Privacy

What is collected

Your email address, given when you sign in. It is used to send the six-digit sign-in code and, if ever needed, to reach you about your account.

What you choose to publish: display name, username, bio, and whether your profile is public. Your time zone, which decides which day a play belongs to and therefore your streak.

How you play: for each day and each door, what you played, when, and what it earned. The greens and XP ledgers, the projects you funded, and the draw tickets those produced.

What you do in the feed: your posts, the games you publish with the move log that allows them to be replayed, the hearts you give, and the accounts you follow. Who you follow is visible only to you; a public page shows a follower count and nothing more.

The public profiles you visit: one row per person visited and per day, so that they can be told somebody looked. They learn your name, not how many times nor at what hour. That trace is readable by nobody, serves only that notice, and is erased after thirty days. A profile set to private receives nothing and is not concerned.

The accounts you block, and the reports you send: the account concerned, the reason chosen and the sentence you add if you add one. A block is visible only to you. A report is read by the team and by nobody else — the person concerned learns neither that they were reported nor by whom: a report that can be seen is a report nobody dares to send.

If you connect a step source on the web: your daily step count, read from your device maker's servers, and the encrypted tokens that let us read it. In the phone app, the count is read on the device itself, from Apple Health or Health Connect, and only a daily total leaves it. Either way, a daily step count describes the physical activity of an identified person, so it is treated as health data under Article 9 of the GDPR. The legal basis is your explicit consent — the authorisation you gave at the maker or on the phone, and which you withdraw there or here.

In the phone app: an identifier the app draws for itself the first time it runs, which distinguishes two phones and authorises nothing; and, with every request that sends steps, an attestation issued by Apple or by Google that proves the request comes from this app, unmodified, on a genuine device. No advertising identifier is ever read. If you turn notifications on, the token your phone gives us to reach it.

If you take the YLC Pass: the subscription itself and the activation codes it entitles you to. No postal address is asked for — the subscription is digital, and nothing is shipped. No card is ever seen by us: on the website, compte.ylcnetwork.com, the pass is paid in USDC from your YLC wallet, and the transaction is public on the Base network; in The Green phone app it is paid through the App Store or Google Play, which send us a signed receipt carrying an identifier for your subscription and never your Apple or Google account. A card subscription taken on the website before 25 September 2026 is still handled on Stripe's own hosted page.

If you sign in to another app of the suite with your YLC account: the record of that sign-in — which app, and when you allowed it — kept by the sign-in service so that the app can recognise you next time.

No analytics, no advertising identifiers, no tracking across other sites. Location only for Today's harvest, in the Walk door, and only while that screen is open: when you pick up an object, your position is sent once to check you are within 30 m of it, then discarded — it is never stored, logged or shown to anyone. We keep only which object you picked up, which is the same for your whole neighbourhood. Steps are counts, never a route.

Why

To run the game: the server replays every game from the moves it recorded, and that is what decides what a day was worth. Without them there is no score and no greens.

To keep it fair: the times at which a move was made are kept so that unusual patterns can be looked at by a person. They are never used to suspend an account automatically.

To show what you asked to show: a public profile exists because you set it to public, and shows only what this policy lists.

To count a day that was not played on a screen: steps are read on a schedule, or from the phone's own health store, because that is the only honest way to count them — nothing typed in a browser is ever accepted as a step.

To be sure a request comes from the app: the attestation says that the application is genuine and unmodified. It says nothing about who you are, it is checked once and kept no longer than the check.

To buy the impact a project funds: a purchase order exists because plastic has to be collected by somebody.

Who else sees it

Supabase hosts the database and handles sign-in. Vercel hosts and serves the application. Resend sends the emails, and receives the ones written to our contact address. Each of them processes data on our instruction and for no other purpose.

Crisp carries support: the chat bubble inside your account, and the messages sent to our contact address. It sees what you write, the address it comes from, your username, and the figures already shown to you in the sidebar — your greens, your XP, your level. It is a French company and it stores this in the European Union. There is no bubble on the public site, and none in the phone app: it loads only once you are signed in, on a computer.

Sentry receives error reports, so that we learn about a bug before someone has to write to us about it: what broke, on which page, and the kind of browser or phone. It receives no name, no email address and no IP address — the application is set to send none of them — and it records no screen. It stores the reports in the European Union, in Germany. We use it on the basis of our legitimate interest in keeping the service working.

Sequence (Horizon Blockchain Games Inc., Canada) provides the wallet each account receives. It is created on your device the first time you use the app, without asking you for anything, and it lives on the Base network. Sequence receives a technical session key from your device and the wallet's address; it receives no name and no email address. We store that address with your account, so that the creatures you collect in The reef can be recorded to it as non-transferable collectibles — they cannot be sold or exchanged. Records on a public blockchain are permanent and visible to anyone who knows the address. We use Sequence to provide the collection you asked for.

If you top up your wallet by card, Sequence passes your request to Meld (Meld Inc., United States), which compares card providers such as Mercuryo or Banxa and opens the one you pay with. They receive your wallet's address, the amount, your country and an internal identifier of your account — no name and no email from us. The card itself, and any identity check the provider requires by law, are entered on the provider's page and governed by its own privacy policy; we never see them. We use them to carry out the top-up you asked for.

Apple or Google handles payment for the pass in The Green phone app, depending on the phone; on the website the pass is paid in USDC from the wallet described below; Stripe still handles, on its own hosted page, the card subscriptions taken on the website before 25 September 2026. Card details never reach us. Greenspark buys the impacts a funded project pays for. Tremendous delivers a draw prize to the winner's email address.

Steps are read on the phone, from Apple Health or Health Connect, never written to: a one-way authorisation you grant in the phone's settings and can revoke there at any time. Nothing leaves the device but a daily count.

Apple and Google answer the attestation: we ask them whether this application, on this device, is genuine. They answer about the app and the device, never about you.

Straby, published by the same company, YLC NETWORK FZC, is part of the suite of apps. For people who sign in to it with their YLC account, and for them only, it receives: your YLC account identifier, your email address, your username, your referral code — so that your pages in the app carry your link —, whether your pass is active — its tier and, where there is one, the date it is paid up to — and which apps of the suite it unlocks. It never receives your payments, your card, your wallet, your greens or your commissions. It receives this when you sign in, and may ask for it again later, server to server, to keep your pass up to date without you having to sign in again. We send it because you asked to use your account there.

What you do in Straby — your pages, your cards, your contacts — is Straby's own data, described in its own privacy policy at straby.app/legal/privacy. An app outside the suite would receive nothing without first asking your consent on a YLC page.

Nothing is sold, rented, or shared with advertisers. Public profile pages are, by definition, visible to anyone — that is what making a profile public means, and it can be turned off at any time from the profile screen.

How long

As long as the account exists, except for the trace of a profile visit, which is erased after thirty days. There is no other automatic purge scheduled, and saying otherwise would be an undertaking that nothing enforces.

Your rights

If the GDPR applies to you, you may ask for access to your data, correction, erasure, a copy in a portable form, or restriction of processing. Display name, username, bio, time zone and profile visibility can be corrected yourself from the profile screen.

You delete your account yourself, from Profile and settings. If you have won a draw it is anonymised rather than deleted — your address, name, bio, username and photo are erased, and the row proving your win stays: a draw already held has to remain verifiable.

You may also complain to your local data protection authority.

Contact

Write to the address published in the legal notice below. It reaches a person, not a queue.

Governing language

This document exists in several languages. **The English version governs**: it is the language it was drafted in, and the language of the applicable law. The other versions are courtesy translations; in case of divergence, the English version applies.

This clause does not deprive anybody of the mandatory provisions of their national consumer law, nor of the right to bring proceedings before the courts of their place of residence.