Our Haven privacy policy

Google sign-in and account security

Our Haven uses Google sign-in for account features. The game server uses your stable Google account identifier and verified email address to recognize your account and manage access. We also retain account emails for customer support and customer relationship management. Account records include the sign-in provider, whether the email is verified, and whether the account is active or disabled. The server account record does not store your Google display name, avatar or profile photo.

Google identity information is checked to complete sign-in. Our account and session records do not retain the raw Google identity token. Game sign-in does not request access to your Google mailbox, messages or contacts.

To maintain sign-in, the server stores a hash of the game session token, a session identifier, your account identifier, and the times the session was issued, expires or was revoked. A game session is valid for up to seven days. Signing out revokes the current session.

The service keeps account-associated security and administration records, including action times, account identifiers and limited details for sign-in, sign-out, account status changes and session revocation. Restricted administration tools use account emails and account status to manage access.

Shared rooms and optional voice

A shared room supports two accounts. To deliver the room, the server handles its room code, participant identifiers, player labels, buildings, plants, vehicle and aircraft state, and current character position and pose. Room content is shared with the other participant in that room.

Room state is held in server memory and is not written to room save files. New rooms start empty. The room is removed when its last participant leaves; a room without authenticated activity becomes unavailable after five minutes and is cleared by routine cleanup. Restarting the game service clears active rooms.

Current position and pose are shared briefly with the other participant. Older updates stop appearing in the shared snapshot after five seconds without a new update; their server state can remain in room memory until it is replaced or the participant or room state is cleared.

Voice is optional and requires microphone permission. When you turn room voice on, microphone audio is relayed live to the other authorized room participant using short-lived transfer buffers. The room voice feature relays audio live and does not include a conversation recording or audio-file storage feature. Turning voice off or ending the voice connection stops that transfer. You can manage microphone access in your device’s Settings.

Purchases, trial time and access

Optional purchases are handled through Apple’s App Store. Our Haven does not request your payment card details. Apple handles payment information under its own policies.

To manage the flight trial and permanent plane access, the game server keeps an account-linked hashed identifier, used trial time, purchase entitlement status and any promotional unlock status. Hashing this identifier does not make the entitlement anonymous.

Signed Apple purchase information is used to verify permanent plane access. The plane entitlement records do not retain the raw signed purchase token. The app can keep purchase and transaction records on your device for access and restoration.

Portable Warehouse access in this version is time limited. Local access records can include transaction identifiers, purchased or promotional time credits, trial use, start and end times, expiry and revocation status.

Optional promotional submissions

If you submit an image, video link or other evidence for a promotional reward and it is received by the game service, the service can keep your account identifier, the submitted image or link, submission time and status, and the resulting reward and its expiry. These records are used to assess and manage promotional access.

A reward expiring does not by itself erase its submission evidence or related records. Images can include information visible in the picture, and a video link can identify the account or content on the linked platform. Remove personal information you do not wish to share before submitting evidence.

If you choose to send an account, support or promotional question by email, the message, sender details and any attachments you send are handled by the email services involved. Game sign-in does not give Our Haven access to your Google inbox.

Information kept on your device

The app can keep account display information, including your Google email and display name, locally on your device. It also keeps sign-in state using the device’s secure credential storage and can keep local settings, purchase records and warehouse access time records.

These local records are separate from the temporary shared room. Ending a room does not itself erase account, purchase or warehouse records. Your device and App Store also manage information according to their own settings and policies.

Retention and account requests

Temporary room and voice data follow the limits described above. Account records, session history, security records, entitlement records and promotional submissions persist separately from those temporary rooms.

We have not established fixed retention periods for account records, security records, promotional images or support email. Session expiry limits sign-in access; it does not automatically erase stored session history. Signing out, leaving a room or uninstalling the app does not delete the server account or its associated persistent records.

Our company handles requests about account information and associated data, including deletion requests, through the contact address below. Do not send a password or verification code.

Services involved in providing Our Haven

Google provides account authentication, and Apple provides the App Store purchase and device services. Their own privacy terms apply when you use those services: Google Privacy Policy and Apple Privacy Policy.

The game server is hosted with Vultr, and the domain is managed through Tencent Cloud. Connections to the game, website, authentication and purchase services necessarily expose network information, such as an IP address, to the services involved in delivering them. Provider handling of that information is governed by their applicable terms and policies.