This website

The site is a set of static pages served by Cloudflare. There is no advertising on it, no analytics product, no tracking pixel and no third-party script watching you read. We set no cookies of our own. Cloudflare, as our host, keeps standard server logs and may set a security cookie to tell humans from bots; that is theirs, under Cloudflare's privacy policy.

One page — the convention crew signup — stores the names people type into it, so the roster survives a page reload. It holds names only, no contact details, and it is deleted after the event.

If you email us, we have your email. We keep the correspondence, we answer it, and we do not add you to anything.

The playtest list

The signup at /playtest is the only form on this site that stores contact details. If you fill it in, we store exactly this and nothing else:

• The name you gave us.
• Your email address.
• Which platforms you ticked — Android, Windows, browser, tabletop.
• Whatever you typed in the two optional boxes.
• The date you joined, and the date you last updated your entry.
• The two-letter country code Cloudflare attaches to the request, which we use to guess your timezone so we do not mail you at four in the morning. We do not store your IP address with the record.

We use it for one thing: telling you when there is a build to play. We do not sell it, rent it, share it, or add you to any other list, and no third party — no mailing platform, no analytics, no advertiser — ever receives it. It lives in our own storage at Cloudflare, and it stays there until you ask us to remove it.

Getting off the list takes one email. Reply to anything we send you, or write to [email protected], and we delete the record — the whole record, not a flag on it. Ask us what we hold and we will send you your record verbatim.

The playtest list is for adults. Please do not sign up if you are under 16; if you want your child to play something, write to us and we will talk to you instead.

Manager Online

Manager Online has accounts, so it necessarily holds some data about you. What we store:

• Your username, email address and a hashed password — never the password itself.
• Your display name, avatar image URL and timezone.
• Your game records: games played, moves, results, statistics and rankings.
• Your friends, groups and invitations.
• Your settings and notification preferences.
• If you play through Discord: your Discord user ID, username, display name and avatar, so the seat at the table has your face on it. We ask Discord for nothing else.
• Ordinary server logs, which include IP addresses, kept for security and debugging.

We use it to run the game and to send the email you asked for — your turn is up, a game finished. We do not sell it, rent it, or hand it to advertisers. It lives on our own server.

Manager Online is not a children's product. It is intended for players aged 13 and over, and we do not knowingly create accounts for children under 13.

Want your account and its data deleted? Email us and we will do it. We will keep anonymised game results where deleting them would corrupt other players' game histories, and we will tell you if that applies.

Vacancy on Steam

Vacancy is distributed through Steam. Valve handles your account, your purchase and your payment details under its own privacy policy — we never see them. Steam gives us aggregate, anonymised statistics about players and crashes, and that is all we get.

Our mobile games

BumpHex, WordHex and our other mobile games collect nothing at all — no accounts, no ads, no analytics, no tracking, nothing transmitted off the device. Because several of them are made for children, they are documented separately and in full on their own page, which names every app and its Android package: privacy for our mobile games.

Large Language Murder is the exception, and it is deliberately kept off that page. It is a party game in which a language model sits at the table and you try to spot it, so — if you supply your own API key — it genuinely does send the answers people typed to a third party. Everything it sends, everything it does not, and what is kept on the device is set out at privacy for Large Language Murder. It is not a children's title and is not in Google Play Families.

Your rights

Wherever you live, you can ask us what we hold about you, ask us to correct it, ask for a copy of it, or ask us to delete it. If you are in the UK, the EU or California you have those rights by statute; we extend them to everyone because maintaining two standards would be more work than just doing the right thing once. Email us and we will answer — expect a human, and expect it within a few days.

Changes

When this changes we update this page and the date at the top, and we say what changed. If a change materially affects Manager Online players, we will tell you in the game as well.

Contact

Haunted Space Hotel Studios — [email protected], or find us on Discord. Both reach the same two people.