Hokm ArenaPrivacy Policy
Last updated: 19 September 2026
Hokm ("the Game") is published by Ariamax, Rijswijk, the Netherlands ("we", "us"). This policy covers this website (HokmArena.com) and the Game at HokmArena.com/play/, also when you install it as a web app on your phone or computer. It tells you what we store when you play, why, for how long, and what you can do about it.
The short version: you can play as a guest without giving us anything about yourself. If you create an account we store what you type into the sign-up form plus your game progress. There are no ads, no tracking and no analytics services, and we never sell your data.
1. Who is responsible
Ariamax, Rijswijk, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 42005482, is the controller for the personal data described here. Email: hokm-support@ariamax.nl.
2. This website
The pages of HokmArena.com (everything except the Game itself at /play/) set no cookies, run no scripts and load nothing from other companies: fonts and images come from our own server. Like every web server, ours keeps access logs with your IP address, browser type, the page you asked for and the time. We use them only to keep the site secure and running, and delete them after a short time.
3. Playing as a guest
When you tap "Play as guest", the Game makes up a random code for your device and keeps it in your browser's storage. Our server stores only a scrambled fingerprint (a hash) of that code, the guest name it gave you (such as mehman_4821), the gender you picked for your avatar, your play coins and when you last played. We cannot tell who you are from this. Clearing your browser data for the site makes you a new guest.
4. Your account
If you create an account, we store:
| What | Why |
|---|---|
| Username | Your name at the table. Other players see it. |
| Email address | To confirm the account, to reset your password and to answer you. Other players never see it. |
| Password | Stored only as a one-way hash (BCrypt). We cannot read it. |
| Birth year | To check that you are 13 or older. |
| Gender (female or male) | To show matching avatars. Other players see your avatar. |
| Language (English or Persian) | So our emails arrive in your language. |
| Game progress: Daric coins and every change to them, avatars, league, wins and losses, finished and abandoned matches | To run the Game, show your profile and work out the reputation score that other players see. |
| Purchases, if you buy a Daric chest or a league unlock: what you bought, the price, the time, and the payment provider's reference number | To deliver what you paid for, to answer questions about a payment, and because the tax law makes us keep sales records. We never receive your card number or bank details. |
| Friends list and friend requests | So you can find each other and open private tables. |
| Sign-in history: time, IP address and browser type | To protect accounts against break-ins and abuse. Deleted after 180 days. |
The legal ground is the contract with you (running the Game you signed up for) and our legitimate interest in keeping the Game fair and secure. An account that is never confirmed by email is deleted automatically after a few hours.
5. While you play
Other players at your table and on your friends list see your username, avatar, league, reputation score and whether you are online. At tables with messages switched on you can send ready-made texts, emojis and sounds only; there is no free-text chat. Running matches are held in the server's memory and thrown away when they end; we keep only the result (who finished, who left) for your statistics and reputation.
To stop abuse, the server counts attempts to sign up, sign in or enter codes per account, IP address and device. These counters are stored as hashes and expire within an hour.
6. What the Game keeps on your device
The Game stores in your browser's site storage: your sign-in token, the guest device code, your language and your sound setting. The installable web app also caches the Game's own files there so it starts fast. The Game sets no cookies. See the cookie page for the details.
7. Who else handles your data
- Hosting: the Game and its database run on servers in the European Union rented from a hosting company, which only provides the machines.
- Email: confirmation and password-reset emails are sent through Google Workspace (Google Ireland Ltd.), which therefore processes your email address and the message.
- Payments: if you buy something, you pay on a page run by Stripe (Stripe Payments Europe Ltd., Ireland). We send Stripe your email address, our number for the purchase and what you are buying; Stripe collects your payment details itself, under its own privacy policy (stripe.com/privacy), and tells us only whether the payment succeeded. Players who never buy anything are never sent to Stripe.
That is all. We use no advertising networks, no analytics services and no social-media plug-ins, and we do not sell or rent personal data. We only hand data to authorities when the law requires it.
8. Moderation
Our moderators can see account data and game history to handle reports and abuse. An account that breaks the terms can be suspended; a guest device can be blocked. We keep a note of the reason and of who decided it.
9. How long we keep it
- Account data and game progress: for as long as the account exists.
- Sign-in history: 180 days.
- Purchase records: 7 years, as Dutch tax law requires, even after the account is deleted (then without your username or email address).
- Guest data: until it has not been used for a long time, or until you clear your browser data (the server copy then no longer belongs to anyone).
- After you ask us to delete your account: removed within 30 days, from backups within 90 days.
10. Your rights
Under the GDPR you may ask us for a copy of your data, have it corrected or deleted, restrict or object to its use, and receive it in a portable format. Write to hokm-support@ariamax.nl from the email address of your account; we answer within one month. How to delete your account is explained on the delete-my-data page. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
11. Children
The Game is for players aged 13 and older, and the sign-up form refuses younger birth years. If you believe a child under 13 has created an account, write to us and we will delete it.
12. Changes
When the Game changes (for example if purchases or ads are added), this page changes first and the date at the top moves with it.
13. Contact
Ariamax, Rijswijk, the Netherlands
hokm-support@ariamax.nl