Privacy Policy
This Privacy Policy explains how Farming Season ("Farming Season", "we", "us") collects and uses personal data when you use our website, waitlist, the Farming Season game and related services such as our Telegram notification bot (together, the "Services").
It is written to meet the requirements of the EU General Data Protection Regulation ("GDPR"), the UK GDPR and the UK Data Protection Act 2018, and the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), as well as other data protection laws that apply to you where you live.
1. Who is responsible for your data
The data controller is [Legal name of the operator], [registered address], [company registration / tax number, if any].
Contact for all privacy questions and requests: [privacy@your-domain].
We never ask for your wallet's private key or seed phrase. Anyone who does is not us.
2. What data we collect
| Category | Data | Source |
|---|---|---|
| Wallet identity | Public wallet address, the network you use, signatures you create to prove ownership (no private keys). | Your browser wallet |
| Registration payment | Transaction hash, amount in ETH, the ETH/USD rate at the time, date. These are also public on the Robinhood Chain blockchain. | You and the blockchain |
| Game data | Farm name, buildings, fields, animals, balances, earnings, battle results, clan membership, clan chat messages, weekly leaderboard entries (farm name, clan tag, best wave, kills, time). | Your use of the game |
| Waitlist and X (Twitter) | X user ID, username, display name, profile picture link, follower count, account creation date, waitlist task status, referral code and referrals. | X, when you log in with X |
| Referral data | Who invited whom, referral earnings. | Your use of the Services |
| Security and anti-bot data | Verification results from Cloudflare Turnstile; flags raised by our automated tempo checks (wallet address, time, reason). | Cloudflare and our systems |
| Telegram notifications (optional) | Telegram user/chat ID, Telegram username and first name, your notification settings. | Telegram, if you connect the bot |
| Bug reports (optional) | Your description, browser and operating system, screen size, detected wallet extensions, wallet address, game context, recent error messages, a screenshot of the game screen and your IP address. | You, when you send a report |
| Technical data | IP address (temporarily, for rate limiting and security), browser storage used to save your game and settings (see the Cookie Policy). | Your device |
We do not collect special categories of personal data (for example health or biometric data). We do not use your data for advertising and we do not sell or "share" it for cross-context behavioral advertising as defined by the CCPA/CPRA.
3. Why we use your data and our legal bases
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Creating your account, running the game, saving your progress, paying rewards, processing the registration fee | Performance of a contract (Art. 6(1)(b)) |
| Preventing bots, fraud and abuse; securing the Services; enforcing fair play | Legitimate interests (Art. 6(1)(f)) |
| Waitlist, referral program and leaderboards | Performance of a contract (Art. 6(1)(b)) |
| Telegram notifications | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Handling bug reports and support requests | Legitimate interests (Art. 6(1)(f)) |
| Keeping records required by law (for example tax or payment records) and responding to authorities | Legal obligation (Art. 6(1)(c)) |
| Establishing, exercising or defending legal claims | Legitimate interests (Art. 6(1)(f)) |
4. Automated checks
To keep the game fair, we automatically check for activity that is unlikely to come from a person (for example many actions per minute, machine-regular timing, or collecting battle rewards for a long time without any input). If a check is triggered, earning is paused until you pass a short verification. This does not by itself produce legal effects or permanently restrict your account; any account restriction is reviewed by a person. You can contest any decision by contacting us.
5. Who we share data with
We share personal data only as needed to provide the Services, with:
- Hosting and infrastructure providers that store and serve our Services: Hetzner Online GmbH (servers in Helsinki, Finland, EU) and Cloudflare, Inc. (network delivery and security).
- Cloudflare, Inc. for bot protection (Turnstile) and, if used, network security.
- X Corp. when you choose to log in with X (we receive your profile data from X).
- Telegram when you choose to connect our notification bot.
- Blockchain networks. Wallet addresses and transactions on Robinhood Chain are public by design and cannot be changed or deleted by us.
- Authorities where required by law.
Public parts of the game are visible to other players: your farm name and village, clan membership and chat messages within your clan, and leaderboard entries (farm name, clan tag and results; wallet addresses are not shown on leaderboards).
6. International transfers
Some of our providers process data outside your country, the EU/EEA or the UK (for example in the United States). Where this happens we rely on adequacy decisions, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or other safeguards required by applicable law.
7. How long we keep data
- Account and game data: for as long as your account is active and for the current season, then up to 12 months after the season ends, unless you ask us to delete it earlier.
- Registration payment records: as long as required by applicable tax and accounting law.
- Anti-bot verification results: 12 hours; anti-bot flags: up to 12 months.
- Bug reports: up to 12 months.
- Telegram connection: until you disconnect the bot or delete your account.
- Waitlist data: until the waitlist ends and early access has been granted, then up to 12 months.
Data recorded on a public blockchain cannot be deleted by anyone.
8. Your rights
Everyone
You can ask us what data we hold about you, ask us to correct or delete it, and disconnect optional features (Telegram, X login) at any time. Write to [privacy@your-domain]. We will answer within one month, and may ask you to prove you control the wallet or account concerned, for example by signing a message.
EU / EEA and UK (GDPR)
You have the rights of access, rectification, erasure, restriction, data portability and objection (including to processing based on legitimate interests), and the right to withdraw consent at any time without affecting earlier processing. You may complain to your local supervisory authority or, in the UK, to the Information Commissioner's Office.
California and other US states (CCPA/CPRA and similar laws)
You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and not to be discriminated against for exercising your rights. We do not sell or share personal information and do not use sensitive personal information to infer characteristics. You may use an authorized agent. We honor Global Privacy Control signals as a request to opt out of sale or sharing, although we do not sell or share. Residents of other US states with similar laws (for example Virginia, Colorado, Connecticut, Utah, Texas) can exercise the equivalent rights through the same contact.
9. Children
The Services are intended for adults. You must be at least 18 years old (or the age of majority in your country, if higher) to register. We do not knowingly collect data from children; if you believe a child has registered, contact us and we will delete the account.
10. Security
We use encryption in transit (HTTPS), access controls, signed administrator logins and data minimization (for example, we do not store IP addresses with anti-bot flags). No system is perfectly secure; if a breach affects your rights we will notify you and the authorities as the law requires.
11. Cookies and similar technologies
We use only what is needed to run the game and remember your choices. Details and your options are in our Cookie Policy.
12. Changes
We will post any change to this policy on this page and update the date at the top. If a change materially affects how we use your data, we will tell you in the game or by Telegram (if connected) before it takes effect.