Privacy Policy
Hollow Creek is a small interactive horror town run by Night Advisory. This page explains what we keep about you, why, and how to get rid of it. Short version: your Instagram name and your house are public, your email is private and only used to sign you in, and you can delete everything at any time.
Who is responsible
The controller of your personal data is Michal Halabrín, a private individual, Slovak Republic, the operator of Night Advisory. Contact: support@nightadvisory.net. We have not appointed a data protection officer and are not required to.
What we keep and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| The Instagram name you type, your house number and address in town, the date you moved in, your resident (the character you dress up) and whether your character went missing in the story | To give you a house and show it in the town. This is public: anyone can see it on the site, and it can appear in Night Advisory videos and posts (see “Night Advisory content” below). | Art. 6(1)(b), providing the service you asked for under our Terms |
| Your email address (only if you sign in) | To send you a sign-in code or link and to keep your house, resident and friends on all your devices. We never show it publicly, never sell it and never send newsletters. | Art. 6(1)(b) |
| Your friends list (Instagram names you add) | To highlight your friends’ houses for you. Only you see your list. | Art. 6(1)(b) |
Two small cookies: hc_k (a random key that proves this browser claimed your house) and hc_s (keeps you signed in). In your browser’s storage we may keep the house number of a friend who invited you. | Strictly necessary for the site to work. No advertising or tracking cookies. | Art. 6(1)(b); storage strictly necessary for the service (no consent needed under §109(8) of Act 452/2021 Coll.) |
| Your IP address | Used briefly to stop spam and abuse. We store only a one-way hash of it mixed with a secret that changes every day, never the address itself. The hash is kept up to 30 days to stop fake invites; rate-limit counters expire within a day. | Art. 6(1)(f), our legitimate interest in keeping the town safe |
| Bot check (Cloudflare Turnstile) | When you claim a house or ask for a sign-in code, Cloudflare checks that you are human using signals from your browser. | Art. 6(1)(f) |
| Reports you send us | To look into names that break the rules. Your email is optional. | Art. 6(1)(c) and (f), duties under the EU Digital Services Act and keeping the town safe |
We do not use analytics or tracking tools, we do not make automated decisions with legal effects about you, and we do not sell or rent personal data.
Night Advisory content
The town is part of a story told in Night Advisory videos on Instagram, YouTube and Facebook. Your public Instagram name, house and resident may be shown in those videos, including when the creature visits a house. If you give up your house or delete your account, we stop using it in new content. Videos that were already published before that stay online.
How long we keep it
- Your house, name and resident: until you give up the house, delete your account, or we remove it under the Terms.
- Your email and friends list: until you delete your account.
- Sign-in sessions: 180 days. Sign-in codes: 15 minutes.
- IP hashes: up to 30 days.
- Reports: up to 12 months after we close them.
Who processes it for us
The site runs on Cloudflare, Inc. (hosting, database, sending sign-in emails, bot check). Cloudflare may process data in the United States; transfers are covered by the EU–US Data Privacy Framework, in which Cloudflare participates, and by Standard Contractual Clauses. The map and 3D libraries load from Cloudflare’s cdnjs. We share data with nobody else, unless the law requires it.
Your rights
You can ask for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to processing based on legitimate interest. Most of this you can do yourself on the site: Account → Download my data and Account → Delete my account, or Give up this house on your house card. If you never signed in, email us from the address you want us to reply to and tell us your Instagram name and house number. We answer within one month.
You can also complain to the Slovak data protection authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk, or to the authority where you live.
Age
Hollow Creek is for people aged 16 and over. If you are younger, please don’t claim a house or sign in. If we learn that a house belongs to someone under 16, we remove it.
Changes
If we change this policy, we update the date at the top. Bigger changes are announced on the site.