Publisher Upload Rules

1. A declaration for every package

I am authorized to distribute this package and its contents. I have checked it with reasonable care and confirm that it contains no malware, hidden mining, credential theft, undisclosed harmful behavior or unlawful content. I have the necessary rights and will report any issue I discover.

You must affirm this declaration for each new upload. Hatch records it with your account, the build identity, policy version and timestamp. A later successful upload associates it with the recorded archive hash. Existing packages are not retroactively marked as having a declaration.

2. Rights and accurate disclosure

Upload only packages you have authority to distribute, including all bundled code, assets and dependencies. Respect third-party licenses, copyright, trademarks, privacy and personality rights. Describe dependencies, network access, data collection and significant permissions honestly. Include required notices and the game's own privacy/license information where applicable. AI-generated material must meet the same rules.

3. Prohibited software and content

Do not submit malware, ransomware, spyware, credential theft, hidden cryptomining, destructive payloads, undisclosed remote control, unwanted installers or behavior that bypasses user permission. Unlawful exploitation material, threats, unlawful hate content, stolen personal data, fraudulent claims and content you lack the rights to distribute are prohibited.

Review your exported package with reasonable care and disclose known vulnerabilities, dependencies, data collection and material limitations. If you discover a harmful release or rights problem, stop its distribution and contact support@onhatch.gg promptly. A declaration must be honest; it does not certify perfect or harmless software.

4. Inspection and publication

Packages are processed separately from the website and must pass structural inspection and a current malware scan before automatic approval and publication are available. Unsupported, failed, quarantined and revoked packages are not available for new player downloads. Structural checks and scanning cannot prove that a game is harmless. Local test-fixture exceptions are disabled in production.

Uploading is not publishing. A publisher must create a release from an approved build. Published builds are immutable. Moderators can reject or restrict games for security, rights or conduct concerns, with reasons and available appeals under the Terms. Use Report content or support@onhatch.gg to raise a concern.