Privacy policy
Last updated: 30 September 2026
This policy covers the game I'M HIM! and the website imhimgame.com, both run by Hanamori Labs, LLC ("we", "us"). It says what each of them does with information about you. If anything here is unclear, email [email protected].
The short version
- The game keeps its saves and settings on your computer. It sends nothing to us. We don't run a server for it.
- There's no account with us, no ads, no analytics and no crash reporting, in the game or on this site.
- If you link Twitch (it's optional), the game talks to Twitch directly from your computer. Chat stays between you, your viewers and Twitch.
- Steam features (achievements, the overlay) go through the Steam client on your computer, under Valve's policy.
1. What the game saves, and where
I'M HIM! keeps everything it needs on your own computer, in the app's local storage:
- your settings (volumes, quality, screen shake, flashing effects, reduced motion, text size), key bindings and difficulty;
- your progress: the HIM Ledger (runs, deaths and what caused them, bosses beaten, dares won and lost, helpers hired, relics found, endings reached), your Pet-Dex, wish orbs, and which tips and tutorials you've seen;
- if you link Twitch: your stream options (including any names you've blocked) and the Twitch sign-in tokens (see section 3).
On Windows this lives in %APPDATA%\ImHim; on macOS in
~/Library/Application Support/ImHim. That folder also holds the usual browser-engine caches the
desktop app uses to start faster. None of it is uploaded anywhere by the game. Delete the folder and the game
starts fresh.
The game writes no log files of its own. It has no microphone, camera, location or clipboard access. The karaoke mini game plays recorded vocals; it doesn't listen to you.
2. Steam
When you start I'M HIM! from Steam, it uses the Steamworks SDK, through the Steam client running on your computer, to unlock achievements and (on Windows) to show the Steam overlay. It reads your Steam display name only to print it in its own start-up message on your computer; it doesn't save it or send it anywhere. Your purchase, your Steam account and anything Steam itself does are handled by Valve under Valve's privacy policy. We never see your payment details.
3. Twitch (optional, for streamers)
Twitch is off until you link it in SETTINGS. If you do:
- Signing in. The game shows a code and you enter it at twitch.tv/activate. The game never
sees your Twitch password. It asks Twitch for two permissions: to read chat (
user:read:chat) and to send chat messages as you (user:write:chat). - Tokens. Twitch gives the game an access token and a refresh token, plus your Twitch user id and login name. The game keeps them in local storage on your computer (section 1) so you stay signed in. They are never logged and never sent to us. Anyone who can use your computer account could read them, as with any app that remembers a sign-in.
- Who it talks to. Only Twitch:
id.twitch.tv(sign-in, and a check that the token is still valid when the game starts and every hour),api.twitch.tv(subscribing to your chat, and posting messages) andeventsub.wss.twitch.tv(the live chat feed). The connection goes straight from your computer to Twitch. - Chat. The game reads messages in your own channel to find
!himcommands. For each message it sees the chatter's user id, login, display name, badges and the text. It keeps viewers' names, the side they picked and when they last spoke in memory while the game runs, to put haters' names on henchmen and in the kill feed and to count votes. It doesn't save chat or send it anywhere. Blocked names and names that fail the game's profanity filter are never shown. - Posting. The game posts in your chat only if you switch on "Post kills to chat" (it's off by default), and only kill notices such as "@name got folded. Not him.", at most four every 30 seconds.
- OBS overlay. If you switch on the overlay (off by default), the game serves it from your
own computer only (
127.0.0.1). It carries counts, vote bars and kill-feed names, never a token. - Unlinking. SETTINGS › STREAMING › DISCONNECT deletes the stored tokens and asks Twitch to revoke them. You can also remove the app from your Twitch account's Connections page. A refresh token that goes unused expires after 30 days.
If you're a viewer: when you type a !him command in a channel that's playing
I'M HIM!, your Twitch display name can appear on the streamer's screen, on a henchman or in the kill feed, and
in the channel's chat if the streamer posts kills. That happens on the streamer's computer and on Twitch; none of
it reaches us. Type !him leave to leave, or ask the streamer to block your name. Twitch's own
handling of chat is covered by Twitch's
privacy notice.
4. This website
imhimgame.com is a set of static pages hosted on Cloudflare Pages. It sets no cookies and runs no analytics, advertising or tracking scripts. Fonts, images and the trailer are served from this site; nothing is loaded from Google, YouTube or social networks. Like any web host, Cloudflare processes standard request data (such as IP address and browser type) to deliver the pages and protect them from abuse, under Cloudflare's privacy policy. We don't use it to profile visitors. Links to Steam, Twitch and Hanamori Labs take you to those sites and their own policies.
5. Email
If you email us, we get your address and whatever you send, and we use it to reply. We don't add you to a mailing list. Tell us if you'd like the conversation deleted and we will.
6. What we don't do
- We don't sell or share personal data, and we don't use it for advertising.
- We don't collect names, emails, locations, contacts, photos, microphone or camera data through the game.
- We don't run third-party analytics or advertising SDKs (no Google Analytics, Meta, Amplitude, Mixpanel, Sentry or similar).
7. Your rights
Because the game keeps your data on your computer, you control it directly: delete the folder in section 1, or unlink Twitch. Depending on where you live, you may have rights to access, correct, delete or export personal data we hold (for example under the GDPR or CCPA). The only personal data we hold is email you've sent us. Write to [email protected] and we'll answer within 30 days.
8. Children
The game and site aren't aimed at children under 13 (or under 16 in the European Union), and we don't knowingly collect personal information from them. If you think a child has sent us personal information, tell us and we'll delete it.
9. Changes
If the game starts doing something new with data, this page changes first, with a new "Last updated" date. A change that means data leaves your computer in a new way will be spelled out here before it ships.
10. Contact
- Email: [email protected]
- Operator: Hanamori Labs, LLC