Privacy
Last updated 19 September 2026
The short version
You can play Hoardling in a web browser at hypersage.ai. This page covers that browser game, which is the only way Hoardling ships today. Hoardling has no accounts, no sign-up form, and no name or email to give us. Your campaign progress is stored on your device, not on our servers. We run no analytics, no advertising, and no third-party trackers. Posting Daily Siege scores to the public leaderboard is off until you say yes. The first time you start a Daily Siege, the game asks whether to post your waves. Until you say yes, it doesn't connect to the leaderboard at all. If you do, the only things that leave your device are an anonymous leaderboard identity and the wave numbers your Daily Siege runs reach — never anything that identifies you. The details are below.
What stays on your device
Everything about your run of the game — campaign stars and any campaign checkpoint, your best Daily Siege wave, which Forge upgrades you've bought, which trial badges you've earned, your Duel wins, your Hoard Marks and the looks you've unlocked or equipped, which raiders you've met, and your sound preference — is saved on your device. It is written to that browser's local storage, and deleting the site's data (or removing it if you added it to your Home Screen) deletes it. Each browser keeps its own save. There is no server copy and no backup, so we cannot restore your progress if you clear your browser or switch devices.
The leaderboard identity
Hoardling has a public Daily Siege leaderboard, and posting to it is off until you turn it on. The first time you tap Daily Siege, before the run starts, the game asks whether to post your waves to the board, with two choices of the same size: Post my waves or Don't post. Tapping outside the question goes back to the title without answering, and you will be asked again next time. Until you choose Post my waves, the game makes no connection to the leaderboard at all: no session is created and no score is sent.
If you choose Post my waves, then the first time the game needs the board your browser is issued an anonymous session by our database provider, Supabase (no email, password or personal detail is asked for or collected). That is when a Daily Siege run calls its first wave, when the server also issues a one-run token, or straight away if you said yes from a results screen, so the board can load there. When the run ends, the wave you reached is submitted to the board and the board's top rows are loaded for the results screen. If you choose Don't post, nothing about your Daily Siege runs leaves your device, and your best wave is still kept on it.
Your answer is remembered on your device, and the results screen at the end of every Daily Siege run lets you change it. "posting as WICK-XXXX — tap to stop" turns posting off straight away. "not posting — tap to join the ladder" shows the same question again. Joining from a results screen starts with your next Daily Siege run: the run you just finished can't be posted, because the server only accepts a run it timed from the start. Turning posting off, or choosing Don't post, also discards any score still waiting to be sent, but it cannot remove a score already on the board (see below). If you turn posting off after it was on, the anonymous session stays stored, unused, on your device, so turning posting back on keeps the same name. Clearing the site's data removes it. Campaign and Duel runs are never posted; only Daily Siege is.
If you played a Daily Siege before 13 September 2026, when posting was on by default, the game asks you the same question the next time you start one and sends nothing until you say yes. If you had already switched posting off, that choice is kept and you are not asked again.
Scores are posted under a name we generate for you, in the fixed shape WICK-XXXX
(four characters derived from the anonymous session itself). You never type a name, and the game
never asks you for one. Each submission carries that name, the board, the wave number, and a
one-run token the server issued when the run began — nothing else about you or your device.
Hoardling 3D: hypersage.ai also hosts an experimental 3D build of the game, Hoardling 3D. It has no leaderboard and makes no leaderboard connection. A browser treats every page on hypersage.ai as one site for storage purposes, so if you play both in the same browser they share your sound setting. Before 13 September 2026 Hoardling 3D had a leaderboard of its own, and if you played it then it may have left an anonymous session in that shared storage. This game uses that session only if you choose Post my waves, and never posts anything because it is there. Campaign progress is kept separate.
If the leaderboard can't be reached — offline, or a slow connection — your pending score is held in local storage and tried again while the game is open, for example when your connection comes back. There is no background timer. It is dropped after seven failed attempts, or when an attempt fails more than an hour after the run ended. The queue never grows beyond your ten most recent runs.
What we never collect
- No name, email address, or phone number — there is no sign-up anywhere in the game.
- No advertising identifiers, no ad SDK, no cross-app or cross-site tracking.
- No analytics or crash-reporting service is loaded by this build.
- No camera, microphone, contacts, or location access is requested — Hoardling is a canvas game played with taps, clicks or the keyboard.
Who sees your requests
The Hoardling pages and the browser game are static files on hypersage.ai, which is hosted by GitHub Pages. Like any web host, GitHub's servers handle each request and see your IP address and browser details (GitHub privacy statement). The pages set no cookies and load no web fonts, and until you say yes to the leaderboard neither the pages nor the game contact any other site. After a yes, leaderboard requests go to Supabase, as described above.
What we can't remove
A posted Daily Siege score is a row on a public leaderboard, tagged only with your generated
WICK-XXXX name and a wave number — not your device, browser, or IP address by design.
Because the tag carries nothing that identifies you, there is currently no way for us to find and
delete one score out of the board on request; the whole board can be reset. That is why the game
asks before it posts anything. If that changes, this page will say so on the day it ships.
Purchases and ads
Hoardling has no in-app purchases, no subscriptions, and no advertising in this build. If that ever changes, this page and the game's own screens will be updated on the same day, before the change ships.
Children
Hoardling is a fantasy strategy game with cartoon combat, and it is not directed at children under 13. It collects no personal information from anyone, of any age — no name, email address or contact detail — and has no chat, no messaging, and no way for one player to contact another; the leaderboard is read-only score rows, nothing else.
Changes
If what the game does changes, this page changes on the same day. The date at the top is the honest one.