Privacy Policy
Last updated 18 October 2026
This policy explains what personal data Lagos Hotel collects when you play, why we need it, who we share it with and the choices you have. We follow the Nigeria Data Protection Act 2023. Aku Online Ltd, the Nigerian company that runs Lagos Hotel ("we", "us"), is responsible for your data (the data controller); contact us at admin@lagoshotel.app.
What we collect
| What | Examples | Why |
|---|---|---|
| Account details you give us | Name, @username, email address, password (stored scrambled, we can't read it), date of birth | To create and secure your account, sign you in, and check that you are 18 or older |
| Your agreement | That you confirmed you are 18 or older and accepted the Terms, this policy and the Disclaimer, with the date and version | To show who agreed to what, and when |
| Your game | Avatar, motto, play money and its history, items, apartments, friends and friend requests, people you follow, Gist Lounge talks you host or schedule and reminders you set, invites, game results, ajo circles, pickpocketing attempts | To run the game and keep it fair |
| Live play | Where your avatar is, what you say in chat, emotes, which room you are in | To show you to other players in the same room as it happens. Which room you are in is also kept on our server while you play (replaced about once a minute, deleted when you close the game, and never backed up), so we can show how busy rooms are and tell your friends where you are. Room chat goes through our server, which hides strong language and keeps what you say for 14 days so we can look into reports, then deletes it |
| Polls in Gist Lounge | That you voted in a poll | So you can vote only once. We keep only that you voted, never what you chose: the poll just adds your vote to the totals everyone sees. Your own browser remembers your choice so it can show you a tick. Polls, and the record of who voted, are deleted soon after their talk ends; we keep each poll's question and number of votes, without who voted |
| Gold purchases | The pack, the price and currency, when you paid, whether it went through, our reference and Flutterwave's, and the email and name you check out with | To give you the gold you paid for, sort out problems with a payment, and keep the accounts the law requires. Your card or bank details go to Flutterwave and never to us |
| Advert measurement | How many seconds each advert was on your screen, and whether you clicked it, per day | To count and cap adverts and give advertisers totals. Advertisers never get your details |
| Safety | Players you block, and reports you make or that are made about you (with the reported player's chat from the hour before) | To keep players safe: blocks stop people contacting you, and reports let the hotel team act on bad behaviour |
| Technical data | IP address, browser and device type, sign-in times, error reports from the game (what went wrong, on which page and browser) | To keep accounts secure, stop abuse and bots, and fix problems |
| On your device | Your sign-in session, settings (sound, zoom, chat panel) and your choices in Gist Lounge polls, in your browser's local storage | So the game remembers you and your settings. We don't use advertising or tracking cookies |
We don't ask for your phone number, home address, ID documents or bank details, and you should never share them in the game. Payment details for gold go only to Flutterwave, in its own payment window.
What other players can see
Other players see your name, @username, avatar, motto and bio, main apartment (and who is in it; your other apartments are private), and what you do and say in rooms and talks. Your friends also see when you are online and which room you are in. Your email address and date of birth are never shown to anyone.
Our lawful reasons
- To provide the game you signed up for (contract): your account, game data and live play.
- Legal obligations and safety: checking that players are adults, keeping records of agreement, and responding to lawful requests.
- Legitimate interests: security, stopping cheating and abuse, counting adverts, and improving the game, in ways you would reasonably expect.
- Your consent: anything else we ask you to opt in to. You can withdraw consent at any time.
Who we share it with
We don't sell your personal data. We use these service providers to run Lagos Hotel; they only use your data to provide their service to us:
- Supabase: our database, accounts and live connections. Your data is stored on their servers in Ireland (European Union).
- Vercel: delivers the game's website to your browser.
- Cloudflare: runs the hotel's rooms. It checks with our server that you are signed in, passes what you do in a room (where your avatar stands and walks, emotes, raising your hand in Gist Lounge and the like) to the other players there as it happens, and hands your room chat to our server, which checks it and keeps it as described above. It also carries live voice in Gist Lounge from the people on stage to the listeners. Cloudflare doesn't record or store any of that, and voice isn't recorded or stored by us either. To help us fix problems, Cloudflare keeps a short technical record of connections to the rooms (which room, when, and the network details any website receives) for a few days.
- Flutterwave: takes payments for gold. When you buy gold, you pay in Flutterwave's own payment window, and Flutterwave gets the payment details you enter there, with the email and name we pass it so it can send your receipt. It tells us whether the payment went through, never your card or bank details. Flutterwave's privacy policy covers what it collects.
- Brevo: sends account emails (confirming your email, resetting your password) and, unless you turn them off, emails while you're away when someone sends you a friend request or a Gist Lounge talk you set a reminder for starts.
- Microsoft: our own email, if you write to us.
- YouTube: when a film is showing in Eko Cinema and you choose to watch it, it plays in YouTube's player, in its privacy-enhanced mode (youtube-nocookie.com). YouTube's privacy policy covers what it collects while you watch. Nothing from YouTube loads unless you press Watch.
Some of these providers process data outside Nigeria. When they do, we rely on safeguards the Nigeria Data Protection Act accepts, such as the provider's data protection agreements and the standards of the country the data goes to. We may also share data if the law requires it, to protect players or the public, or if Lagos Hotel is sold or reorganised (the new owner would have to follow this policy).
How long we keep it
We keep your account and game data while your account is open. You can delete your account yourself in the game, under Account, and it is deleted straight away; if you ask us instead, we delete or anonymise your personal data within 30 days, except where we must keep something by law. Room chat is kept for 14 days. Reports are kept as long as we need them to deal with what happened, with usernames but not emails. Error reports are deleted once the problem is fixed. Security logs are kept for a limited time by our providers and then deleted. Advert totals we give advertisers never identify you.
Your rights
You can ask us to:
- give you a copy of your personal data;
- correct it (you can change your name yourself in the game, under Account, and turn off these emails there too);
- delete your account and personal data (you can do this yourself in the game, under Account);
- stop or limit some uses of it, or object to them;
- send your data to you or another service in a common format.
Email admin@lagoshotel.app from the address on your account. We will reply within 30 days. If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission (NDPC).
Adults only
Lagos Hotel is for people aged 18 and over, and we check date of birth at sign-up. If we learn we hold data about someone under 18, we close the account and delete the data.
Security
Connections to Lagos Hotel are encrypted, passwords are stored scrambled, and our database only lets each player read their own private data. No system is perfectly secure, so use a strong password you don't use anywhere else. If a breach affects your data, we will tell you and the regulator as the law requires.
Changes
We will update this policy when what we do with data changes. If the change matters, we will tell you in the game or by email before it takes effect.
Contact
Questions or requests about your data: admin@lagoshotel.app.