Privacy notice

FieldHunters is a browser game that takes payment and, sometimes, pays bitcoin. That means we hold more than a nickname. This page says what we collect, why, and who else sees it. It is written in the same voice as the rest of the site on purpose: a notice nobody can finish is not a notice.

Questions about your own data go through the signed-in contact form, which is how we know we are talking to the account the question is about.

What we hold

On an account we keep:

• the hunter name, email, and password hash (or the Google / Discord id you signed in with)
• the postal address, phone, and date of birth you gave at sign-up, so a payout can reach a person we can name
• what you buy, what you find, what you sell to the Museum, and the two balances (coins and Treasures)
• identity documents and checks, if you ask to withdraw
• messages you send us, and the replies

Other hunters see your hunter name and what you are doing on the field. They do not see your email, your address, your balances, or your documents.

Why

To run the game, take payment, send bitcoin, stop abuse, and answer you. We do not sell your account to anyone. We do not use your finds as an advertising profile. Coils and passes are sold because you pressed buy, not because a dossier said you would.

Who else sees it

• Stripe— card payments for coils, outfits, and passes. Card numbers never touch our servers; they live in Stripe's fields.
• DePay — crypto payments for the same shop rows.
• Bitcoin — Treasures that leave the game are sent as real BTC to a normal Bitcoin address (bc1…, or one starting with 1 or 3). Lightning invoices are not accepted.
• Brevo — mail we send you: receipts, verification, treasure notices. Not a newsletter you never asked for.
• Cloudflare Turnstile — the check on sign-up, sign-in, and contact, so a script cannot open accounts or fill the inbox.
• OneSignal— notifications in the Android app, only if you allow them on your phone (for example, when your free holes are back). OneSignal holds your phone's push token and links it to your account id, so a message reaches you and nobody else. Turn them off any time in your phone's settings.
• Google AdMob— in the Android app, an optional short video you can choose to watch to finish a hole sooner or get extra holes. Nothing plays unless you tap it. Google may use your phone's advertising id, as mobile ads do.
• PostHog— product analytics, hosted in the United States, reached through our own site so the browser is talking to us. We record sessions, including the screen as it is, so we can see where the game breaks. Sign-up and settings carry a name, an address and a date of birth; those can appear in a recording. Anyone with access to the operator's PostHog project can read them. Card numbers cannot: Stripe's fields are in their own frame.
• Vercel — the host. Logs of requests, the way any host keeps them.

Cookies and sessions

A session cookie keeps you signed in. That is ours. Turnstile sets its own when its script runs. Blocking it will not stop you digging; it may make the bot check retry. Blocking the session cookie signs you out.

How long

The account lives until you ask us to close it. Purchase, find, and payout records we keep for as long as we have to explain money that moved — that is the law, not a preference. Closed accounts are stripped of the profile we no longer need and kept as the ledger where the ledger still matters.

Your asks

You can read, correct, or ask us to delete what we hold, and you can object to the parts that are not required to run a payment or a payout. Do it from the contact form on the account it concerns. To delete your account yourself, see delete your account. If you are in the EU or UK you can also complain to your data-protection authority. We would rather fix it first.

Settings on the hunter page are where you change the address and the rest of the identity we use for payouts. Changing them there is faster than writing to us about a typo.