Hokm ArenaPrivacy Policy
Last updated: 1 October 2026
Hokm ("the Game") is published by Ariamax, Rijswijk, the Netherlands ("we", "us"). This policy covers this website (HokmArena.com), the Game at HokmArena.com/play/, also when you install it as a web app on your phone or computer, and the HokmArena app for Android from Google Play (package name nl.ariamax.hokmarena). It tells you what we store when you play, why, for how long, and what you can do about it.
The short version: to play you create an account, and we store what you type into the sign-up form (or what Google tells us when you continue with Google) plus your game progress. There are no ads, no tracking and no analytics services, the app does not use your device's advertising ID, and we never sell your data.
1. Who is responsible
Ariamax, Rijswijk, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 42005482, is the controller for the personal data described here. Email: hokm-support@ariamax.nl.
2. This website
The pages of HokmArena.com (everything except the Game itself at /play/) set no cookies, run no scripts and load nothing from other companies: fonts and images come from our own server. Like every web server, ours keeps access logs with your IP address, browser type, the page you asked for and the time. We use them only to keep the site secure and running, and delete them after a short time.
3. Playing as a guest
Guest play is switched off at the moment: new players need an account. This section describes what was stored for players who played as guests before, and applies again if we switch guest play back on.
When you tap "Play as guest", the Game makes up a random code for your device and keeps it in your browser's storage (in the Android app: in the app's own storage on your phone). Our server stores only a scrambled fingerprint (a hash) of that code, the guest name it gave you (such as mehman_4821), the gender you picked for your avatar, your play coins and when you last played. We cannot tell who you are from this; the code is made by the Game itself and is not your phone's advertising ID or any other identifier of your device. Clearing your browser data for the site, or the app's data, makes you a new guest.
4. Your account
If you create an account, we store:
| What | Why |
|---|---|
| Username | Your name at the table. Other players see it. |
| Email address | To confirm the account, to reset your password and to answer you. Other players never see it. |
| Password | Stored only as a one-way hash (BCrypt). We cannot read it. If you sign up with Google you have no password with us. |
| Google account, only if you use "Continue with Google": your email address, your name at Google and Google's number for your account | To sign you in without a password and to find your account again. We never see your Google password and we ask Google for nothing else. |
| Birth year | To check that you are 13 or older. |
| Gender (female or male) | To show matching avatars. Other players see your avatar. |
| Language (English or Persian) | So our emails arrive in your language. |
| Game progress: Daric coins and every change to them, avatars, league, wins and losses, finished and abandoned matches | To run the Game, show your profile and work out the reputation score that other players see. |
| Purchases, if you buy a Daric chest or a league unlock: what you bought, the price, the time, and the payment provider's reference number | To deliver what you paid for, to answer questions about a payment, and because the tax law makes us keep sales records. We never receive your card number or bank details. |
| Friends list and friend requests | So you can find each other and open private tables. |
| Sign-in history: time, IP address and browser type | To protect accounts against break-ins and abuse. Deleted after 180 days. |
The legal ground is the contract with you (running the Game you signed up for) and our legitimate interest in keeping the Game fair and secure. An account that is never confirmed by email is deleted automatically after a few hours.
5. While you play
Other players at your table and on your friends list see your username, avatar, league, reputation score and whether you are online. At tables with messages switched on you can send ready-made texts, emojis and sounds only; there is no free-text chat. Running matches are held in the server's memory and thrown away when they end; we keep only the result (who finished, who left) for your statistics and reputation.
To stop abuse, the server counts attempts to sign up, sign in or enter codes per account, IP address and device. These counters are stored as hashes and expire within an hour.
6. What the Game keeps on your device
The Game stores in your browser's site storage: your sign-in token, the guest device code, your language and your sound setting. The installable web app also caches the Game's own files there so it starts fast. The Game sets no cookies. See the cookie page for the details. The Android app keeps the same few things in its own app storage on your phone; uninstalling the app removes them.
6a. Advertising ID and advertising
The Game shows no advertising, in the browser or in the Android app. The Android app contains no advertising or analytics software from any company, and it does not read, collect, share or use your device's advertising ID (the resettable Android advertising identifier) for any purpose. Google Play's own billing service is the only Google component in the app, and we use it only to complete purchases (section 7). Should we ever add advertising, this page will say so first, and the app will ask Google Play's required permission for it only then.
7. Who else handles your data
- Hosting: the Game and its database run on servers in the European Union rented from a hosting company, which only provides the machines.
- Email: confirmation and password-reset emails are sent through Google Workspace (Google Ireland Ltd.), which therefore processes your email address and the message.
- Sign in with Google: if you tap "Continue with Google", you sign in on a page run by Google (Google Ireland Ltd.). Google tells us your email address, your name and its number for your account, and learns that you use Hokm. If you never tap that button, nothing is sent to Google.
- Payments: if you buy something, you pay on a page run by Stripe (Stripe Payments Europe Ltd., Ireland). We send Stripe your email address, our number for the purchase and what you are buying; Stripe collects your payment details itself, under its own privacy policy (stripe.com/privacy), and tells us only whether the payment succeeded. Players who never buy anything are never sent to Stripe.
- Payments in the Android app: in the app from Google Play you pay through Google Play (Google Ireland Ltd.), under Google's own privacy policy (policies.google.com/privacy). Google gives us a purchase token and an order number, which we keep with your account as the record of the purchase, and a hashed account reference so the purchase lands on the right account; we never receive your payment details.
That is all. We use no advertising networks, no analytics services and no social-media plug-ins, and we do not sell or rent personal data. We only hand data to authorities when the law requires it.
8. Moderation
Our moderators can see account data and game history to handle reports and abuse. An account that breaks the terms can be suspended; a guest device can be blocked. We keep a note of the reason and of who decided it.
9. How long we keep it
- Account data and game progress: for as long as the account exists.
- Sign-in history: 180 days.
- Purchase records: 7 years, as Dutch tax law requires, even after the account is deleted (then without your username or email address).
- Guest data: until it has not been used for a long time, or until you clear your browser data (the server copy then no longer belongs to anyone).
- After you ask us to delete your account: removed within 30 days, from backups within 90 days.
10. Your rights
Under the GDPR you may ask us for a copy of your data, have it corrected or deleted, restrict or object to its use, and receive it in a portable format. Write to hokm-support@ariamax.nl from the email address of your account; we answer within one month. You can delete your account yourself in the Game (Profile → Account → Delete account, in the browser and in the Android app alike); the delete-my-data page explains that and the email route. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
11. Children
The Game is for players aged 13 and older, and the sign-up form refuses younger birth years. If you believe a child under 13 has created an account, write to us and we will delete it.
12. Changes
When the Game changes (for example if purchases or ads are added), this page changes first and the date at the top moves with it.
13. Contact
Ariamax, Rijswijk, the Netherlands
hokm-support@ariamax.nl