Privacy

When you sign in

• Your wallet address, your guest number, when you first came and when you last visited (so the inn can say "welcome back" and show what changed since your last visit), and when you accepted the chat's house rules. Kept while the inn runs.
• A sign-in session: a random code in a cookie on your device. The inn stores only a scrambled copy of it, never the code itself. It lasts 30 days, and leaving the inn (signing out) ends it. Ended sessions are deleted within the hour.
• A one-time code for the message you sign. It expires after 5 minutes and is deleted within the hour.

Public blockchain data

Your inn

• If you pick an inn, the inn keeps which one, when you last set it, and whether you chose to show your seat, while the inn runs.
• Each inn's guest count is public. If you choose to show your seat and your wallet holds $HSTONE, your guest number and how many nights you've held show by that inn's fire for anyone to see. Your wallet address isn't shown, but because who holds $HSTONE, and since when, is public on the chain, someone could work out which wallet a seat belongs to, and see when it starts or stops holding.
• If you vote for the inn of the week, the inn keeps your wallet, the inn you picked and when you voted, and deletes them soon after that week's vote is counted, within about two weeks of your vote at most. Votes are counted, never shown one by one; only the winner is public.

The Tavern Board

• If you pin a note, the inn keeps your wallet, what you wrote, the inn you called home then, when, and whether the filter flagged it for him. The innkeeper reads it before it goes up. Until then only you and he can see it.
• Once it's up, it's public under your guest number and inn, never your wallet address. Only holders of $HSTONE can pin, so a note tells readers its guest number held $HSTONE when it was pinned, and because guest numbers count up, a newer guest's number narrows that down more. It stays up, unchanged, if you stop holding.
• You can take any of your notes down at any time, even if the board is closed, and it's deleted at once. A note the innkeeper hides stays visible to you for 30 days after he hides it, then it's deleted. A note hidden after reports stays hidden, visible only to you and the innkeeper, until he decides or you take it down. A note waiting for him stays until he decides or you take it down.
• If you report a note, the inn keeps your wallet with that note so nobody reports twice, until the innkeeper decides, or 30 days after your report, whichever comes first. The innkeeper's decisions are logged with the note's number, never your wallet.

Your hearth card

• If you make a hearth card, the inn keeps your wallet address with it, the month you last changed it, your choices, and what it shows: your inn and, only if you chose them, how rested you were and how long you'd held; your guest number shows only if you chose it. It keeps that until you take the card down.
• Anyone with the link can see your card and its picture. Your wallet address is never on it. If you choose to show how long you've held, someone could work out which wallet is yours from the chain, and tie it to wherever you posted the card. If you choose to show how rested you are, fully rested is true of most holders, but a lower one, next to the day you post the card, could narrow you down to the few wallets that started holding that week. After you take it down, sites that already showed it keep their own copy, and the picture can take up to an hour to clear from the inn's servers.

Your guestbook

• The guestbook reads the ledger string you paste in your own browser. It isn't sent to the inn or saved anywhere, unless you share it.
• If you share your ledger or one signature, your browser sends the string once and the inn keeps only what the page shows: your stamps, seals, phrases and their dates, never other travelers, the realm or anything else in the string. It also keeps your wallet address with the page, your character name only if you chose to show it, and when you shared or last updated it. It keeps that until you make the page private.
• Anyone with the link can see a shared page. Your wallet address is never on it, and your guest number is on it only if you choose to show it. If you do, and you also show your seat by an inn's fire or post a hearth card with your guest number and how long you've held, someone could match that guest number to your wallet. A shared page stays up if you stop holding, until you make it private.
• If you report a shared page, the inn keeps your wallet with that page so nobody reports twice, for 30 days at most. A page hidden after reports is deleted 30 days later, and if it showed a name, its keeper's name stays off all their pages for those 30 days.

The Common Room

• Your vote for the next stream: your wallet and the stream you picked, deleted within a day.
• Chat messages: your wallet and what you wrote. The chat is public: everyone in the room sees a message, under a tavern name made from your wallet. It's shown for 24 hours and deleted within the hour after. A reported or hidden message, with the wallets that reported it, is kept 30 days, then deleted.
• Chat limits and safety: when you first posted and the times of your recent messages and reports, kept until 30 days after your last message; any strike or timeout, kept until 30 days after your last strike. To stop bots repeating a message, the inn notes which wallets just posted the same text: the wallet for 10 minutes, deleted within the hour after, and the text only in scrambled form. Another check keeps only a scrambled form of a wallet, for a few minutes up to about a day.
• The people you mute are kept in your browser only. The inn never sees that list.

The Twitch player

Twitch's privacy notice

Cookies

• A sign-in session, for 30 days or until you leave the inn.
• A note that you've seen the innkeeper's welcome, so he doesn't repeat it. 30 days.

Keeping the inn safe

Vercel's privacy policy

Questions