Privacy

• The Folly knows you by your Hive name. It never asks for your email, your real name or your keys.
• It keeps your crag and your records so you can play from any device, and your payments so they can be checked and refunded.
• Its cookies only keep you signed in. No analytics, no ads, no third-party trackers.
• It doesn't store IP addresses.
• You can delete your data yourself, in Settings: Delete my data.

The Folly is run by its makers, who decide what's kept and why (the “controller”). Write to @finksfolly on Hive about anything on this page.

• Your Hive account name, given when you sign in, and a random id for your crag. Signing in asks Keychain to sign a short message; the Folly checks the signature and keeps the one-time challenge for a day.
• Your game: your crag and everything in it, how far you've got (including how long chapters took and where play stalled, which is how the game's pace is tuned), and settings you change in the game, such as closing your crag to visitors.
• Your nights: the probes you fire at the moon each night and what they found, your relics, and your times on the Daily Conundrum and the Weekly Survey.
• What Splinterlands says about your account, read from its public API: the levels of the cards that matter to the Folly's Friends, and your staked SPS (for the Council standard). Only these are kept, in your game.
• Payment records: your account, what you ordered, the price, the order id, the transaction id, whether it was paid, set aside or refunded, any refund's transaction, and when.
• When your crag was made and when you last played (last_seen_at).

Some of it is public on purpose, under your @name:

• the Chronicle's boards (renown, Grandeur, the Conundrum, the Weekly Survey) and the live feed of finds;
• visits to your crag, if it's open to them: the crag, its sign and plaques, the Shield, and the Council standard's tier (never your stake, your purse or your puzzles);
• the Benefactors' Book, if you've given: your name, title, total and since when.

Payments are transfers on Hive, so they're public on the chain, for good, whatever the Folly keeps: anyone can see a transfer from your account to @finksfolly, with its order id as the memo. Nobody, the Folly included, can remove it.

The Folly sets only these cookies, all strictly necessary for signing in and playing, all httpOnly (the page's scripts can't read them), sent only to the Folly. There's no analytics, no advertising and no third-party tracker of any kind, so there's no cookie banner to click through.

Signing out clears them.

The game also keeps a few things in your browser's own storage. They never leave your device, and clearing the site's data removes them.

The Folly doesn't store IP addresses. To stop one network flooding it (too many new crags or sign-ins in a day), it counts requests per network under a key made from the day and the network with a secret (an HMAC), which can't be turned back into the address or matched across days. Those counts are deleted after two days.

The hosting provider sees your IP address, as any website's does, and its logs may hold it for a short time.

Your browser talks only to the Folly's own site (and to Hive Keychain, on your own device). Behind it:

• Vercel hosts the Folly and runs its server. Its logs hold requests and the server's own error reports for a short time.
• Neon hosts the database where your crag, records and payment records are kept.
• Splinterlands' public API and public Hive nodes: the Folly sends them your account name to read public data (your posting key's authority when you sign in, your card levels and staked SPS) and transaction ids to check payments.
• An alert channel (a Discord or Slack webhook) may receive an order id, account name, item and transaction id when a payment needs a person to look at it, and short error reports.

Vercel and Neon may process data outside your country, including in the United States. Nothing is sold, and nothing is shared for advertising.

• Contract: keeping your crag and records to let you play, and your orders to deliver what you buy.
• Legitimate interests: abuse limits, security and error reports, tuning the game's pace, and the public boards that are part of the game (which you can leave, below).
• Legal obligation: keeping payment records for accounting.

• Your game, records and card and stake reads: until you delete them, or ask us to.
• Payment records: kept for accounting as long as the law requires, even after you delete your data. They hold only what's listed above.
• Sign-in challenges: a day. Network counts: two days. Hosting logs: a short time, as the host keeps them.

You can ask for a copy of what the Folly keeps about you, have it corrected or deleted, restrict or object to how it's used, and take it elsewhere. Much of it you can do yourself, in the game's Settings:

• Delete my data deletes your crag and everything on it, your relics and nightly hunts, your board times and your sign-ins, and signs you out everywhere (payment records are kept, as above).
• Show my name on the Chronicle: turn it off and the boards and the feed show “An observer” in its place, with no link to your crag.
• List me in the Benefactors' Book: turn it off to leave the Book.
• Let others look round: turn it off to close your crag to visitors.

For anything else, write to @finksfolly on Hive; you'll have an answer within a month. You can also complain to the data protection authority where you live.

When this notice changes, the date at the top changes with it.