Preview policy · final game data practices and retention review are pending.
Production automatic cleanup is not connected yet. The retention windows below are the release policy, not a guarantee of deletion on the current online service. Connecting and verifying scheduled cleanup is required before release.
Updated: · Mellowvale
Game account and local progress
Email and an account identifier are used for sign-in, verification, recovery, and deletion through Firebase Authentication. Your password is handled by Firebase, not displayed to other players. Nicknames and chosen appearance identify players in rooms. Personal story progress, furniture, and pets stay in the game’s local save; this version does not provide personal cloud-save synchronization.
Invitations, activities, and safety
Firebase Realtime Database holds temporary room membership, invitation state, readiness, results, and connection messages. The two players exchange live movement, activity actions, and match state over WebRTC. Blocks and reports support safety; report text can contain information you choose to share. Do not include sensitive personal data in a report.
Temporary visits and pet interactions
During a room session, the other player receives the appearance and pet details needed to show your character and the pet you bring. If you open a home room, a limited furniture display is shared for a read-only visit. Your guest cannot edit your home or take ownership of a pet. These temporary displays and cooperative actions do not replace either player’s personal save or create permanent shared assets.
Pictures you choose to keep
An in-game picture can be taken when both characters are visible in the same scene. The person taking it sees a preview and must choose Keep photo. Only that person’s local in-game album stores the image; it is not automatically saved for the friend, sent over WebRTC, or uploaded. This captures the game scene, not the device camera, and does not request system photo-library access. A backup you choose to export may include your album.
Optional voice and connection providers
Voice requires microphone permission and your explicit action to enable it. Audio is sent to the other player over WebRTC; the game does not record or transcribe conversations. STUN and connection services may process IP addresses and network metadata. This version uses direct connections with no TURN relay fallback. Some network combinations may prevent two-player play or voice.
This website
The static website has no visitor account, payment processor, analytics script, or advertising tracker. A language preference may be saved in your browser. Hosting providers process network request information to deliver and secure the site. Copying a public address and showing its QR code happen locally; no wallet connection or balance lookup is made.
Temporary rooms and anonymous closure
Normal room departure or account cleanup removes both participants’ nicknames, user identifiers, score summaries and connection signaling. Only a random room ID and an anonymous closed status remain, without players, scores, timestamps or signaling, to prevent reuse of old invitations. This anonymous closure record is retained indefinitely. Rooms expire after 1 hour; after production maintenance is enabled, personal fields and signaling from interrupted or expired rooms are scheduled for removal within 24 hours of expiry.
Safety reports: 30 days
Reports contain the reporter’s user identifier, room ID, reported user identifier, reason, an optional note of at most 600 characters, and a server timestamp. They support abuse handling and contain no audio recording, transcript or complete match replay. Reports are retained for 30 days; deleting an account does not delete this necessary safety record early. After production maintenance is enabled, expired reports are scheduled for deletion within 24 hours after that 30-day period.
Access records, blocks and your choices
While an account exists, its access record retains the last room ID, accepted rules version and server attempt time to enforce invitation cooldowns. It is removed on account deletion. Your block list stays until you unblock the player or delete your account. Use the game’s account-deletion option or this website’s instructions. Backups you saved yourself are not remotely erased. Removing browser site data clears the saved language. Provider and security-log retention still require final review.
Service providers and contact
Firebase is provided by Google. This website is hosted on Cloudflare Pages, with source and content editing through GitHub and Pages CMS. Providers may process data in other countries under their own terms. Use the public email on the Contact page for access, correction, deletion, or a privacy concern.