Privacy Policy

Last updated 19 October 2026

Photon Labs, NSW, is responsible for the personal data described here. Contact: [email protected].

What we collect, and why

• Your email address, when you buy land or sign in: to send your receipt and sign-in links, and the daily digest about your creatures (you can turn it off at any time with the link in each email, or in your account).
• Your creature's description and name: to draw and show your creature. Names are public; descriptions aren't shown to others.
• Purchase records: what you bought, when and for how much, and Stripe's payment references, as accounting requires. Stripe handles your card details; we never see them.
• Your IP address, briefly, to stop abuse (rate limits and the bot check on previews). We don't store it with your account.
• Error reports: when something breaks, technical details (the page, the browser, the error) so we can fix it.
• Visit counts: we count visits, previews and purchases per day to see how the site is doing. This uses no cookies and stores no personal data.
• How the site is used, with Google Analytics: the pages you open, what you do on the board (zooming in, opening a creature, starting a claim, previews, checkouts and purchases with their value), your browser and device, and roughly where you are. If your browser sends Do Not Track or Global Privacy Control, none of this is collected.

Cookies and storage

• lp_owner: keeps you signed in (90 days).
• lp_vid: a random id so visitors' cheers and treats have a cool-down.
• lp_admin: for the site's operators only.
• In your browser only: whether the sound is on, an unsent land claim, and your order while you pay.
• _ga and _ga_…: set by Google Analytics to tell visits apart and recognise your browser when you come back (up to 2 years).

We don't use advertising cookies.

Who we share data with

• Stripe, to take payments.
• Resend, to send email.
• Anthropic, whose Claude models draw creatures from descriptions, write what creatures say and check descriptions against our rules. They receive the description and name, not your email.
• Cloudflare, for the bot check on previews and to deliver images.
• Google, for Google Analytics, which measures how the site is used (as above).
• Railway Corporation, which hosts the site and its database.

Some of them are in other countries, including the United States; we rely on their standard contractual safeguards.

How long we keep it

Account and creature data: while you have creatures on the board, or until you ask us to delete it. Purchase records: as long as accounting law requires. Creature previews that weren't bought: one day. Sign-in links: until used or expired. The creature diary keeps only recent history.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to stop using it, by writing to [email protected]. You can also complain to your data protection authority.

Children

Anyone can watch the board. Buying land is for adults, or with a parent's permission.