GenAgent Trust Hub
Menu

Habbo.es

DTier DMedium risk · 36/100
  • The documents do not say whether your data trains AI.
  • Your data is used for personalized ads, including by third-party ad companies.
  • Data is shared with partners and affiliates; you can opt out.
  • Staff may review your content; the policy does not describe an opt-out.

They collect account, chat, device and ad data, share with advertisers if you consent, and take a broad license over what you post.

Highest riskMedium riskLow risk

Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.

Privacy policy ↗Terms ↗40 min read · professional or legal expert level30 lines verified word for word

Collected

What is collected

Account info, chats, friends, device IDs, IP location, cookies, purchases and how you play.

Read the exact line

Privacy policy

“La información que obtenemos de sus dispositivos incluye el tipo de dispositivo, los identificadores de dispositivo, los identificadores en línea (su dirección IP), la información de fecha y hora, los datos de geolocalización (según su dirección IP)”

Training

How it is used

They use it to run the game, personalize ads and offers, measure ads and stop fraud.

Read the exact line

Privacy policy

“para mostrarle anuncios (dirigidos y no dirigidos) en nuestros Servicios para mostrarle anuncios de nuestros Servicios en otros sitios web o aplicaciones para medir la eficacia de la publicidad para personalizar la publicidad que le mostramos”

Sharing

Who may see it

Staff, service providers, payment firms and, with consent, ad companies; public chats are public.

Read the exact line

Privacy policy

“Con su consentimiento previo, compartimos sus Datos personales con empresas de publicidad externas o permitimos a tales empresas recopilar sus Datos personales cuando hace uso de nuestros Servicios.”

Kept

How long it is kept

They keep data as long as needed; analytics up to 3 years and payments 7–10 years.

Read the exact line

Privacy policy

“Almacenamos estos datos analíticos (personalizados) durante un periodo de tres (3) años.”

Controls

Your controls

You can request data or delete your account in Settings, and change cookie and tracking choices.

Read the exact line

Privacy policy

“Vaya a la pestaña «Account data» (Datos de la cuenta). Haga clic en el botón «Delete account» (Eliminar cuenta).”

Fine print

The fine print

They take a wide license on your posts, virtual goods are not refundable, and they can close accounts.

Read the exact line

Terms of service

“otorga a Sulake de manera una licencia universal, transferible, no exclusiva, libre de regalías y susceptible de subrogación para utilizar, reproducir, distribuir, elaborar obras derivadas, exhibir, ejecutar o explotar de cualquier otro modo el Contenido generado por usuarios”

Expand “Read the exact line” to see the source alongside the explanation.

What you can turn off

The controls and opt-outs their own documents describe, and where they say to find them.

  1. Turn off personalized ads and tracking

    In-game privacy/cookie settings or the cookie preference centre on the site

  2. Download a copy of your Habbo data

    Settings → Account data → Request data

  3. Delete your account

    Settings → Account data → Delete account

  4. Unsubscribe from newsletters

    Link at the bottom of each newsletter or in-game settings

If a switch is not where they say, the deletion request above still applies.

Line by line

The lines that matter most, worst first.

1 · How it is used

You keep ownership of what you post, but they get a worldwide, lasting right to copy, change, share and use it, including for ads.

Read the exact line

Terms of service

“otorga a Sulake de manera una licencia universal, transferible, no exclusiva, libre de regalías y susceptible de subrogación para utilizar, reproducir, distribuir, elaborar obras derivadas, exhibir, ejecutar o explotar de cualquier otro modo el Contenido generado por usuarios”

For example, a room description or chat post could be reused in their marketing without paying you.

2 · The fine print

If someone sues them because of what you posted or how you used the game, you may have to cover their legal costs.

Read the exact line

Terms of service

“Por el presente, acepta indemnizar, defender eximir de toda responsabilidad a Sulake, y a sus sucesores y cesionarios, frente a cualquier reclamación o demanda por daños y perjuicios u otras pérdidas, incluidos los honorarios razonables en concepto de servicios jurídicos”

For example, if another player sues over something you wrote in chat, you could be asked to pay their lawyers.

3 · The fine print

Credits, diamonds and furniture buys are final. They do not have to give your money back.

Read the exact line

Terms of service

“todas las compras de Moneda virtual y Bienes virtuales son definitivos (es decir, sin derecho de desistimiento), sin que Sulake tenga obligación de reembolsarlos, salvo que se especifique lo contrario”

For example, if you buy credits by mistake, the terms say you generally cannot get a refund.

4 · How it is used

If you agree, ad companies can collect your data on Habbo to show ads that follow you.

Read the exact line

Privacy policy

“Con su consentimiento previo, compartimos sus Datos personales con empresas de publicidad externas o permitimos a tales empresas recopilar sus Datos personales cuando hace uso de nuestros Servicios.”

For example, Google and other ad firms may get your device ID and in-game activity to target ads.

5 · What is collected

Public chats and group forums are not private. Anyone, including them, can copy and reuse what you type there.

Read the exact line

Privacy policy

“Si proporciona Datos personales al usar cualquiera de estas características, estos podrían divulgarse públicamente y revelarse de cualquier otro modo, sin límite alguno en cuanto al uso que nosotros o un tercero podamos hacer de ellos.”

For example, if you type your email in a public room, other players and third parties can see and reuse it.

6 · How it is used

Staff and automated tools can read user posts and activity to moderate the hotel.

Read the exact line

Terms of service

“podríamos supervisar el Contenido generado por usuarios y sus actividades en relación con el Servicio mediante un sistema de supervisión automatizado y moderación humana”

For example, a human moderator may read a flagged chat, not only a computer filter.

7 · How long it is kept

Payment-related records can be kept for seven to ten years even after you stop playing.

Read the exact line

Privacy policy

“Almacenamos esta información durante al menos 7 años, pudiendo llegar a 10 años en función del proveedor externo de quien se trate.”

For example, a credit purchase from years ago may still sit in their payment logs.

8 · How it is used

They say they do not sell your personal data, though they still share it for business and ads with consent.

Read the exact line

Privacy policy

“No vendemos sus Datos personales.”

For example, California users are told there is no sale, but ad partners can still collect data if you agree.

9 · The fine print

You must be 16 or older. If they learn someone is younger, they say they will delete that data.

Read the exact line

Privacy policy

“Los Servicios no están dirigidos ni indicados para usuarios menores de 16 años.”

For example, a 15-year-old should not create an account; if found, they say they will remove it.

10 · How long it is kept

You can ask to delete your account from in-game Settings, though it may take several days and some records may stay for legal reasons.

Read the exact line

Privacy policy

“Haga clic en el botón «Delete account» (Eliminar cuenta).”

For example, you tap Settings, Account data, then Delete account, then wait several days.

How we got here · grade D · score 36/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
  • What does the app collect beyond what it needs to work?

    They collect account details, chats, friends, purchases, device IDs, IP, cookie data and how you play, plus approximate location from IP.

  • Does it record your voice, face or body, and what happens to that?

    Not stated in the documents.

  • Are your chats and uploads used to train AI models, and is that off by default?

    Not stated in the documents.

  • Can employees or contractors read your conversations, and when?

    They say they may watch user content with automated tools and human moderation. No opt-out of that review is described.

  • Are you profiled or tracked for advertising?

    With consent they let third-party ad companies collect device and play data for targeted ads. You can turn personalized ads off in cookie or game settings.

  • Do they sell or share your data, and can you opt out?

    They say they do not sell personal data, but they share with advertisers if you consent and with other partners. You can refuse personalized ads.

  • What rights do they take over what you type and what the AI makes?

    You keep title to your posts, but you give them an irrevocable, worldwide, transferable license to use and sublicense that content.

  • How long do they keep your data after you delete it, and can you delete it in the app?

    You can delete your account in Settings, but analytics can be kept three years and payment data seven to ten years, and some records may stay after deletion.

  • Does it build a lasting memory or profile of you, and can you see, edit or turn it off?

    They store game progress, friends and user segments for offers. The policy does not describe a memory feature you can fully edit or switch off.

  • Do they commit to basic security, and have they leaked data?

    They say they use technical and organizational security measures and test them, but they do not describe an independent audit.

  • Is there a real age gate, and are teens protected?

    The service is not for under-16s. You declare your age; they say they delete data if they learn someone is under 16.

  • Will they tell you when the rules change, and is the policy specific?

    The privacy notice is dated 24.11.2025. For important changes they say they will email you or show a banner.

  • Can they close your account without warning, and can you get your data out first?

    They can suspend or close accounts for rule breaks, 180 days of inactivity, illegal content or if they think you create legal risk, without promising advance notice or refunds.

  • If something goes wrong, who pays?

    The service is offered as-is with a low cap on what they pay, and you must cover their legal costs if a third party sues over your use or posts.

  • Do subscriptions renew on their own, and can you get a refund?

    Virtual currency and goods purchases are final with no right to withdraw, and they generally do not have to refund you.

The privacy policy is 8,996 words at a professional or legal expert level (Flesch reading ease 9.8); the terms are 9,512 words at a professional or legal expert level.

Your privacy
has an agent now

Be in control of your online privacy in the AI Era with confidence.

Gen

From Gen, the Company BehindNorton