Privacy Policy
In short: we keep only what the game needs to run your hive, keep you safe in chat and let you sign in. We don't show ads, we don't use analytics or tracking, we don't sell anything, and we never sell your data. You can delete your account at any time from inside the game.
1. Who we are
Apidae is published by Apidae Games Inc, France (the "data controller"). For any privacy question or request, write to support@apidaehive.dev.
2. What we collect
| Data | Why |
|---|---|
| Device identifier, stored only as a keyed hash (we never keep the raw value) | To give you a guest hive without asking you to sign up. Removed when you link an account. |
| Player name (randomly generated) and game data: your hive, buildings, bees, troops, items, resources, marches and in-game mail | To run the game. |
| Email address and password, if you choose email sign-in. The password is stored only as an Argon2id hash. | To sign you in, verify your address and let you reset your password. |
| Google, Discord or Apple account identifier and the email address that provider shares with us, if you choose that sign-in | To sign you in with that account. We receive nothing else from these providers (no contacts, no friends lists). With Apple's "Hide My Email" we only see the relay address. |
| Sign-in sessions: an optional device name (for example "Pixel 8") and when each session started and was last used | To keep you signed in, and to let you sign out of every device. |
| Chat messages you post, plus the players you mute or block | To provide chat and its safety tools. |
| Reports you send or that concern you, including a copy of the reported messages | To moderate chat and protect players. |
| Acceptance of these terms (version and date) | To record that you agreed to the Terms of use. |
| Technical logs: requests to our servers, errors, timestamps | To keep the service running and secure. |
| Emails you send to support | To answer you. |
We do not collect your location, contacts, photos, advertising identifiers or payment details. Apidae has no purchases and no ads.
3. Legal bases
- Contract: running the game and your account (GDPR art. 6(1)(b)).
- Legitimate interests: keeping chat safe, preventing abuse and cheating, securing the service (art. 6(1)(f)).
- Legal obligations, where a law requires us to keep or disclose something (art. 6(1)(c)).
4. How long we keep it
- Chat messages: 72 hours (at most the latest 500 per channel), then deleted automatically.
- Technical logs: 7 days.
- Guest hives (never linked to an account) not used for 30 days are deleted.
- Your account: as long as you keep it. When you delete it, it disappears from the game at once and is permanently erased after 14 days (signing in during those 14 days lets you restore it).
- Reports (including the copy of the reported messages) are kept as moderation records after an account is deleted, so that we can act on abuse and answer complaints.
- Support emails: as long as needed to handle your request.
5. Who processes it
- Amazon Web Services hosts our servers, database and email sending, in the United States.
- Google, Discord and Apple, only if you choose to sign in with them, under their own privacy policies.
- ImprovMX forwards mail sent to support@apidaehive.dev.
Transfers outside the European Union rely on the EU-US Data Privacy Framework where the recipient is certified, or on the European Commission's Standard Contractual Clauses. We don't sell or rent your data, and other players only ever see your player name, your hive on the map and what you post in chat.
6. Your rights
You can ask to access, correct, export or erase your data, to restrict or object to its use, and to withdraw any consent. Write to support@apidaehive.dev from your account's email address (or tell us your player name). We answer within one month. You can delete your account yourself: see Delete your account.
If you are unhappy with our answer you can complain to the French data-protection authority, the CNIL, or to the authority of your country.
7. Age
Apidae is for players aged 16 and over. We don't knowingly collect data from younger children; if you believe a child under 16 has an account, contact us and we will delete it.
8. Security
Traffic is encrypted (HTTPS). Passwords, device identifiers and sign-in tokens are stored only as hashes, and sign-in tokens from providers are encrypted. Access to production systems is limited to the developer.
9. Changes
If we change this policy in a way that matters, we will update the date above and tell you in the game.