HS Elementals privacy policy

What parents give us

• Your name, email address and password. The password is stored only as a secure hash, and so is the optional parent PIN you use to leave child mode.
• Your family's name and time zone. The time zone decides when each day starts. We also generate a family code that your children use to sign in.
• When you invite another parent, their email address, kept with the invitation. We don't email it: you share the invitation link yourself, and it expires after 7 days.

What we store about children

Only a parent can add a child, and children never give us an email address or any way to contact them. For each child, a parent enters:

• A display name. A first name or nickname is enough.
• A birthdate, which sets how many hearts the character has (one per year of age). If you'd rather not give the day, the 1st of the month works.
• A 4-digit PIN for signing in, stored only as a secure hash.

As the family plays, we also store each child's character (element, appearance and items), their weekly schedule of classes, chores and breaks with any notes a parent writes, each check-off and whether a parent approved it, their hearts, manna and gold with a history of every change, the items they've bought, and the real-world rewards a parent offers and the child redeems. Levels, streaks and badges are worked out from that history, not stored separately.

Signing in

• Each time someone signs in to the app, the server issues a sign-in token for that device. We keep it with the device's name (on Android, its manufacturer and model) and when it was last used. The app keeps its token in the Keychain on iPhone and iPad, or encrypted with a key held by Android's Keystore, and remembers the server address and family code. Signing out deletes the token, and deleting a child signs out their devices.
• The parent website at hselementals.com keeps a session while you're signed in, recorded with your IP address and your browser's description of itself. It's deleted after the session expires.
• To stop password guessing, the server counts sign-in attempts per IP address, email address and family code for about a minute.

Why we use it

Only to run the game for your family: showing each child their day, applying rewards, letting parents approve check-offs and hand out real-world rewards, and working out ages and days in your time zone. We don't use it for advertising, marketing or analytics, and we don't build profiles of you or your children.

Who can see it

• Parents in your family see and manage everything about the family and its children, in the app and on the website.
• A child who's signed in sees and acts only on their own character, schedule, gold and rewards, not their siblings'.
• Anyone with your family code can see your family's name and each child's display name and character on the sign-in screen, so they can pick who's playing. Nothing else is shown without the child's PIN. Share the code only with your household. A parent can make a new code at any time in Settings; devices already signed in stay signed in.
• Wittenberg Digital runs the server and its database. We look at a family's data only to keep the service working, fix a problem or answer a request from that family.

No one else. The app contains no code from advertising, analytics or social media companies, has no chat, and doesn't show children's information to anyone outside their family.

Children's privacy

HS Elementals is made for families with children, including children under 13. A child's information is entered by their parent, who creates the family account with their own email address. By adding a child, you confirm that you're their parent or guardian and agree to our storing the information above for them. We collect only what the game needs, and we never ask a child for contact details or more information to play.

You stay in control. In the app or on the website you can review everything stored about your child, correct their name, birthdate or PIN, and delete your child at any time.

Keeping and deleting data

• We keep your family's data for as long as the family account exists.
• Deleting a child, in the app or on the website, permanently deletes their profile, schedule, check-offs, gold history, items and redemptions, and signs out their devices.
• Deleting your whole family, or just your own parent account, can't be done in the app yet. Email support@wittenbergdigital.org from the address on the account and we'll delete it and let you know when it's done. You can ask the same way for a copy of your family's data.

Other servers

The app can be pointed at a different server address. This policy covers only our server at hselementals.com. If your family uses a server run by someone else, that server's operator holds your data.

What we don't do

• We don't show ads or sell anything, and we don't sell or share your family's data.
• We don't send emails or push notifications.
• We don't use your phone's advertising identifier, location, contacts, camera, microphone or photos.

Changes and contact

If this policy changes, we'll update it here and change the effective date above. Questions? Email support@wittenbergdigital.org.