Sign-in privacy

Our Haven verifies your Google account identifier and verified email address to sign you in. We do not request access to your mailbox, messages or contacts, and we do not store your display name, avatar or profile photo. Apple account login is no longer available.

Google ID tokens are verified against provider signatures over HTTPS and are not stored. On the server we keep only the minimum needed to sign you in and to allow or block an account: your stable Google account identifier, your verified email address, the provider (Google), a verified-email flag and an active/disabled status. We do not store display names, administrator notes, creation times, last-login times or any other profile information. Application sessions expire after seven days; only hashes of session tokens, plus their issue, expiry and revocation timing, are retained so sign-out can take effect. Signing out revokes the current session. A restricted administrator console, protected by its own username and password, can view emails, disable or restore accounts and revoke sessions. Administrators cannot read your Google mailbox or grant paid plane purchases through this interface. Contact the app support channel for account or privacy requests.

Game worlds are kept only for the current room. Each new room starts empty. A shared room admits at most two accounts and synchronizes buildings, grass, flowers and trees in server memory. Leaving clears your local game session; the remaining member may continue. The last member leaving removes the room. Rooms without authenticated activity expire after five minutes, and service restart clears all rooms. No room world is written to disk. The plane has a one-minute flight trial per account; a hashed account identifier, used trial time and verified permanent purchase status are stored separately for the paid entitlement, and never include your email or profile. Purchase tokens are verified with Apple and are not retained. Character position and pose are relayed to the other room member and kept only in server memory, expiring after five seconds without updates. Optional microphone audio is relayed live to the other verified room member and is never recorded or retained.

Multiplayer uses six-digit room numbers. Friend search and friend requests are unavailable.

Back to Our Haven