Habbo.de
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The policy describes staff access for safety and legal checks.
Habbo collects account, chat, device and ad data, shares ads with partners, and takes a broad license over what you post.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, chats, friend list, device IDs, IP location, cookies and how you play.
Read the exact line
Privacy policy
“Zu den Informationen, die wir von Ihren Geräten erhalten, gehören der Typ Ihres Geräts, Geräte-IDs, Online-Identifikatoren (Ihre IP-Adresse), Zeitstempel, Geolokalisierungsdaten (basierend auf Ihrer IP-Adresse)”
Training
They run the game, personalize ads and offers, measure ads and check chats for abuse.
Read the exact line
Privacy policy
“um (gezielte und nicht gezielte) Werbung in unseren Diensten zu liefern um Ihnen Werbung für unsere Dienste auf anderen Websites oder Apps anzuzeigen”
Sharing
Staff, payment firms, ad companies (with consent), social logins and an open profile API.
Read the exact line
Privacy policy
“Mit Ihrem Einverständnis geben wir Ihre personenbezogenen Daten an externe Werbeunternehmen weiter oder gestatten diesen, Ihre personenbezogenen Daten zu erfassen”
Kept
You can delete in the app, but some logs, analytics and payments are kept for years.
Read the exact line
Privacy policy
“Wir speichern die (personalisierten) Analysedaten drei Jahre lang.”
Controls
Cookie and game settings, in-app data request and account delete, plus email privacy contact.
Read the exact line
Privacy policy
“Gehen Sie auf die Registerkarte „Account Data (Kontodaten). Klicken Sie auf die Schaltfläche „Delete account (Konto löschen).”
Fine print
They take a broad license on your posts, virtual buys are final, and you may cover their legal costs.
Read the exact line
Terms of service
“Sie behalten das Eigentum an Ihren nutzergenerierten Inhalten, gewähren Sulake jedoch hiermit unwiderruflich eine nicht exklusive, weltweite, gebührenfreie, unterlizenzierbare und übertragbare Lizenz”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Delete your account
In-game Settings (gear) → Account Data → Delete account
Download a copy of your data
Settings → Account Data → Request data
Turn off personalized ads and extra cookies
Cookie settings / game privacy settings, or reject marketing cookies
Set your profile to private
In-game privacy settings (profile visibility); private profiles limit the public API
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
You still own what you post, but they get a lasting right to copy, share and reuse it, including for ads.
Read the exact line
Terms of service
“gewähren Sulake jedoch hiermit unwiderruflich eine nicht exklusive, weltweite, gebührenfreie, unterlizenzierbare und übertragbare Lizenz zur Nutzung, Vervielfältigung, Verbreitung, Erstellung abgeleiteter Werke”
For example, a room you built or a chat post could be used in their marketing even after you leave.
If someone sues them because of something you did or posted, you may have to pay their legal costs.
Read the exact line
Terms of service
“Sie erklären sich damit einverstanden, Sulake und seine Rechtsnachfolger und Abtretungsempfänger von jeglichen Ansprüchen, Forderungen, Schäden oder sonstigen Verlusten, einschließlich angemessener Anwaltskosten, freizustellen”
For example, if another player sues over a message you sent, they can ask you to cover their lawyers.
Coins, diamonds and furniture you buy with real money are generally not refundable.
Read the exact line
Terms of service
“alle Verkäufe von virtueller Währung und virtuellen Gütern endgültig sind (d. h. Sie verlieren Ihr Widerrufsrecht) und Sulake keine Rückerstattungen leistet”
For example, if you buy Taler and change your mind the next day, they say you do not get the money back.
If you agree, outside ad firms can collect your device and play data to target ads.
Read the exact line
Privacy policy
“Mit Ihrem Einverständnis geben wir Ihre personenbezogenen Daten an externe Werbeunternehmen weiter oder gestatten diesen, Ihre personenbezogenen Daten zu erfassen”
For example, Google ads in the hotel can use your IP and in-game purchases to show you more ads elsewhere.
Anyone can look up public profile bits such as name, avatar, motto and some achievements.
Read the exact line
Privacy policy
“Die Habbo-API ist ohne Einschränkungen oder Zugangsschlüssel frei zugänglich. Diese API erlaubt es Dritten, bestimmte mit ihrem Habbo-Profil verbundene Informationen zu sehen.”
For example, a fan site can list your badges and rooms without asking you first if your profile is public.
Payment-related records can be kept for many years even after you stop playing.
Read the exact line
Privacy policy
“Wir speichern diese Informationen je nach Dienstleister mindestens 7 Jahre oder bis zu 10 Jahre lang.”
For example, a credit-card last-four and purchase history may stay on file for up to ten years.
They can suspend or close your account under their rules and say they are not to you for that.
Read the exact line
Terms of service
“Sulake behält sich das Recht vor, Ihr Konto zu kündigen oder auszusetzen oder Ihren Zugriff auf Ihr Konto und/oder die Dienste (dauerhaft) einzuschränken”
For example, they can lock trading or ban you and you may lose access to rooms and items.
Chat is scanned by an outside moderation service to catch insults and rule breaks.
Read the exact line
Privacy policy
“Der Inhalt Ihrer Nachrichten wird auch von einem externen Moderationsdienst ausgewertet, um Beleidigungen oder Verstöße gegen unsere Geschäftsbedingungen zu erkennen”
For example, a rude public chat can trigger an automatic mute.
For California they say they do not sell your personal data, though they still share for ads with consent.
Read the exact line
Privacy policy
“Wir verkaufen Ihre persönlichen Daten nicht.”
For example, they claim they do not sell lists of players, but ad partners can still collect data if you agree.
You must be at least 16. They say they will delete data if they learn someone is younger.
Read the exact line
Privacy policy
“Die Dienste sind weder auf Personen unter 16 Jahren ausgerichtet noch für die Nutzung durch diese vorgesehen.”
For example, a 15-year-old is not allowed to create an account under these rules.
How we got here · grade C · score 42/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They collect account details, chats, friend lists, device IDs, IP address, IP-based location, cookies and how you play, plus some partner login data.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Chats are checked by an outside moderation service and they say they use human moderation to catch rule breaks, not as a general reading of all chats.
Are you profiled or tracked for advertising?
With your consent they show personalized ads and let Google and other ad companies collect device and play data.
Do they sell or share your data, and can you opt out?
They say they do not sell data, but share with ad companies if you consent and you can change cookie or game settings.
What rights do they take over what you type and what the AI makes?
You keep ownership of posts, but you give them an irrevocable worldwide license they can sublicense, including for marketing.
How long do they keep your data after you delete it, and can you delete it in the app?
You can delete the account in Settings, but analytics can be kept three years and payment data seven to ten years, and they may keep more for legal reasons.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use technical and organizational security measures and review them, but they do not describe an independent audit.
Is there a real age gate, and are teens protected?
You must be 16 or older. They rely on that statement and app-store ratings, and say they delete data if they learn someone is under 16.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated 24.11.2025. For important privacy changes they say they email you or show a banner.
Can they close your account without warning, and can you get your data out first?
They can suspend or close accounts for rule breaks, 180 days of inactivity or other reasons, and say they are not liable to you for that.
If something goes wrong, who pays?
The service is offered as-is with a low cap on what they pay, and you agree to cover their legal costs if third parties sue over your use or posts.
Do subscriptions renew on their own, and can you get a refund?
Virtual currency and goods sales are final with no refunds unless extra terms say otherwise. Closing the service may allow a partial refund for prepaid club time.
The privacy policy is 7,573 words at a professional or legal expert level (Flesch reading ease 15.6); the terms are 7,699 words at a professional or legal expert level.
