Skip to content
Sign in Create my hotel

Privacy Policy

Version of October 4, 2026

This Policy explains how Twizer Tecnologia Ltda. (58.588.904/0001-60), which runs Habbo.Host, handles the personal data of customers and site visitors, in line with the EU General Data Protection Regulation (GDPR) and the Brazilian General Data Protection Law (LGPD, Law no. 13,709/2018).

1. Data we collect

  • Account: name, e-mail and password (stored encrypted, never as plain text).
  • Hotels and payments: details of the hotels you create, invoices and payment history. Card details are handled by the payment processor (Stripe) and never reach our servers; we do not store bank details.
  • Use and security: IP address, access date and time and a log of the actions taken in the panel (audit), for security and fraud prevention.
  • Support: the messages and files you send in tickets.

2. Why we use it and on what legal basis

  • To create and keep your account and hotels, charge you and provide support: performance of a contract.
  • To keep access records and issue tax documents: compliance with a legal obligation.
  • To protect the service against abuse and fraud and to improve the product: legitimate interests.
  • To send important notices (payments, hotel problems, support replies). We do not send marketing without your consent.

3. Your hotel's player data

The data players register on your hotel (such as nickname, e-mail and password) lives in the hotel's database. For that data, you are the controller and Habbo.Host acts as a processor, handling it only to host the hotel and run its backups. It is up to you to inform your players about the use of their data.

4. Who we share it with

We share data only with the suppliers needed to run the service, who must also protect it:

  • payment processor (card and, in Brazil, PIX);
  • infrastructure, network and protection providers (servers, DNS and certificates);
  • e-mail delivery provider;
  • public authorities, where required by law or a court order.

Some of these suppliers may be outside your country; in that case we require adequate protection safeguards, in line with the GDPR and the LGPD.

5. How long we keep it

  • Account and hotel data: while the account exists. After closure, it is deleted, except what the law requires us to keep.
  • Access records: at least 6 months, as the Brazilian Internet Civil Rights Framework requires.
  • Invoices and payments: for the period required by tax law.
  • Hotel database backups: up to 30 days.

6. Cookies

We use only the cookies needed for the site and the panel to work (to keep you signed in and protect the forms). We do not use advertising cookies.

7. Security

We use an encrypted connection (HTTPS), passwords protected by hashing, isolation between hotels, IP-based database access control and audit logs. No system is completely invulnerable; in the event of an incident that may pose a relevant risk, we will notify you and the data protection authorities, as the law requires.

8. Your rights

Under the GDPR and the LGPD you can ask, at any time, for: confirmation that we process your data, access, correction, anonymisation or deletion of unnecessary data, portability, information about sharing, and withdrawal of any consent. To do so, write to [email protected]. We will reply within 15 days. You may also complain to your local data protection authority.

9. Changes

This Policy may be updated. The date of the current version is at the top of the page, and relevant changes will be announced by e-mail or in the panel.