This page is maintained by HG28 to answer common questions about how we handle personal information when you use our AI game creation platform ("Service"). By using HG28 you agree to the practices described here. This Privacy Policy is provided by the operator of HG28 and is not an independent certification.
1. Information we collect
- Account data: first name, last name, email address and a hashed password when you register.
- Order data: credits purchased, selected plan, promo codes, payment method, invoice metadata and currency.
- Content you create: prompts, generated characters, worlds, assets, NPCs, quests, animations, audio and prototypes stored under your account.
- Technical data: IP address, browser and device type, referring URL, approximate location (country level) and interaction events used to keep the Service secure and to debug issues.
- Cookies and similar technologies: see our Cookie Policy.
2. How we use your information
- To create and secure your HG28 account and process purchases of credits.
- To provide, personalise and improve the AI generation tools you request.
- To communicate service-critical messages (order confirmations, bank transfer instructions, password recovery, security alerts).
- To detect and prevent fraud, abuse and violations of our Acceptable Use Policy.
- To meet accounting, tax and other legal obligations.
3. Legal bases (EEA/UK users)
We rely on contract performance for account and order processing, legitimate interests for security and product improvement, consent for optional analytics and marketing cookies, and legal obligation for tax and accounting records.
4. Sharing and subprocessors
We share personal data only with providers that help us operate the Service — hosting, payment processing, email delivery, error monitoring and AI model providers used to generate content. Each provider is bound by data-processing terms and processes data only under our instructions. Payment card details are never stored on our servers.
5. International transfers
Some subprocessors are located outside the EEA/UK. Where required, we rely on Standard Contractual Clauses or an equivalent transfer mechanism.
6. Retention
We keep account data while your account is active and for up to 24 months after deletion for legal and fraud-prevention purposes. Invoice records are retained for the period required by applicable tax law (typically 5–10 years). Generated content is deleted within 30 days after account deletion.
7. Your rights
Depending on your jurisdiction (GDPR, UK GDPR, CCPA, and similar) you may request access, correction, deletion, portability or restriction of your personal data, and object to certain processing. Contact [email protected]. You may also lodge a complaint with your local data-protection authority.
8. Security
We apply industry-standard technical and organisational measures — encryption in transit, hashed credentials, least-privilege access controls, audit logging and regular review of our providers. No online service can guarantee absolute security.
9. Children
HG28 is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be highlighted in the Service or by email at least 14 days before they take effect.
11. Contact
Data controller: HG28 Studio. Email: [email protected].