HAJMAPRIVACY
Privacy policy
Your phone number, your name, and your games — that’s all, and none of it goes anywhere. This page spells out exactly what happens to it.
- 1
What we collect
Your phone number and name — Your phone number is your identity here; your name is only what shows in the game.
Your email — We ask for it once, before your first match, and keep it on your account so we can reach you about your credits, games, and purchases — never marketing. You can change it in My account anytime, and you’ll still log in with your number.
Your games, credits, and question history — We store your games, your credits, and the questions already played, so you can resume a paused match and never get a repeat. Only your own account can read your rows.
A device identifier — A random value stored in your browser so one device can’t open more than three accounts. It doesn’t identify you or follow you across sites.
- 2
Why we collect it
Running your account — Logging in, keeping your games and credits, and resuming a match where it stopped.
Your WhatsApp verification code — When you sign up or reset your password, your number goes to WhatsApp (Meta) so the code can reach you — only at that moment. We never store the code itself: we keep a fingerprint of it that’s erased as soon as you use it, or after ten minutes.
The code-message log — Every code message leaves one line with us: your number, its time, its step (sign-up or recovery), whether it went through and what it cost — so we know our spend and can catch abuse. The line holds no code and no message text.
Paying through Paddle — When you buy, the payment window is Paddle’s — the merchant of record — and Paddle asks for your email for the receipt, and your card and country for tax. What reaches us is the transaction number, the pack, the amount and its currency, and your account id — never your email or card.
Protecting the account — Counting failed attempts and locking a number for fifteen minutes after five, plus limits on how many requests one connection may make.
One free first game — Your first game is on us once per number or email verified with a code. To keep it that way, we store a one-way fingerprint that can’t be turned back into your number or email, and it stays after you delete your account so the gift isn’t claimed twice.
We don’t sell your data
Or rent it, or share it with advertisers. We don’t have any.
No tracking, no ads
No ad pixel, no third-party analytics following you. All that sits in your browser is your session and a snapshot of your data, so the site opens without waiting.
We count usage ourselves
We count the events that tell us the site works: an open, a game built, a match finished, an error on screen. The row holds the event name, its time and a random id that dies when the tab closes — no cookie, no phone number, no account name, and none of it leaves us. A device with “Do Not Track” on is not counted at all.
Who runs the data
Accounts and tables run on Supabase, the site on Vercel, code messages through WhatsApp from Meta, and payments through Paddle. All of them are service providers only — we hand them nothing for any other purpose.
Want your account and all its data deleted? Message us on our social accounts below and it’s gone — no questions asked.
Read the rules