Privacy, legal & disclaimers

Rights-holder requests

If you own rights in imagery or a character depicted in Don’t Fall and object to its use, email [email protected]. Please identify the item and include its location or a screenshot, together with enough information to understand your rights in it. We will remove or replace the identified imagery within 48 hours. Climbable structures may retain a neutral shape while a course revision is prepared, so existing runs and results remain intact.

Your game data

Don’t Fall on Hatchworks.fyi uses game data to run accounts, connect climbers, check scores and respond to feedback. Contact the game operator at [email protected] about your data.

Accounts and email

An account is optional. If you create one, we save your player username, a salted password hash (not your plain password), avatar, equipped pin and login sessions. Email-enabled accounts also store your email address and verification status for sign-in, verification and password recovery. Pending signups hold registration details until verification or expiry. Optional country affiliation, private teams, invitations and account progress are saved when you use those features. Email addresses are not shown on leaderboards.

Climbs, replays and public results

Ordinary eligible climbs above 10 metres automatically send gameplay inputs and timing for replay verification. This includes movement, jumps, crouching and direction, with the course version, attempt identifiers and calculated height, time and falls. The server replays these inputs to check that the result follows the game’s rules. This is gameplay data, not a screen or webcam recording.

Each leaderboard shows your best eligible result for that board under your player name. Published finishes, race standings, ghost replays and challenge links can show your name and run details to other people. Accounts can view up to 20 private progress summaries. Guests use a private device identifier to retain or claim their results. Replay checks assess game movement; cash winners still need the separate review described in the prize rules.

Links to the game may include a short source label identifying the post or channel that shared it. We remove that label from the displayed URL and may attach it to a new guest identity or signup to count visits, new identities, verified height milestones and accounts by source. Reports contain aggregate counts. We do not create an extra tracking cookie or save a full referring URL for this feature. Optional detailed play measurements retain their separate consent choices.

Other climbers and this device

Live play shares your in-game position, avatar and equipped badges with other climbers in the same course. The name-sharing setting controls whether they see your name. Optional flags, drawings and their chosen credits can be visible in the course. The browser saves your guest name, appearance, settings and guest/recovery identifiers locally. Login and feedback cookies keep sessions working. Clearing browser storage removes device copies, not server records. Connection details, including an IP address, are processed to serve the game, limit abuse and investigate faults.

Optional recordings and gallery clips

The Record my run feature starts when you choose it. The recording choices explain whether a video stays on your device or uploads for review; webcam, microphone and audio choices are separate. Uploaded originals and consent receipts are stored privately. A reviewed clip and your chosen credit may appear on in-game reaction screens only with the required permission. The recording consent does not grant marketing permission. Use the recording withdrawal control or contact us to withdraw an uploaded recording. Account deletion also withdraws its linked recordings and clips.

Feedback and optional measurements

The in-game feedback form saves the message and category you submit. If you attach diagnostics, it also sends limited course, height, performance and error information. Reports are for the operator, not a public report list. The email feedback button opens your own email app; it sends nothing until you send the email. Avoid including passwords, recovery codes or unnecessary personal details.

If you opt into playtest measurements, counts of play time, return visits, falls, trial outcomes and save/share actions are linked to your run and device or account. This option does not collect video. Settings lets you turn it off and request removal of those measurements.

Email and payment services

Account verification and reset messages use Resend, which receives the destination address and message containing the single-use link. Emails you send to the game inbox are handled by Proton Mail and your own email provider. Optional donations open the payment provider shown on the support page; that provider handles checkout, card details and receipts under its own privacy terms. Supporter badge review can retain a checkout email privately, then a payment-reference hash and review status. Donating is not required to play or enter a race.

How long data remains

Account and completed-run records currently have no general automatic expiry. They remain available for account history, score checking and standings until deleted or removed after review. Expired verification/reset requests are cleaned up. Uploaded original recordings expire after seven days without an update; unapproved gallery submissions expire after seven days. Optional playtest measurements are pruned after 90 days. In-game feedback older than 30 days is removed when the next report is submitted. Checkout emails for pending supporter claims are cleared on review or after 30 days. Reviewed game payment records have no automatic expiry. External payment and mailbox retention is controlled by those services.

Deleting live data does not immediately erase older protected backups. Completed guest results can remain even after the device identifier expires. Contact us about data that remains outside your account controls.

Your controls and requests

You can change privacy choices in Settings and delete your account from its account controls after confirming your password. For access, correction, deletion or a recording-withdrawal request, email [email protected] with your player name and the request. We will need to verify that the request concerns your data; never email your password or recovery code. If a prize claim is pending, mention it so deletion and the claim can be reviewed together under the existing prize rules. A data request does not itself change those rules.