Legal

Privacy — HSH's Porter.

This game has no accounts, asks for no names, and collects nothing about you. There is no advertising, no analytics and no tracking of any kind, in any mode. Played on your own it opens no network connection at all and everything it keeps is one save file on your device. Playing with other people is a choice you make in the LOBBY, in three words, and each one is set out below.

Last updated 19 September 2026

Which app this policy covers

This page covers one app, and only one. Our other mobile games — which collect nothing and never open a network connection — are covered separately at privacy for our mobile games.

• HSH's Porter com.hauntedspacehotel.porter A 3D space flight, trading and contract game. For players 13 and over. Not a children's title.

The short version — three words in the LOBBY

Out of the box this game is a single-player game and opens no connection at all. The LOBBY has one row with three answers, you pick it, and it is the whole of what this policy is about.

What we collect

Nothing about you. There is no account, no sign-in, no profile, no leaderboard, no advertising and no analytics. We do not have a database with anything of yours in it, in any mode. Specifically, this app does not ask for, access, collect, store or transmit to us:

• Email addresses, phone numbers or postal addresses
• Location of any kind, precise or approximate
• Contacts, calendar, photos, files, microphone or camera
• Advertising IDs, device identifiers or any other tracking identifier
• Usage analytics, gameplay telemetry, crash reporting of our own, heat maps or session recordings
• Cookies, web beacons or cross-app profiles

We run one piece of server infrastructure for this game: a relay, at relay.hauntedspacehotel.com. It exists so that people who are not in the same house can play together. It forwards the game between devices, it has no database, no account and no history, and it is described in full in section 2 — because a promise about a server is worth more when the server is named.

1 · Playing on your own — nothing leaves the device

A single-player game opens no socket and reaches no server. Your career, your ship, your cargo, your contracts and your standing with the factions are written to one save file in the app's own private storage, which no other app can read, and it is never sent to us or to anybody else. There is no cloud save and no account to attach one to.

⚠ Two ordinary facts we would rather write down than leave implied. Your device's own backup — an iPhone or iPad's iCloud backup, a Mac's Time Machine — may include that file the way it includes any app's data; that is your device's backup and your copy, and we cannot see it. On Android, backup is switched off for this app entirely. And when the game starts it looks up relay.hauntedspacehotel.com so the JOIN A GAME button is ready if you press it: that is an ordinary DNS lookup made by your device, it carries nothing about you, and no game data is sent anywhere unless you choose NEARBY or ONLINE.

2 · Playing with other people — what is sent, and to whom

One player hosts and the others join. Whoever hosts picks NEARBY or ONLINE in the LOBBY, and can change it or close the room at any time.

What travels, in both cases

• Your Commander — when you join somebody's game, your game sends them your Commander so you can fly it in their world: the ship and its fittings, what is in the hold, your money, your career and contracts, your journal and your standing with the factions. There is no name and no identifier of a person in it — the game never asks you for one.
• The flight — while you are in the room, your controls go to the host and the host sends back the state of the world: ships, ghosts, stations and prices. It is the game, and nothing else.
• The room's name — which is your device's own name, because that is the only label the other players see. On Android it is the model (for example SM-T220); on a computer it is the computer's name. ⚠ If you have given your computer your own name, that is what the other players will see; rename the device if you would rather they did not.

Nothing about a room is written to your save. While you are in somebody else's galaxy the game will not write the save file at all — what you do there is not kept, by you, by the host, or by us — and when the room ends you are put back in your own game exactly as you left it.

NEARBY — your own Wi-Fi, and no server at all

The host's game answers on your local network and the other devices find it there. That traffic goes device to device: it does not leave your network, it reaches no third party, and no server is involved — it works with the broadband unplugged. Each device sees the others' local network addresses, which is simply what talking to a device on your own Wi-Fi is. It is not encrypted, because it is a game talking to the tablet on the sofa next to it, and we would rather say that than imply otherwise.

ONLINE — a relay we run, that keeps nothing when the room closes

If the people you want to play with are somewhere else, the host can ask our server at relay.hauntedspacehotel.com to carry the room. Our server does not run the game: the host's own device is still the game, and ours passes the messages between them. What the relay is, precisely:

• It does not understand the game. It has no idea what a Commander, a contract or a ghost is. It forwards whatever it is given to the other devices in the same room, untouched, and it keeps no copy.
• While a room is open it holds, in memory only: the room's name (your device's name), how many players the host says are in it, how long it has been up, and the network addresses it needs in order to send the next packet to the right device. That is what makes the room appear in JOIN A GAME.
• When the room closes, all of that is gone. The host can close it; otherwise the relay forgets a room about thirteen seconds after the host's game stops speaking to it. There is no database, no history and no record that the room ever existed.
• It does not log player addresses. Its own diary records room numbers, player slots and counts, and by design contains no IP address and no room name. Your address is necessarily seen while packets are in flight — that is how a packet is routed, and it is true of every internet service — but it is not written down and it is not joined to anything, because there is nothing to join it to.
• There is no account, no sign-in and no profile. Nobody types anything about themselves to get into a room; you press a row in a list.
• It is not encrypted. The game speaks plain UDP, to the relay and to the devices in the room, and we would rather say so. Treat an ONLINE game as a public place: what travels is the game — ships, cargo, contracts — and we deliberately do not give it anything else to carry.

⚠ And one thing worth knowing before you press it: opening JOIN A GAME asks our server for its list of open rooms, as well as asking your own Wi-Fi, so that both kinds of game appear in one list. That question carries nothing but "what rooms are open"; our server answers it and writes nothing down. Close the list, or never open it, and no part of this section happens at all.

A room is the host's, and so is the door. The host can remove a player, who is told so and put back in their own game; while the room is open, the host's own device remembers which device it refused, and forgets it when the room closes. We are not involved in that and we keep no record of it.

3 · What you can buy

The game is free and nothing is for sale in it today. One optional purchase — a single unlock, bought once — is planned for a later update; when it ships, the store's own dialogue will say what it costs before anything is charged, and this page will say what it opens. There is no in-game currency, no subscription, and no advertising of any kind, ever.

The transaction is never ours. On Android it runs through Google Play Billing, in the Play app on your device; on iPhone, iPad and Mac it runs through Apple's In-App Purchase, in the App Store. We never see and never receive your name, your email address, your card details or your Google or Apple account — the store answers the app with nothing more than whether this device has bought it, and the app keeps that answer in a small file of its own so a purchase still works offline. Their handling of the payment is covered by the Google Privacy Policy and Apple's Privacy Policy.

What is kept on the device

• Your save — the galaxy you are playing, your Commander, the ship, the hold, the money, the contracts and your standing. One file, in the app's own private storage.
• What this device has bought — a small copy of the store's answer, so a purchase still works when you are offline. Empty today, because there is nothing to buy yet.

There is no history, no scoreboard and no record of who you played with. Uninstalling the app, or clearing its data in Android's settings, removes all of it completely.

Third parties

• Google Play — for distribution on Android, and for any optional purchase there. Google gives us aggregate, anonymised console statistics: install counts, ratings, anonymous crash reports. We cannot identify anyone from them and we have asked for nothing more.
• Apple — for distribution on iPhone, iPad and Mac, and for any optional purchase there. Apple gives us the same shape of thing: aggregate, anonymised App Store Connect statistics. We cannot identify anyone from them and we have asked for nothing more.
• The other players in your room — who are not a company and not a third party in the usual sense, but are the only people your game sends anything to. What they receive is set out in section 2.

There are no ad networks, no analytics providers, no social logins, no crash-reporting SDKs of ours and no other cloud services in this app. The relay is ours: it is a machine we rent and run, and nobody else is given anything from it, because there is nothing to give.

Permissions

The Android build declares the following. None of them gives access to anything about you, and they are normal permissions, which Android grants without a prompt:

• INTERNET — playing with other people, and only then.
• ACCESS_WIFI_STATE and CHANGE_WIFI_MULTICAST_STATE — so devices can find a game on your own Wi-Fi.
• WAKE_LOCK — keeps the Wi-Fi awake while this device is hosting, so the others do not drop out; released when hosting stops.
• The release build also carries ACCESS_NETWORK_STATE and com.android.vending.BILLING, which Google's billing library needs in order to ask Play about a purchase.

On iPhone, iPad and Mac, the system asks your permission the first time the game looks for a game on your local network. Say no and NEARBY goes quiet; single player and ONLINE are unaffected. On Android 17 and later, Android may ask the equivalent, and for the same reason — only when you are looking for or hosting a game nearby, never at launch.

The game requests no other permission at all: no location, no storage, no contacts, no camera, no microphone and no advertising ID.

Children

This is not a children's title and is not in Google Play Families. It is intended for players aged 13 and over: it is a space game with ship-to-ship combat, and it can put you in a room with people you do not know. If you are a parent looking for our games for young children, they are the ones on privacy for our mobile games, and they open no network connection at all.

Third-party licences

This game is built on other people's work as well as ours. The notices that work is owed are listed on our third-party licences page.

Your rights

Data-protection law gives you the right to access, correct, export or delete the personal data a company holds about you. We hold nothing that identifies you — there is no account, the relay keeps nothing once a room closes, and everything the game keeps is on your own device. To remove that, uninstall the app or clear its data in your device's settings. If you want to ask about any of this, write to us.

Changes to this policy

If this game ever changes what it does with data, we will update this page and the date at the top before that version ships, and we will say plainly what changed.

Contact

Write to [email protected] — the same address on our Google Play and App Store listings. A person answers it.