Privacy

Playing

The valley is played signed in with a wallet. When you sign in, the game keeps:

• the wallet's address, which is public on its chain, and an account of its own with an id;
• the valley you grow: its groves, Leaves, managers, orders and Rank;
• the entry you paid, as the transaction's hash and amount, and your Farm Power by day;
• your earnings, withdrawals and the Giraffies you rent or lend;
• a session cookie (valley_session, 30 days, readable only by the server) and your language (valley_locale, a year).

Your crew's names, the sound switches and how far you are in the guide live only in your browser's storage. Nothing of them reaches us.

The blockchain

Entries, withdrawals, claims and the Giraffies themselves are transactions on Robinhood Chain and Ethereum: public, permanent, and not ours to change or delete. Our servers never hold a key that can move your tokens; every claim is sent from your own wallet.

The Lil whitelist

The whitelist form keeps your X handle, the link to your reply and the wallet you will mint with, and a salted hash of your IP address to count sign-ups a day, never the address itself. Cloudflare Turnstile checks that you are a person, and X's public embed is asked whether your reply exists and who wrote it.

Analytics and errors

We use PostHog, hosted in the European Union, to see how the valley is played and to catch errors. The first time you open the site a small card asks about cookies, and nothing is recorded until you answer.

• Accept, and PostHog keeps a first-party cookie. Your taps, Ranks, upgrades, settings and errors are recorded, tied to your account once you sign in, and replays of the interface (the sheets and buttons, with every input masked and never the 3D valley itself) help us see where a newcomer gets stuck.
• Decline, and PostHog counts the visit from a hash its servers compute, keeps nothing in your browser and never ties anything to you.

You can change your answer any time in the game's settings, under "Share usage data". Errors on our servers are reported to PostHog with the account's id and the request's details.

Where it lives

• the database on Supabase in Frankfurt, in the European Union;
• the servers on Hetzner in Germany;
• Cloudflare in front of the site, which sees every request's address to keep the site up and safe;
• PostHog in Frankfurt.

OpenSea, your wallet and the chains themselves have their own policies.

How long

A session expires after 30 days. Replays are kept 30 days. An account, its valley and its payments stay while the game runs and its payouts can still be checked; the whitelist stays until the Lil drop is done.

Your choices

• Sign out of this device, or everywhere, from the game's settings.
• Change the cookie answer from the same settings.
• Ask to see, correct or delete what we hold about you at [email protected]. What is on a chain cannot be deleted by anyone.

The valley is not for anyone under 18.

Changes

We change this page when the game changes. The date at the top says when.