Draft for legal review, not yet in force. This describes how VoxelVenture works today, but it has not been reviewed by a lawyer. Highlighted [items] still need filling in.

Privacy policy

What VoxelVenture collects, why, who sees it, how long it is kept, and what you can do about it.

Version 0.1 · Drafted 2026-10-17

Who is responsible

[Company legal name], [Registered postal address], decides how your information is used ("we"). For anything in this policy, write to [Contact email for privacy, refunds and complaints].

For review: Name a data protection contact or representative if the law where you operate requires one.

What we collect

Account name and password (stored only as a salted scrypt hash): When: You create an account; Why: To sign you in and show your name next to what you do
Email address (optional): When: You add one; Why: To confirm it, then send notices about your buildings, leases, market stalls and requests, and the Plot of the Day
Business details: name, category, district, description, website, call to action, offer, logo, X handle: When: You list a business; Why: To publish your business page
Meeting and quote requests: name, email, phone (optional), message, preferred time: When: You send a request to a business; Why: To pass it to that business so it can reply, and to count it in its figures
Newsletter sign-ups to a business: email: When: You sign up and confirm by email; Why: So that business can write to you
Coupon claims, votes, quests, feedback posts, market stalls: When: You use these; Why: To run them, show them where they are public, and prevent cheating
Chat and private messages: When: You chat or send a message; Why: To deliver them, and to check reports of abuse
Where you are in the city, your outfit and name, your device type, screen size, browser and errors, with a one-way scrambled form of your network address: When: You play the 3D city; Why: So other players see you, and so we can fix problems on your device
A random visitor number, the country you visit from, and a one-way scrambled form of your network address: When: You visit pages; Why: To count real visits once, keep robots and repeat clicks out of the figures businesses see, and show how many people are online
The referral code of a link you followed, a campaign tag, and a click number added to a business's button: When: You follow or press a link; Why: To credit the person or campaign that brought you, and the business for sales that follow
Payments: what you bought, when, and Stripe's reference numbers: When: You pay; Why: To give you what you paid for, handle refunds and keep accounts. Your card details go to Stripe, not to us
A log of important actions (sign-ups, claims, purchases, refunds, moderation): When: Those actions happen; Why: Security and accountability. This log cannot be edited or deleted
For business owners: the weeks you used your dashboard and, if your business is in the pilot, your weekly check-in answers: When: You open your dashboard or change your profile; you send a check-in; Why: To learn whether VoxelVenture is useful to businesses and what to build next. Only our staff see the answers

What	When	Why
Account name and password (stored only as a salted scrypt hash)	You create an account	To sign you in and show your name next to what you do
Email address (optional)	You add one	To confirm it, then send notices about your buildings, leases, market stalls and requests, and the Plot of the Day
Business details: name, category, district, description, website, call to action, offer, logo, X handle	You list a business	To publish your business page
Meeting and quote requests: name, email, phone (optional), message, preferred time	You send a request to a business	To pass it to that business so it can reply, and to count it in its figures
Newsletter sign-ups to a business: email	You sign up and confirm by email	So that business can write to you
Coupon claims, votes, quests, feedback posts, market stalls	You use these	To run them, show them where they are public, and prevent cheating
Chat and private messages	You chat or send a message	To deliver them, and to check reports of abuse
Where you are in the city, your outfit and name, your device type, screen size, browser and errors, with a one-way scrambled form of your network address	You play the 3D city	So other players see you, and so we can fix problems on your device
A random visitor number, the country you visit from, and a one-way scrambled form of your network address	You visit pages	To count real visits once, keep robots and repeat clicks out of the figures businesses see, and show how many people are online
The referral code of a link you followed, a campaign tag, and a click number added to a business's button	You follow or press a link	To credit the person or campaign that brought you, and the business for sales that follow
Payments: what you bought, when, and Stripe's reference numbers	You pay	To give you what you paid for, handle refunds and keep accounts. Your card details go to Stripe, not to us
A log of important actions (sign-ups, claims, purchases, refunds, moderation)	Those actions happen	Security and accountability. This log cannot be edited or deleted
For business owners: the weeks you used your dashboard and, if your business is in the pilot, your weekly check-in answers	You open your dashboard or change your profile; you send a check-in	To learn whether VoxelVenture is useful to businesses and what to build next. Only our staff see the answers

We do not use advertising trackers or third-party analytics.

We never store your network address as it is: wherever it is kept (visit figures, error reports, the monitor), it is scrambled with a secret first, so it cannot be read back.

What others can see

Everyone: business pages; the account name of each building or stall owner; feedback posts with their author; Building of the Week tallies (not who voted).
Other players near you: your name, outfit, position and what you say in nearby chat.
The people in a conversation: its messages. Messages are protected in transit (HTTPS) and only members can open them, but they are not end-to-end encrypted: if a message is reported, a moderator can read it.
A business you contact or sign up to: the details you send it. Coupon claims and visits are counted, not named.

Stripe: What and why: What you buy, the amount, and your email if you confirmed one: to take payment and handle refunds
Our email provider: What and why: Each email we send, including the details of a request passed to a business: to deliver it
A content-checking service (only if we switch one on): What and why: Text and logo images you post, and chat messages: to catch abuse
X (only if you tick the box): What and why: A welcome post with your business name and X handle
Our hosting provider: What and why: Everything, stored on our servers
Sentry (error reporting): What and why: When something goes wrong on the site or our servers: the error, the page or address it happened on, and the app version. Not your name, email or network address

Who	What and why
Stripe	What you buy, the amount, and your email if you confirmed one: to take payment and handle refunds
Our email provider	Each email we send, including the details of a request passed to a business: to deliver it
A content-checking service (only if we switch one on)	Text and logo images you post, and chat messages: to catch abuse
X (only if you tick the box)	A welcome post with your business name and X handle
Our hosting provider	Everything, stored on our servers
Sentry (error reporting)	When something goes wrong on the site or our servers: the error, the page or address it happened on, and the app version. Not your name, email or network address

When you open a building in the 3D city, your browser also downloads furniture models from Supabase and a decoder from Google (gstatic), and a business's embedded video loads from YouTube (privacy-enhanced mode), Vimeo or itch.io. Those services see your network address.

We do not sell your information.

For review: Name the hosting and email providers. Add international transfer wording if they are in other countries.

What we keep in your browser

VoxelVenture sets no cookies. It keeps these in your browser's local storage:

voxelventure-token: Why: Your sign-in, so you stay signed in (removed when you sign out).; Needed for the site to work?: Yes
voxelventure-visitor, voxelventure-guest: Why: A random visitor number, so a visit, a coupon claim or a request is counted once and not from a robot. It does not say who you are.; Needed for the site to work?: No
voxelventure-ref: Why: The referral code of a link you followed, for 30 days, so the person who shared it is credited.; Needed for the site to work?: No
voxelventure-save, voxelventure-market, voxelventure-designs, voxelventure-votes, voxelventure-parked, voxelventure-local-stats, voxelventure-name: Why: Your game in this browser: the city, your Gold and outfits, local market stalls and designs, demo votes, parked cars and the name you chose as a guest.; Needed for the site to work?: Yes
voxelventure-view, voxelventure-viewer-fx, voxelventure-time-mode, voxelventure-sound, voxelventure-panel, voxelventure-map, voxelventure-map-zoom, voxelventure-map-tab: Why: Your settings: camera, effects, time of day, sound, panel and map.; Needed for the site to work?: Yes
voxelventure-gpu-reload: Why: For this tab only: that the page already reloaded once after your graphics card reset, so it does not reload again and again.; Needed for the site to work?: Yes
voxelventure-admin, voxelventure-city-edits: Why: Staff and developer tools only: an admin key for this tab, and the city editor's work.; Needed for the site to work?: Yes

What	Why	Needed for the site to work?
voxelventure-token	Your sign-in, so you stay signed in (removed when you sign out).	Yes
voxelventure-visitor, voxelventure-guest	A random visitor number, so a visit, a coupon claim or a request is counted once and not from a robot. It does not say who you are.	No
voxelventure-ref	The referral code of a link you followed, for 30 days, so the person who shared it is credited.	No
voxelventure-save, voxelventure-market, voxelventure-designs, voxelventure-votes, voxelventure-parked, voxelventure-local-stats, voxelventure-name	Your game in this browser: the city, your Gold and outfits, local market stalls and designs, demo votes, parked cars and the name you chose as a guest.	Yes
voxelventure-view, voxelventure-viewer-fx, voxelventure-time-mode, voxelventure-sound, voxelventure-panel, voxelventure-map, voxelventure-map-zoom, voxelventure-map-tab	Your settings: camera, effects, time of day, sound, panel and map.	Yes
voxelventure-gpu-reload	For this tab only: that the page already reloaded once after your graphics card reset, so it does not reload again and again.	Yes
voxelventure-admin, voxelventure-city-edits	Staff and developer tools only: an admin key for this tab, and the city editor's work.	Yes

You can clear them in your browser's settings; the game in that browser starts again from scratch.

For review: Decide whether the visitor number and referral code need consent before they are stored where you operate (they are not strictly needed). If so, a consent prompt must be added.

How long we keep it

See the data retention policy for each kind of information.

Your choices and rights

You can, yourself:

change or remove your email address, and turn notices off (in your account);
unsubscribe from a business's newsletter with the link in each email;
block people, mute conversations and turn message requests off;
hide a player for your visit, and report content.

For anything else (a copy of your information, correcting it, deleting your account and what you posted, or objecting to how we use it), write to [Contact email for privacy, refunds and complaints]. We answer within [30] days. Some things we must keep, such as payment records and the action log.

For review: There is no self-service account deletion or data export yet, and account holders get the Plot of the Day newsletter unless they turn notices off (opt-out). Both may need to change where you operate.

Keeping it safe

Passwords are stored as salted scrypt hashes, sign-ins as hashes, network addresses scrambled with a secret before they are stored, and conversion keys as hashes. The site uses HTTPS, and our services talk to each other only with secrets and on private addresses.

Children

VoxelVenture is not meant for children under [Minimum age]. If you think a child has given us information, write to [Contact email for privacy, refunds and complaints].

Changes

If we change this policy in a way that matters, we will say so on the site before it applies.