Privacy Policy

Last updated: 8 October 2026

In short: you can play Aba Hustle without an account. If you sign up, we keep your name, email and game progress so you can log in anywhere and appear on the leaderboard. Your WhatsApp number and area are optional. We only message you if you ask us to, and we never sell your data.

1. Who we are

Aba Hustle (abahustle.app) is an online game run by the Aba Hustle team in Nigeria. We are the "data controller" for the personal data described here, under the Nigeria Data Protection Act 2023 (NDPA).

2. What we collect

Information	When	Why
Display name, email and password	When you sign up	To create and secure your account. Your password is stored scrambled (hashed) by our database provider. We can't see it.
WhatsApp number and area (optional)	When you sign up, if you choose	To send you game news and offers, only if you tick that box, and to understand where our players are.
Game progress	While you play	To save your game and let you continue on another device.
Leaderboard entry (name, trade, days, items made)	When you choose to join the leaderboard	To show the leaderboard. This is public.
A random device code, and when you were last active	While the game is open	To count how many people are playing right now and in total. The code is random and isn't linked to your name, email or network address.
Invite code and who invited you	When you sign up	To give you your own invite link and give in-game rewards to the friend who invited you. Inviters only see how many friends joined, not who they are. If someone opens your link, the game shows them your display name.
A scrambled code made from your network address	When you submit a score	To stop spam and cheating. We store the scrambled code, not your actual address.
Messages you send us	If you contact us	To reply to you and to book adverts.

If you play as a guest, your game is saved only on your own device (in your browser's storage) and is not sent to us, unless you submit a score.

We do not use advertising trackers or sell your data to anyone. Adverts shown inside the game are pictures placed by us. They do not track you.

3. Our legal reasons for using your data

To provide the game you asked for (your account, saved games, leaderboard).
Your consent for game news on WhatsApp. You can withdraw it at any time.
Our legitimate interest in keeping the game fair and safe (anti-spam and anti-cheat checks).

4. Who else handles your data

We use trusted service providers to run the game. They only process data so that the game works:

Supabase: our database and login system. Data is stored on servers in Ireland (European Union), which is covered by strong data protection law (GDPR).
Netlify: hosts the website.
Google Fonts and Cloudflare (cdnjs): deliver the game's fonts and 3D code. Like any website you visit, they receive your device's network address when the page loads.
WhatsApp (Meta): only if you message us or agree to receive news there.

Because our providers store data outside Nigeria, your data may be transferred abroad. We only use providers with appropriate safeguards, as the NDPA requires. We may also share data if the law requires it.

5. How long we keep it

We keep your account data while your account is active. If you ask us to delete your account, we delete your account, saved game and leaderboard entries within 30 days. Guest games stay on your device until you clear your browser data.

6. Your rights

Under the NDPA you can ask us to:

tell you what data we hold about you and give you a copy;
correct wrong data;
delete your data;
stop sending you news (withdraw consent);
object to or limit how we use your data; or
move your data to another service.

To use any of these rights, message us on WhatsApp at +234 806 725 0524 or email hello@abahustle.app. We will respond within 30 days. If you are not happy with our response, you can complain to the Nigeria Data Protection Commission (NDPC).

7. Children

Aba Hustle is meant for people aged 18 and over. Younger players may only create an account with permission from a parent or guardian. If we learn that a child has signed up without permission, we will delete the account. Parents can contact us to have a child's account removed.

8. Security

Data is sent over encrypted connections (HTTPS). Passwords are hashed. Each player can only read their own account data. No system is perfectly secure; if a breach affects you, we will tell you and the NDPC as the law requires.

9. Changes

We may update this policy as the game grows. We will change the date at the top and, for important changes, tell players in the game.