HOLDSPOT
Privacy Policy
Last updated: 2026-09-13 · short, honest, no fine print games
The short version
HoldSPOT is anonymous. We do not ask for your name, email or phone to play. We do not use
analytics, tracking pixels or advertising. One functional cookie keeps your game alive —
that is the entire "profile".
What we store
- Session cookie (hs_sid) — a random identifier, valid 365 days, that links your
browser to your game identity. Delete the cookie and your identity is gone; we cannot
link it back to you.
- Game data — markers you place, battles you fight, tokens you hold and their ledger
(a full history of every token movement), your chosen theme, your presence stamp
("last seen", used by game mechanics).
- SCALES contact details — only if you voluntarily add an email/phone to a project so
its winner can reach you. This is the only personal data in the system; it is shown
exclusively to the winner of that project and never in public payloads.
- Security records — rate-limit counters and action identifiers that keep the
service safe; they contain no personal identities.
What we do NOT do
- No accounts, no email addresses, no newsletters, no ads, no analytics.
- No selling or sharing of data — there is almost nothing to share.
- No profiling across sites. The map is the only place we look.
Third parties that necessarily see your IP
Loading the site involves providers we do not control: the hosting provider (serves these
pages), Google Fonts (typefaces), cdnjs (icon fonts), OpenFreeMap/OpenStreetMap (map tiles)
and BigDataCloud (place names on public pages). They receive your IP as any web server does.
We send them nothing about your identity — because we do not have one.
Where data lives
On the project's own hosting database. The public economy pulse (/world)
contains aggregates only — never identities.
Your rights
- Erasure: delete the game cookie (or use "reset identity" in the game) — the anonymous
identity and its data become unlinkable to you. For SCALES contact details you added,
ask the owner via the official Discord/Telegram channel and they will be removed.
- Access: everything your identity contains is visible to you inside the game itself.
This policy describes the service honestly and is not legal advice. It may be
updated; the "last updated" date is the valid version.