Privacy Policy
Privacy Policy
Draft — not legally reviewed, not in force.
This describes what the code currently does, which is a useful
starting point but is not a compliant privacy policy. It has not been
checked against GDPR, CCPA, or anything else. Replace it before the
game accepts a single real account.
Tracked as T-14.12 in ROADMAP.md.
What we collect
A username, an email address, and a password — stored only as an argon2 hash, never in plain text. Your game state: farm, plots, animals, inventory, gold, and trade history. Security events such as failed sign-ins, including the originating IP address.
Two timestamps about the account itself: when the account was created, and when it was last active. The second is what lets an idle farm be simulated from the moment you left, and it is the only behavioural record kept about when you play.
Your character's appearance — skin, eyes, hair and clothing colours — if you have chosen one. It is cosmetic, it is not shown to other players, and it is stored because the character has to look the same next time you sign in.
What we do not collect
No third-party analytics, no advertising identifiers, and no tracking across other sites. The pages load no external scripts, fonts, or images — everything is served from this origin.
Payments
VIP purchases go through Stripe. Card details are entered on Stripe's own checkout and never touch our servers. We store the Stripe session and payment identifiers, the amount, the currency, and the status, so that purchases can be reconciled and supported.
If a purchase is refunded or charged back we record when, because that is what revokes VIP and flags the account. A refund therefore does not erase the purchase record; it adds to it.
Cookies
One cookie, th_session, which keeps you signed in. It is
httpOnly and cannot be read by scripts. There are no advertising or
analytics cookies, which is why this site has no cookie banner.
Trade history
Completed trades are written to a permanent, unmodifiable log recording both players, the items, and the time. This is what makes it possible to investigate a scam report. Because it is an audit record, it is retained even if an account is closed.
Still to write
Legal basis for processing, retention periods, data export and deletion requests, sub-processors, international transfers, and a contact address for privacy enquiries. All of it needs professional review.