Privacy Policy

MountainHutNights / KoruPlay • New Zealand • Last updated: 5 March 2026

This Privacy Policy explains how MountainHutNights Limited ("we", "us") collects, uses, stores and shares personal information when you use MountainHutNights services and our game KoruPlay (together, the "Services"). We comply with the New Zealand Privacy Act 2020, including the Information Privacy Principles.

Information we collect

  • Account & profile: email, display name, login credentials (hashed), age/region where provided, preferences.
  • Gameplay & telemetry: session events, progress, in-game actions, crash logs, device/OS, language, IP address, timestamps.
  • Support: messages, attachments, contact details, and troubleshooting data you provide.
  • Payments: purchase records and entitlements. Payment card details are handled by payment providers/app stores, not stored by us.
  • Advertising/analytics identifiers: cookies and similar technologies, device identifiers (where available), and analytics IDs to measure performance and improve Services.

How we use information

  • Provide and secure the Services (authentication, fraud prevention, moderation).
  • Operate gameplay features (matchmaking, leaderboards, saves, customer support).
  • Improve quality (analytics, diagnostics, bug fixing, balancing).
  • Communicate with you (service notices, support responses, account/admin messages).
  • Comply with legal obligations and enforce our terms.

Sharing and disclosures

We may share personal information with service providers who help us run the Services (hosting, analytics, customer support tooling, payment/app store platforms), professional advisers, and authorities where required or permitted by law. We do not sell personal information.

Overseas storage

Some providers may store or process data outside New Zealand. Where we disclose information overseas, we take reasonable steps to ensure it is protected in a way that is comparable to New Zealand privacy standards (for example, contractual safeguards and access controls).

Cookies and identifiers

We use cookies or similar technologies for sign-in, security, and analytics. You can manage cookies via your browser settings. Device-level advertising identifiers can often be reset or limited in your device settings.

Retention and security

We keep information only as long as needed for the purposes above (including legal and dispute-resolution needs) and then delete or de-identify it where appropriate. We use reasonable technical and organisational safeguards, but no system is completely secure.

Your rights (New Zealand)

  • Request access to your personal information and request corrections.
  • Complain to us if you have concerns; you may also contact the Office of the Privacy Commissioner (privacy.org.nz).

We may ask to verify your identity before responding. Some requests may be refused where permitted by the Privacy Act 2020, and we will explain why.

Children

Our Services are not intended for young children. If you believe a child has provided personal information to us, contact us and we will take reasonable steps to address it.

Changes

We may update this policy from time to time. We will post the updated version on this page and update the “Last updated” date.