Legal
Privacy Policy
Last updated 10 Aug 2026
This policy explains what information Latchkey collects, how we use it, and the choices you have. We aim to collect only what we need to run the service, and we don't sell your personal information.
What we collect
- Account information — your email address, and any display name, profile handle, or bio you choose to add.
- Content you create — games, locks, reviews, and images you upload (for example, a reference photo for a lock or a game cover).
- Gameplay — the attempts you make, your progress and inventory, a per-device player id used to track progress before you sign in, and your token balance and transaction history.
- Support & feedback — messages and reports you send us. You can report content without an account; to rate-limit reports we briefly keep a salted hash of your IP address (not the address itself), which is purged on a schedule.
- Basic usage analytics — aggregate page views and visits, to understand what's used and improve the product.
How we use it
- To run the service — your account, your content, and your gameplay progress.
- To keep Latchkey safe — preventing abuse, cheating, and policy violations.
- To improve the product and respond to your feedback or reports.
How we share it
We share information only with the service providers we use to run Latchkey, and only as needed:
- Hosting and analytics (Vercel), backend compute (Modal), and our database (Neon).
- Transactional email delivery (Resend), for things like sign-in and verification.
- When required by law, or to protect the safety and rights of people using Latchkey.
We do not sell your personal information, and we don't run advertising trackers.
External locks
Some locks are experiences hosted by their creator on the creator's own service. When you play one, your browser connects to that service directly, so it can see the technical information any website you visit sees (like your IP address), under the creator's own privacy practices. Latchkey sends the creator's service only an opaque play ticket and the lock's id — never your email, name, or other account details.
Cookies & sessions
When you sign in, we use a session cookie to keep you signed in. We use it for authentication, not for advertising.
Keeping and deleting your data
We keep your information while your account is active. You can update your profile, unpublish or delete your content, and delete your account. When you delete your account we remove your personal information, except where we need to keep something to meet a legal obligation.
Your choices
You can access and update most of your information from your profile settings, or ask us for a copy or deletion by email. Children under 13 may not use Latchkey.
Changes
We may update this policy; material changes will be reflected in the "last updated" date above.
Contact
Privacy questions or requests? Email hello@latchkey.games.