Privacy notice

FieldHunters is a browser game that takes payment and, sometimes, pays bitcoin. That means we hold more than a nickname. This page says what we collect, why, and who else sees it. It is written in the same voice as the rest of the site on purpose: a notice nobody can finish is not a notice.

The operator is in France. Questions about your own data go through the signed-in contact form, which is how we know we are talking to the account the question is about.

What we hold

On an account we keep:

• the hunter name, email, and password hash (or the Google / Discord id you signed in with)
• the postal address, phone, and date of birth you gave at sign-up, so a payout can reach a person we can name
• what you buy, what you find, what you sell to the Museum, and the two balances (coins and Treasures)
• identity documents and checks, if you ask to withdraw
• messages you send us, and the replies

Other hunters see your hunter name and what you are doing on the field. They do not see your email, your address, your balances, or your documents.

Why

To run the game, take payment, send bitcoin, stop abuse, and answer you. We do not sell your account to anyone. We do not use your finds as an advertising profile. Coils and passes are sold because you pressed buy, not because a dossier said you would.

Who else sees it

• Stripe— card payments for coils, outfits, and passes. Card numbers never touch our servers; they live in Stripe's fields.
• DePay — crypto payments for the same shop rows.
• Lightning — Treasures that leave the game go over that rail, to the wallet you give us at payout.
• Brevo — mail we send you: receipts, verification, treasure notices. Not a newsletter you never asked for.
• Cloudflare Turnstile — the check on sign-up, sign-in, and contact, so a script cannot open accounts or fill the inbox.
• Google Ad Manager — an advert between holes on the field, for free hunters only, when a unit is configured. A pass turns them off. Google may collect what a typical display ad collects. We do not put those units on sign-in, on the pages you read, or over an open dig.
• PostHog— product analytics, hosted in the United States, reached through our own site so the browser is talking to us. We record sessions, including the screen as it is, so we can see where the game breaks. Sign-up and settings carry a name, an address and a date of birth; those can appear in a recording. Anyone with access to the operator's PostHog project can read them. Card numbers cannot: Stripe's fields are in their own frame.
• Vercel — the host. Logs of requests, the way any host keeps them.

Cookies and sessions

A session cookie keeps you signed in. That is ours. Ad Manager and Turnstile set their own when those scripts run. Blocking the third-party ones will not stop you digging; it may stop an advert filling, or make the bot check retry. Blocking the session cookie signs you out.

How long

The account lives until you ask us to close it. Purchase, find, and payout records we keep for as long as we have to explain money that moved — that is the law, not a preference. Closed accounts are stripped of the profile we no longer need and kept as the ledger where the ledger still matters.

Your asks

You can read, correct, or ask us to delete what we hold, and you can object to the parts that are not required to run a payment or a payout. Do it from the contact form on the account it concerns. If you are in the EU or UK you can also complain to your data-protection authority. We would rather fix it first.

Settings on the hunter page are where you change the address and the rest of the identity we use for payouts. Changing them there is faster than writing to us about a typo.