Hero Huddle Privacy Policy
This Privacy Policy explains how Marcus Twichel (“we,” “us,” or “I”)
collects, uses, and shares information when you use the Hero Huddle
application and related services (the “Service”), published under the
app identifier com.herohuddle.
It should be read together with our Terms of Use.
1. Who we are
Hero Huddle is a personal project published by Marcus Twichel, an individual. For privacy questions or requests, contact:
Email: marcus@herohuddle.com
2. Information we collect
Account and authentication
- Email address — used to create and sign in to your account via one-time passcodes (OTP). We do not use passwords.
- Authentication session — tokens that keep you signed in are stored on your device (including via secure storage used by our auth provider).
Profile
When you set up or edit your profile, we may store:
- Username and display / full name
- Pronouns
- Bio
- Preferred game systems
- City (free-text, not precise GPS)
- Avatar image (uploaded from your photo library)
Social features
- Friend relationships
- Friend requests (who sent / received them and status)
Campaigns and sessions
- Titles, descriptions, and game system
- Whether a session is online or in person
- Location as free text you enter (not device GPS)
- Visibility (invite-only, friends-only, or public to signed-in users)
- Player and game-master membership (linked users or unlinked names/status)
Notifications
- In-app notification records for you (title, body, type, read state, and related payloads such as session or sender identifiers)
On-device cache
The app may cache feature state locally (for example via HydratedBloc) to improve performance. Cached data on the device is typically cleared when you sign out.
Information we do not collect today
As of the effective date, Hero Huddle does not:
- Process payments or collect payment card data
- Collect precise GPS location from your device
- Use third-party analytics, advertising, or marketing trackers
- Use crash-reporting SDKs such as Sentry or Crashlytics
- Collect push-notification device tokens (no push notifications)
- Access your camera for capture (avatar upload uses the photo library / gallery picker only)
We may update this Policy if those practices change.
3. How we use information
We use the information above to:
- Create and authenticate your account (including sending OTP emails)
- Provide profiles, friends, campaigns, sessions, and in-app notifications
- Show content to other users according to visibility and friendship rules
- Operate, maintain, and secure the Service
- Respond to support and deletion or access requests
- Comply with law when required
We do not sell your personal information.
4. How information is shared and who can see it
Other users
Hero Huddle is a social product. Depending on settings and relationships:
- Email is not shown to other users through the profile directory used for search and discovery
- Directory profile fields (such as username, display name, and avatar) may be visible to other signed-in users
- Avatar files are stored in a public storage bucket and may be reachable by URL
- Friends and related social data may be visible to authenticated users as implemented by the Service
- Campaigns and sessions you mark public or friends-only may be visible to other signed-in users; invite-only content is limited to participants you include
Do not put secrets or highly sensitive data in public fields.
Service providers (processors)
We use third parties to run the Service, including:
| Provider | Role |
|---|---|
| Supabase | Authentication, database (with row-level security), and avatar storage |
| Shorebird | Mobile builds and over-the-air updates where used |
| Google Fonts | Font files that may be fetched when you use the app |
These providers process data on our behalf or as needed to provide their services. Their own privacy policies apply to their operations.
Legal and safety
We may disclose information if required by law, legal process, or to protect the rights, safety, or integrity of users or the Service.
5. Retention
We keep account and Service data while your account remains active and as needed to provide the Service. On-device caches are generally cleared on sign-out.
In-app account deletion is not yet available. To request deletion of your account and associated personal data, email marcus@herohuddle.com. We will delete or anonymize data we control within a reasonable time, except where we must retain information for legal, security, or operational reasons (for example, residual backups for a limited period).
6. Children
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information, contact us and we will take steps to delete it.
7. Security
We use industry-standard measures appropriate to a small consumer app, including:
- Passwordless email OTP authentication
- Database row-level security (RLS) policies
- Secure storage of session credentials on device where supported
No method of transmission or storage is completely secure. We cannot guarantee absolute security.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to object to or restrict certain processing.
You can:
- View and update much of your profile information in the app
- Sign out to clear local session and cached state
- Email us to request access, correction, deletion, or export of personal data we hold
We will respond to verified requests in accordance with applicable law. We may need to confirm your identity (for example, via your account email) before fulfilling a request.
If you are in a region with specific privacy laws (such as the GDPR or CCPA/CPRA), you may have additional rights. Contact us to exercise them. This Policy describes our practices; it is not a claim of certification or formal compliance program.
9. International processing
We and our providers may process and store information in the United States and other countries where infrastructure is located. Those places may have different data-protection laws than your home country. By using the Service, you understand that your information may be transferred to those locations as needed to operate Hero Huddle.
10. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the revised Policy with a new “Last updated” date. Material changes will be indicated by updating that date (and, where appropriate, additional notice). Continued use of the Service after an update means you acknowledge the revised Policy.
11. Contact
Privacy questions and data requests:
Marcus Twichel
Email:
marcus@herohuddle.com
Product: Hero Huddle (com.herohuddle)