Privacy policy

Last updated: 25 October 2026

Hollowtaper ("the game") and hollowtaper.com are made by Tapermoth ("we"). Contact: support@hollowtaper.com. This policy covers the game on Android, Windows (Steam) and the web, and this website.

The short version

Hollowtaper has no accounts, no ads and no tracking. Your progress stays on your device. The game sends us anonymous stats about your nights only if you say yes to "Help balance the game"; the default is no. Online co-op connects you to the friend you invite.

Data stored on your device

Settings, save slots, unlocks, run progress and a small local error log are stored on your device (on Android in the app's private storage, on Windows in your user folder, in a browser in its local storage). We never receive them. Exporting a save makes a code that you place wherever you choose. Uninstalling the game or clearing its data deletes everything. On Android, system backup may copy this data to your Google account if device backup is on; Google and your device settings control that. On Steam, Steam Cloud may copy your save files to your Steam account if it is on; Valve controls that.

Optional night stats

The first time you finish a night the game asks whether to send anonymous stats about your nights to the developer. The default is no, and you can change it at any time in Settings > General.

If you say yes, after each night the game sends one small summary: game version, the date (day only), hero, map, difficulty options, Vigil ranks, how the night ended and when, damage and level over time, which upgrade cards you were offered and picked, Night Task results, wax and heart totals, and device class, renderer and frame rate. Each summary carries a random identifier made on your device (not derived from the device or from you) so nights from one install can be grouped and repeats ignored.

It contains no name, email, account, device or advertising ID, location, language or free text. Summaries are sent over HTTPS to a Google Apps Script web app that writes them to a private Google Sheet owned by us; Google processes them on our behalf. If you are offline, up to 40 summaries wait on your device and are sent later.

We use these stats only to balance the game and keep them for at most 24 months. Turning the setting off, or "Delete recorded data", stops sending and clears everything waiting on your device. To delete stats already sent, email us the approximate dates and the heroes and maps of your nights, and we will delete the matching rows.

Online co-op

Online co-op is peer to peer (WebRTC, through the PeerJS library) and is used only if you host or join an online room. To connect, the game contacts:

• a PeerJS signalling server (the public PeerJS cloud service, peerjs.com),
• Google STUN servers (stun.l.google.com), so the two devices can find each other,
• if a direct connection is not possible, the Open Relay TURN service (openrelay.metered.ca, by Metered), which relays the encrypted game traffic.

These services see your IP address and a temporary room code while connecting or relaying. Game data then travels between the players' devices, encrypted by WebRTC; your co-op partner's device can see your IP address as part of that connection. There is no chat. We do not log or store any of it. These services have their own privacy policies.

Camera

On Android, the Join screen can scan a friend's room QR code with the camera, only when you tap "Open camera". The image is decoded on your device to read the room code and is never stored or sent anywhere. You can type the code instead and never grant the camera permission.

Notifications

On Android you can turn on a daily reminder. It is a notification scheduled on your device; no data is sent.

Feedback and crash reports

Errors are kept in a small log on your device and are not sent anywhere. "Send feedback" builds a report you can read first and then share through an app you choose (for example email). We only receive it if you send it to us, and we use it only to answer you and fix the game.

Purchases

Purchases are handled by Google Play or Steam. We do not receive your payment details; the game only checks whether the full game is owned.

This website

hollowtaper.com uses no cookies, analytics or tracking pixels, and loads no third-party fonts or scripts. It is hosted by Cloudflare, which processes standard request data (such as your IP address) to deliver and protect the site. The mailing-list form is not active yet; if it is enabled, this policy will be updated first. A trailer, if shown, loads from YouTube only after you click it.

What we do not do

No advertising or advertising IDs, no third-party analytics or crash-reporting services, no sale or sharing of personal data, no accounts, no access to contacts, location, microphone or files.

Children

Hollowtaper is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe a child has sent us data, contact us and we will delete it.

Your rights

Depending on where you live (for example under the GDPR in the EU and UK or the CCPA in California) you may have the right to access, correct or delete personal data, to object to or restrict processing, and to complain to a data protection authority. The night stats are optional and based on your consent, which you can withdraw at any time in Settings. We do not sell or share personal information as defined by the CCPA. To make a request, email support@hollowtaper.com.

International transfers

Night stats are stored with Google, which may process them outside your country under its standard safeguards.

Changes

We will post changes on this page with a new date. If a change widens what the optional night stats contain, we will ask for your consent again.

Contact

Tapermoth, support@hollowtaper.com