Privacy Policy

1. Introduction

TeamFarmy ("we") is a free 3D city-building game played in the browser at teamfarmy.com. This page explains what data we store, why, and how you control it. We only store what the game needs to work.

2. Data we store

• Display name you type (2-20 characters). It is shown to your team mates, in team chat, on leaderboards and on your team's public city view. You do not need to use your real name.
• Game data: your city, inventory, coins, level, quest and quiz progress; team information (name, emblem, motto, member list); an activity log (the latest 300 entries per team) and team chat messages (the latest 100 per team; older ones are deleted).
• Login sessions: each device gets a session token. We store only the SHA-256 hash of the token (never the token itself), plus when it was created, last used and a short device label such as "Chrome · Windows". We do not store the full User-Agent.
• If you choose to sign in with or link Google: your Google account identifier (sub) and e-mail address. We only request the basic scopes (openid, email, profile). We do not store your profile picture or any Google token, and we do not access your Gmail, Drive or contacts. The e-mail is used to help with account recovery, never for advertising.
• IP address: the game server keeps your IP only temporarily in memory, for about a minute, to rate-limit requests (anti-spam). It is not written to the database or to the application's logs. Our hosting provider or proxy may keep standard access logs (including IP) under their own configuration.

A team's city can be viewed publicly without logging in: viewers see the team name, emblem, motto, buildings, and members' display names, roles and levels, but not account ids, online times or invite codes.

3. What we do not do

• No advertising.
• No third-party analytics (such as Google Analytics) and no tracking across other websites.
• We do not sell, rent or share your data with third parties for advertising.
• We do not ask for your real name, date of birth, address or phone number.

4. Cookies and browser storage

TeamFarmy does not set cookies. It uses the browser's localStorage for the following items, all of which stay on your device:

• tf_token: this device's login session token (also your recovery code if you play as a guest);
• tf_name: the last name you typed; tf_lang: language; tf_quality: graphics quality; tf_quality_auto: the graphics level the game lowered by itself on a slow device; tf_solid: solid (non-glass) interface on/off; tf_sound: sound on/off;
• tf_lastcrop, tf_fieldcrops: the crops you picked last; tf_tut_collapsed: whether the guide panel is collapsed;
• tf_save_nudge: when you dismissed the "Save your progress with Google" reminder;
• tf_help_seen: the controls guide has been shown once; tf_era_prog_*, tf_era_ms_*: a few era-progress samples and the 25/50/75/100% milestones already announced, used to estimate the time left.

Clearing your browser data signs you out of this device. Keep your recovery code or link Google before you do.

5. Sign in with Google

Google sign-in is optional. When it is turned on, the start screen and Settings load the Google Identity Services library from accounts.google.com. Google then receives the request for that library (including your IP address and browser details, like any website you load) and may use cookies or storage under Google's privacy policy. If you prefer not to, play as a guest with "Play now": the whole game works without Google. You can unlink Google at any time in Settings → Account (as long as the account still has a recovery code to get back in).

6. Age and children

TeamFarmy is meant for players aged 12 and over. Players under 16 should play with the awareness and consent of a parent or guardian. We do not knowingly collect any personal information from children beyond what section 2 lists. Parents can ask us to delete their child's data (section 7). If you know a child under 12 has created an account, please tell us and we will delete it.

7. Retention and deletion

• Account data is kept as long as the account exists. There is currently no automatic deletion of idle accounts.
• The database is backed up daily and the latest 14 backups are kept, so deleted data can remain in backups for up to 14 days.
• You can do these yourself: sign out of one or all devices, unlink Google (Settings → Account). If a team leader who is the only member leaves, the team is disbanded and its city, chat and log are permanently deleted.
• To delete your whole account or get a copy of your data, e-mail lienhe@teamfarmy.com with your display name (and the linked Google e-mail, if any). We may ask for more details to confirm you own the account. Never send your recovery code by e-mail. We reply within 30 days.

8. Your rights

Under Vietnamese personal data protection law (Decree 13/2023/ND-CP) you have the right to know, access, correct and request deletion of your data, to withdraw consent and to object to processing. Send requests to lienhe@teamfarmy.com.

9. Security

Connections to TeamFarmy use HTTPS, session tokens are stored only as hashes, and we rate-limit requests to prevent abuse. No system is perfectly secure. Keep your recovery code private: anyone who has it can enter your account.

10. Changes to this policy

When the policy changes we update the date at the top of this page. For important changes we will also tell you in the game.

11. Contact

Any privacy question: lienhe@teamfarmy.com.