This website sets no cookies and runs no analytics. The policy below covers the game.

Privacy Policy – Not In My House

Version 1 – 22 October 2026

Who we are

Not In My House (“NIMH”, “the Game”) is made by KeyHole Curios Games (“we”, “us”).

Contact for anything about privacy: info@keyholecuriosgames.com.

The short version

• The Game works fully without sending us anything. Analytics is off until you choose to turn it on.
• If you press ACCEPT ANALYTICS, the Game sends us anonymous information about matches and how the Game runs.
• We never collect anything that identifies you:
  • no name or Steam name;
  • no Steam ID;
  • no chat or voice;
  • nothing you type;
  • no keys you press;
  • no PC name or Windows user name;
  • no IP address;
  • no log files or crash dumps.
• Each time the Game starts it makes a new random ID that is never saved, so nothing links one session to the next, or to you.
• Helping train our bots is a separate choice and starts unticked.
• You can change every choice at any time in Options > Privacy.

1. Data Steam handles, not us

You get and play the Game through Steam, run by Valve. To make online play work, the Game uses Steam’s services:

• your Steam ID and Steam name;
• your friends list, to invite friends;
• Steam networking and voice chat.

Other players in your match see your Steam name and hear your voice if you use voice chat. Valve processes this under the Steam Privacy Policy. None of it is sent to our servers or used for analytics.

2. Anonymous analytics (only if you choose “Accept analytics”)

What is sent:

• a random session ID, made new at each start of the Game and never stored on your PC;
• a random match ID for each match, and your seat number in it (for example “Resident, seat 2”);
• the Game’s build number and edition (demo or full game);
• coarse PC facts:
  • graphics card model (for example “NVIDIA GeForce RTX 3060”);
  • graphics memory, in size groups (for example “8 GB”);
  • number of CPU cores;
  • Windows version (10 or 11);
  • screen size group (for example “1080p”);
  • graphics quality setting;
• which parts of the Game you reach: menu, lobby, match, quit;
• match summaries:
  • your role and side, and whether it won;
  • house size and round length;
  • loot banked by value tier;
  • kicks, captures, traps and police calls;
• frame rate and frame times (summarised per match);
• network quality per match (ping and packet loss, summarised);
• settings you change, such as sensitivity, field of view, graphics quality, and whether a control was rebound. We never collect which key you chose.

Why: to fix bugs, balance the Thief against the Residents, and make the Game run better on more PCs.

Legal basis: your consent. Where data protection law applies, this is GDPR / UK GDPR Art. 6(1)(a), and consent under the ePrivacy rules / PECR for sending information from your device.

Not collected:

• names, Steam IDs, chat, voice, keystrokes or typed text;
• your PC name or user name;
• your IP address;
• your country or precise location;
• log files and crash dumps.

3. Crash reports (only with your consent)

If you allow crash reports (they turn on with “Accept analytics” and have their own switch in Options), the Game may send where in the code a crash happened, the build number, the Windows version and the graphics card model. No log file, no memory dump and no ID that identifies you.

No crash-report service is in use yet. We will name it here before any crash report is sent.

4. Bot training (only if you tick “Help train our bots”)

What is sent: a recording of each match you play, five times a second:

• your character’s position, direction, speed and state (for example crouching, sprinting, holding an item);
• the other characters as your Game sees them, only as their role and seat number (for example “Thief, seat 0”), never their names or IDs;
• the match result.

Why: to train computer-controlled players (“bots”) for Not In My House.

4.1 Use of gameplay data to train AI

• Recordings are used only to train and test AI-controlled players for Not In My House and its updates.
• They are not sold and not shared, except with our storage provider (section 7).
• They are not used to train generative AI, or to make a likeness of anyone’s voice, face, text or play style for any other product.
• A trained bot keeps no recordings and nothing that could identify a player.
• Recordings are kept up to 3 years, then deleted. Bots already trained on them may be kept.
• You can stop at any time by unticking the box in Options > Privacy. From then on, nothing more is recorded or sent.

Recordings are anonymous and not linked to you, so we can’t find or delete a particular person’s recordings afterwards.

Legal basis: your consent, given separately from analytics.

5. What happens if you say no

Nothing is sent. The Game is fully playable. We ask again only if what the Game collects changes.

6. Beta sign-up (only if you use the sign-up form)

If you choose to join the beta in the Game’s BETA SIGN-UP panel, you send us:

• your email address;
• your Steam ID and Steam name;
• the game version and language.

We use them only to invite you to tests. To stop abuse, the sign-up server keeps a salted, one-way hash of your IP address, never the address itself.

Legal basis: your consent. You can ask us to remove your sign-up at info@keyholecuriosgames.com.

Kept until: the beta ends + 6 months, or until you ask us to remove it.

7. Who processes data for us

• Cloudflare, Inc. runs our servers, database and storage. Data is stored in the EU.
  • Cloudflare’s network necessarily sees the connection, including your IP address, to deliver the request.
  • We don’t store it, and we don’t keep server logs of it.
  • Cloudflare acts under its data processing terms.

We look at the data from Pakistan. Only the two of us have access, and we use two-factor authentication.

8. How long we keep it

9. Your choices and rights

• Change your mind at any time in Options > Privacy: analytics, bot training and crash reports each have their own switch. Turning analytics off stops sending at once and drops anything not yet sent.

• The analytics and bot-training data don’t identify you, and nothing links them to you. So we can’t find, show, correct or delete a particular person’s analytics afterwards, and there is no “delete my data” button.

• For the beta sign-up (personal data) you can ask for access, correction or deletion at info@keyholecuriosgames.com. We answer within one month.

• You can complain to your data protection authority. In the UK that is the ICO.

10. Children

• The Game isn’t directed at children under 13, or under the age of digital consent in your country (up to 16 in the EU). It has online voice chat with strangers.
• Analytics and bot training collect nothing that identifies anyone, of any age.
• If you believe a child has signed up for the beta, email us and we’ll delete it.

11. California and other US states

• We don’t sell or share personal information, and we don’t use it for targeted advertising.
• Analytics and bot-training data are anonymous.
• The only personal information we hold is the beta sign-up (section 6): identifiers (email, Steam ID). You can request access or deletion as described above.

12. Automated decisions

None that affect you legally or in a similarly significant way.

13. Changes

When what the Game collects changes, we update this text and ask you again in the Game before anything new is sent.