This page explains in plain words what personal data Haddo collects, why it collects it and how you can exercise your rights, under the Swiss Federal Act on Data Protection (FADP) and, for those living in the European Union, the General Data Protection Regulation (GDPR). Haddo is not affiliated with Sulake Corporation Oy or Habbo®.

Who is the data controller

The data controller is Daniele D'Elia, Pelzwiesenstrasse 12, 8157 Dielsdorf, Switzerland. Email: [email protected]

What data we collect

• Account data: username, email address and password. Your password is stored only in encrypted (hashed) form: not even the staff can read it.
• Technical data: IP address and access logs, used for account security and abuse prevention.
• Game content: what you create and share in the hotel (rooms, photos, messages, profile), visible according to community settings.
• Purchases: payment is handled by PayPal. We only keep the order details (product, amount, date, status and PayPal order number), never your card or account details.

Why we use it

• To provide the service: creating and maintaining your account, letting you into the hotel, saving your progress.
• For security: preventing unauthorised access, fraud and behaviour that breaks the Rules.
• For purchases: delivering what you bought, handling any refunds and keeping the accounts required by law.
• For service communications: email verification, password recovery, important account notices. No advertising emails.

We don't sell or hand over your data to anyone, and we don't do advertising profiling: as explained in the Cookie Policy, we only use technical cookies.

Who we share it with

Only with the technical providers we cannot do without: OVH (the servers, in France), Cloudflare (traffic protection and delivery), PayPal (payments, only if you buy something) and Resend (sending service emails). Some of these providers may process data outside Switzerland and the European Union too, for example in the United States, with the safeguards required by law. We may also disclose data to the competent authorities if required by law.

How long we keep it

Account data is kept for as long as the account exists. Technical logs are kept for a limited time, as long as needed for security checks. Purchase data is kept for 10 years, as required by Swiss accounting law.

Your rights

You can ask at any time to access the data about you, correct it or delete your account. Email and password can be changed in Settings; for everything else contact us (see below) and we will take care of it. If you believe your data is being handled incorrectly, you can contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the European Union, the supervisory authority of your country.

Safety of younger users

We're committed to keeping the community safe for everyone, including younger users: moderation is active and you'll find our tips on the Safety tips. Parents can contact us with any request concerning their children.

Contact and changes

To exercise your rights or for any question about this notice, write to us at [email protected] or open a ticket in the Help centre or write to us on our Discord server. If this notice changes, we'll update the date at the top of the page.