Privacy policy: website members and the town community

This part explains what we collect when you become a member of the website and use the town community, and how it’s used, kept and deleted. Contact: kaigong.agent@gmail.com.

1. What we collect

Your Google account: when you sign in with Google we keep only the account’s identifier (its subject id) and your email. Signing in asks Google for openid, email and profile, but we don’t keep your Google name or picture.
Signing in with an email: when you sign in with an email we keep only that email. The sign-in email is sent by the email service Resend, which handles your email address; we keep the code only as a hash that can’t be turned back, and delete it within a day.
Your member profile: the nickname and avatar you chose, when you agreed to the community rules and when you last changed your nickname; and, if you’re banned, when.
Pre-registration: if you pre-registered for the game, we compare your Google email, the email you sign in with (or an email you enter on your member page) with the pre-registration list and, if it’s on it, mark your account as a pre-registered member, which may later bring pre-registration rewards. Here the list is kept only as encrypted fingerprints that can’t be turned back into emails; an email you enter is only compared, never kept.
Signed-in computers: the name of each computer you sign the game in on, when it signed in and when it was last used. The server keeps only a hash of each computer’s token, never the token itself.
What you post: posts, pushes, photos and attached islands, and the record of your votes, applies and reports.
Cookies: one that keeps you signed in (until 90 days after you last use it), a short one used during Google sign-in (10 minutes), and a short one used while signing in with an email’s code (15 minutes). Neither is used for tracking or ads.

2. How it’s used

Other members see only your nickname, avatar, the moderator and pre-registered badges if you have them, and what you post.
Your email is used only for signing in and, if needed, to contact you. No API hands it to other members; only the developer can see it, when handling an account issue.
We don’t sell your data, use it for ads, or train AI models on it.

3. Where it’s kept

Your data is kept on Cloudflare’s services (Workers and the D1 database; photos in R2). Providing the service, Cloudflare handles connection details such as your IP address under its own privacy policy. The member pages’ fonts come from Google Fonts, so opening a page has your browser fetch them from Google.

4. How long, and deleting it

A computer that hasn’t used the community for 90 days is signed out and its record deleted. You can also sign computers out one by one on your account page.
You can delete your account on your account page: your profile, every signed-in computer, and your posts, pushes and photos are deleted together. The database’s disaster-recovery history keeps them for up to 30 more days, then they’re gone.
For serious or repeated breaches of the community rules, a moderator may delete and block an account: its profile and everything it posted are deleted as when you delete your own, but that Google account’s identifier (its subject id) and email are kept (for an account made with an email, that email), only to stop it joining the town community again. We neither record nor block IP addresses. If you think this is a mistake, write to us.
You can also remove this service’s access in your Google account’s “Third-party apps & services” settings.

5. Updates

This policy may change with the service; this page shows when it was last updated.

Last updated: October 28, 2026