Privacy Policy

This says what GorillaWalk keeps about you, why, and for how long. We keep as little as we can, we don't sell it, and there are no ads, trackers or analytics on this site.

Your account

Your username, your email address and your password. The password is only kept scrambled (salted and hashed), so nobody can read it, us included. We use your email to recognise you if you need help, for example to reset your password.

Staying signed in

One cookie keeps you signed in to this site, for up to 30 days or until you sign out. It's the only cookie we use, and it isn't used for anything else.

The launcher and your PCs

When the launcher signs in, we keep your PC's name, a fingerprint of the PC (a scrambled code made from its Windows ID, which can't be turned back into it), and when it was added and last used. This is how GorillaWalk stays on one PC at a time, and it's what you see under Your PCs.

Your picture

Once the launcher is signed in, it sends a small picture of your gorilla (the portrait the mod takes of you) so your account's picture matches. Only you see it on this site.

Internet connections

To spot a sign-in from somewhere new, we keep the internet addresses (IP addresses) you sign in from, and when each was first and last used. When the launcher signs in from a new one, we also keep the PC's name and roughly where it is (a city and country, from Cloudflare) until you approve it. That's cleared out after a day, and connections you haven't used in 180 days are deleted.

Buying

Payments are handled by Stripe, on Stripe's own page. We never see or keep your card details. Stripe tells us the payment went through, and we keep its reference, the amount and the date, so a refund or a chargeback can be matched to your account. Stripe's handling of your payment is covered by Stripe's privacy policy.

Stopping password guessing

We count sign-in and sign-up attempts for each internet address and account for a short while, so guessing passwords is slow. These counts are deleted after a day.

Friends, messages and calls

These don't go through our website. Messages, calls and who's online travel through a free public message service (HiveMQ) and, where possible, straight between your PC and your friend's. To connect a call directly, your PC asks Google's STUN service for its own internet address. We don't store your messages or calls. Because the message service is public, treat messages like something you'd say in a lobby.

Other services

This site runs on Cloudflare, which handles every visit. Its pages load their font from Google Fonts, so your browser connects to Google for it. The launcher downloads updates from GitHub, and mods from Thunderstore and GitHub when you add them. Each of these sees your internet address when you use them, as any website does.

How long we keep it

Your account and what's tied to it (your PCs, picture, connections and purchases) for as long as you have the account. Ask us to delete it and we will, along with everything tied to it. Stripe keeps its own record of any payment, as the law requires.

Your rights

You can ask to see what we keep about you, to correct it, or to delete it. Email the address shown here once it is set from the address on your account. If you're not happy with how we handle your data, you can complain to your country's data protection authority.

Children

If you're under 16, ask a parent or guardian before you make an account or buy GorillaWalk.

Changes

If this changes, we'll update this page. Last updated 4 October 2026.

Contact

the address shown here once it is set