Privacy Policy

HuntForge is independent tracking and statistics software for bonus hunts. We process as little personal data as possible and do not share data for advertising purposes. This policy applies to the website and application at huntforge.martinellisoftware.com and the associated browser extension. The game data you record serves solely your own analysis and documentation.

• Account and access data: e-mail address, your Hunt-Key (e.g. HF-XXXX-XXXX-XXXX), plan/role and the subscription status.
• Payment data: processed by our payment provider Payrexx; we do not store card details but receive transaction and subscription status.
• Hunt/session data: the slots, stakes and results you record; for PRO automatically synced to our server (see cloud synchronisation).
• Device/browser fingerprint: an identifier (hf_fp_id) computed from browser and device characteristics (incl. canvas, WebGL, screen, time zone) for account/device recognition and abuse prevention.
• AI keys and requests: OpenAI/Anthropic keys you provide and the content sent when using the AI features (see the AI features section).
• Technical data: IP address, browser/device information and timestamps — for security, abuse/bot protection and request limits.
• Browser extension data: the currently opened slot or its URL, in order to identify the game (see the extension section).
• Bug reports and communication: information from bug reports you send (optionally including a screenshot) and support requests.

We process your data to provide the service and manage your account (to perform the contract), to handle payments and subscriptions (to perform the contract), to keep operation secure, to protect against abuse and bots and to maintain the slot database (legitimate interest), to ensure use is limited to persons aged 18 and over (legal requirement or legitimate interest), and to communicate with you. The Swiss Data Protection Act (FADP) and, where applicable, the GDPR apply.

Payments and subscriptions are handled by Payrexx AG (Burgstrasse 18, 3600 Thun, Switzerland). Available methods include credit/debit card, TWINT, PostFinance, Klarna and PayPal. You enter your payment details directly with Payrexx or the chosen payment method; we do not store full card details. Payrexx processes this data as an independent controller under its own privacy terms.

For PRO accounts, your hunt data is automatically synchronised to our server and linked to your Hunt-Key so that you can access it across multiple devices, the OBS overlay and shared links. Without active synchronisation the data remains in your browser. You can delete synchronised data; on request we will delete your stored hunt data.

The optional browser extension detects which slot is being played based on the currently opened game page and sends the game name or URL together with your Hunt-Key to our server in order to match the slot and show it in the overlay. If a slot is not recognised (i.e. a possible new slot), a report with the identifier/URL may be sent to us so we can add it to the database. These requests are rate-limited. No further browsing history is collected.

HuntForge may offer AI-assisted features. For these you can provide your own API keys from OpenAI and/or Anthropic (Claude); these are stored locally in your browser (localStorage). When you use the AI features, requests (e.g. slot/game details) are transmitted to OpenAI (OpenAI, L.L.C., USA) or Anthropic (Anthropic PBC, USA); some requests are routed through our server (claude_proxy.php). The privacy terms of these providers additionally apply, and the transfer is to the USA (third country). As the keys are stored in the browser, you should keep them confidential and use them only on devices you control.

HuntForge provides publicly accessible result and overlay pages (e.g. for streamers). If you share or embed such a link, the hunt data it contains is accessible to anyone with the link; only share links if you agree to that data being made public. Via the bug-report function you can report problems to us — this transmits your details and, if you choose, a screenshot.

To deliver fonts, scripts and images we include external services to which, for technical reasons, at least connection data (incl. IP address) is transmitted: Google Fonts (Google), jsDelivr and FingerprintJS, cdnjs (Cloudflare) as well as product images from Amazon. Cloudflare Turnstile is used for security and bot protection. These providers may also process data outside Switzerland/the EU (incl. in the USA); appropriate safeguards are in place for such transfers.

The application is hosted with Hetzner Online GmbH (data centres in Germany/Finland, EU); your data resides on our server there. For delivery, security and bot protection we use Cloudflare (Cloudflare Turnstile), which processes connection and IP data. Cloudflare may also process data outside Switzerland/the EU. Appropriate safeguards (including standard contractual clauses) are in place for such transfers.

We use only technically necessary cookies (including Cloudflare security and the payment process) and store a few values locally in your browser (language, 18+ confirmation, your hunts). No analytics or advertising cookies are used. Details can be found in our Cookie Policy.

We share data only with the service providers required to operate the service: payment processing (Payrexx), hosting (Hetzner), security/delivery (Cloudflare), external content/CDNs (Google, jsDelivr, cdnjs, Amazon) and — if you use the AI features — OpenAI and Anthropic. These process data on our instructions or as independent controllers (payment, AI providers). We do not sell data and do not share it for advertising purposes. Disclosure to authorities only takes place where legally required.

We store personal data only for as long as necessary for the service, your account and legal obligations. Account and hunt data are deleted on your request or after account closure; technical logs are kept only as long as needed for security and operation. Transmission is encrypted (TLS) and access is restricted.

You have the right to access, rectification, erasure and restriction of processing, to data portability and to object to certain processing. To exercise these, contact support@martinellisoftware.com. You also have the right to lodge a complaint with the competent supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU your national data protection authority.

We may update this Privacy Policy, for example if the service or the legal situation changes. The version published on this page applies.