Privacy policy
This policy covers Hatter (Шляпник), Android package ru.codeard.hatter. The developer and service operator is Ardcode. Contact: codeard@gmail.com.
Playing without an account
Built-in dictionaries work without registration or an internet connection. Settings, teams, player names, private Hat decks, and the current game are stored on your device. These game details are not uploaded to our API. A downloaded pack can remain in a saved game.
Accounts and public packs
We process your email address, one-time verification codes, unique nickname, and account ID for authentication. Sessions remain active until you sign out or delete your account. We store published pack titles, topics, language, difficulty, cards, hints, and likes. Your nickname and published pack content are public in the catalog; your email is not displayed publicly. Drafts stay on your device until publication.
Reports and service protection
Reports include the target pack or author, reason, optional comment, time, and your user ID if signed in. Do not include unnecessary personal information. Administrators review reports and may edit or remove content and accounts that violate the rules. To limit spam, the server uses request times and hashed IP addresses. Web server access logs may contain IP addresses, URLs, timestamps, and technical request results.
Likes without signing in
To prevent repeated likes, the app generates a random installation identifier. The server stores its hash and links to liked packs. It contains no email or advertising ID and is not shared with the advertising network. These likes are not tied to an account and are retained while the pack exists; account deletion does not remove anonymous likes. Clearing app data resets the local identifier but does not remove previously counted likes.
Advertising
Starting with version 1.0.5, ads in the pack catalog and game results are provided through Appodeal and integrated ad networks (including BidMachine, Bidon, Bigo Ads, Mintegral and VK Ads/MyTarget). Advertising SDKs may process your IP address and approximate region, available device and advertising identifiers, device and network characteristics, ad impressions and interactions, diagnostics and performance information. The app does not request precise or approximate location permissions.
Ad personalization is disabled. We do not send advertising SDKs your email, nickname, player names, card text or anonymous-like identifier. In regions requiring a user choice, Appodeal's built-in form requests privacy choices before ads can be shown. You can reopen the options available in your region through “Ad privacy settings”. The game continues without an ad block if settings or ads are unavailable. See Appodeal's privacy policy and SDK and advertising partner data disclosures.
Versions before 1.0.5 use Yandex Mobile Ads, which processes technical ad request information and available device/advertising identifiers. Location tracking and app ad analytics reporting are disabled, and consent to personalization is not assumed. See Yandex's privacy policy.
Optional usage analytics
With your permission, Yandex AppMetrica collects app launches, sessions, screen views, button taps, game counts and outcomes, pack actions, crash reports, app and OS versions, device model, network information and an SDK installation identifier. Network requests also expose your IP address, which the provider may use to derive a broad region. We use this information to understand use and fix problems. We disable location tracking and advertising-identifier collection in AppMetrica and do not attach account IDs, email addresses, nicknames, player names, search queries, card content or sign-in codes to analytics events.
Usage analytics starts only after you choose “Allow analytics”. You can decline without losing game features, or stop future transmission under Profile → Usage analytics → No analytics. Your choice is saved on this device. Turning it off does not erase previously sent data; contact codeard@gmail.com for assistance with access or deletion requests. AppMetrica processes analytics as a service provider under its privacy policy. Advertising settings and API requests are separate from this optional analytics choice.
Providers and security
Verification emails are delivered through Gmail (Google); the API runs on a hosted server. Providers process information necessary to operate the service. App-to-API traffic uses HTTPS, and email delivery uses TLS. Android tokens and drafts are encrypted using Android Keystore. No system can guarantee absolute security.
Retention and deletion
Accounts and published content are retained until deletion. Used or expired verification codes, registration tickets, and rate-limit records are cleaned up during subsequent requests; a code lasts 10 minutes. Account deletion immediately removes the profile, its packs, likes, and sessions from the live database. Backups are isolated from the live service and not used for normal operations and manually removed on request; individual pre-migration or pre-update archives may require manual removal. Contact support to request deletion from archives or assistance with provider-held data. Previously downloaded copies on other people’s devices and local saved games cannot be remotely recalled.
Delete your account and data on the web without reinstalling the game. In the app, open your profile and select “Delete account”. Clear local data through Android Settings → Apps → Hatter → Clear storage, or uninstall the app.
Your requests
For access, correction, deletion, or privacy questions, email codeard@gmail.com. We may need to verify your email to protect your account. Hatter is intended for a general audience and is not marketed as a service for young children. Policy updates appear here with a revised date.
Ardcode · codeard@gmail.com · 27.10.2026