Privacy Policy

• 1. Who We Are
• 2. Information We Collect
• 3. Cookies and Browser Storage
• 4. How We Use Information, and Why We're Allowed To
• 5. Who We Share It With
• 6. International Transfers
• 7. How Long We Keep It
• 8. Your Rights
• 9. Keeping Chat Safe
• 10. Security
• 11. Children
• 12. Changes

Last updated: October 10, 2026

This Privacy Policy explains what information L.O.S Farms ("we," "us") collects, why, who it's shared with, how long we keep it, and the choices and rights you have. It applies to the L.O.S Farms website, game, desktop launcher, and Discord bot (together, the "Service"), and is part of our Terms of Service.

1. Who We Are#

L.O.S Farms is a free, non-commercial community project run by a small team of volunteers (the "staff"). The staff decide how your information is used, so we are the "controller" of your personal data under data protection laws such as the UK GDPR.

Contact us about anything in this policy through the contact form (choose "Privacy request"), or by messaging the staff on our Discord server.

2. Information We Collect#

Account information. When you sign in with Discord, we receive your Discord user ID, username, and avatar from Discord, and you choose a display name. If you create a farm with email instead, you give us your farm name, email address, and a password.

Email and password. If you create a farm with email or add email sign-in later, we store your email address and a securely hashed password (we never store or see your actual password). When you set a password, we check it against a public list of passwords known from data breaches; only a short, anonymous fragment of its hash is sent for that check, never the password itself.

Gameplay data. Your farm, inventory, currency balances, levels, quest progress, neighbors, badges, care packages, and a record of Farm Cash rewards (what you earned and where it came from).

Discord bot activity. When you use our bot's commands or buttons, we receive your Discord user ID and what you clicked or typed in the bot's forms, so we can run the game and give you rewards.

Discord server activity. While you're in our Discord server, our bot notes that you sent a message and in which channel to run chat levels and the Farmdex animal game. We keep your chat XP, level, and message count, and the animals you catch. If you set your birthday with /birthday, we store only the month and day. When you join the server, the bot uses your Discord name, avatar, and member number to post a welcome card in the welcome channel.

Discord moderation log. To keep the server safe, the bot keeps a staff-only log of what happens in it, like the logs kept by moderation bots such as Dyno or MEE6: messages that are edited or deleted (with the text before and after, and the names of any attachments), members joining and leaving, nickname, username, avatar, and role changes, voice channel joins and leaves, bans, kicks, and timeouts (with the moderator and reason), and changes to channels, roles, emoji, invites, and server settings. To show what an edited or deleted message said, the bot holds recent messages in memory for a short time; a message is only written down if it is edited or deleted. Only staff can see this log.

Content you provide. Forum posts, wiki edits, chat and direct messages, profile details, and messages you send through our contact form (including the name and email you give us there).

Safety tools. The members you block, your choice of who may send you direct messages, and reports you make. When you report a chat or direct message, we keep a copy of that message and the few messages just before it, so the staff can understand what happened.

Technical data. Your IP address, browser user agent, and session identifiers are stored with your login session, mainly for security and abuse prevention. Server and error logs may include request details and your account ID. If the game crashes, it sends us an error report, which we store with a list of your last few game actions to help us find the cause.

Admin action logs. We keep an internal log of moderation and administrative actions (such as bans or currency corrections) for accountability.

We do not collect payment information, because the Service never takes payments.

3. Cookies and Browser Storage#

We only use cookies that the Service needs to work: a session cookie that keeps you signed in, a security cookie that protects forms (CSRF), and, if you choose "Remember me," a cookie that keeps you signed in longer. Your browser also remembers the site theme you pick. We do not use advertising or tracking cookies, and we do not use analytics of any kind.

4. How We Use Information, and Why We're Allowed To#

We do not sell or rent your information, and we do not use it for advertising or profiling.

5. Who We Share It With#

Information you post publicly (forum posts, leaderboards, profiles, public chat, farm shares and care package wins in Discord) is visible to others. Otherwise, we only share information with these services, which help us run L.O.S Farms and may only use it for that:

We also share information when the law requires it, or when it's needed to protect someone's safety.

6. International Transfers#

Our service providers above are based in the United States, so your information may be stored or processed there. When it leaves the UK or EU, we rely on the protections those providers offer: the UK–US "data bridge" and the EU–US Data Privacy Framework where they are certified, or the standard contractual clauses (with the UK Addendum) in their data processing terms.

7. How Long We Keep It#

• Your account, farm, and profile: while your account exists. When you delete it, they're deleted.
• Login sessions: end after 10 hours without activity ("Remember me" lasts longer, until you sign out).
• Server and error logs: about a week; daily website logs up to 14 days.
• Discord moderation log: 30 days, then deleted from our database. Copies the bot posts in staff-only log channels on Discord stay there until the staff delete them.
• Backups: one per weekday, each replaced a week later, so deleted information leaves our backups within 7 days.
• Chat and direct messages: currently kept until they are deleted by you or the staff, or your account is deleted.
• Reports, admin action logs, and Farm Cash reward records: kept to protect players and the in-game economy, and for accountability.
• Forum posts and wiki history: kept to preserve community history unless removed by staff. When you delete your account, some community content (such as forum posts others have replied to) may remain without your name attached.

8. Your Rights#

• See and download: view your data in your account settings and download a copy of your save file at any time.
• Correct: change your display name, email, and profile details from your account settings.
• Delete: delete your account at any time from Account settings → Data & Account.
• Control what's shared: your privacy settings decide what others see, who can write on your wall, and who can send you direct messages.
• Ask us: for anything else, use the contact form and choose "Privacy request." We answer within one month.

If you're in the UK or EU, you also have the right to access, correct, delete, restrict, or move your data, to object to our use of it based on legitimate interests, and to withdraw your consent at any time. If you live in a US state with its own privacy law (such as California), you have the rights that law gives you. We will honor these rights and never treat you differently for using them.

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live.

9. Keeping Chat Safe#

You can report any chat or direct message (⚑ on the message), block a member (their posts, wall messages, and chat are hidden from you, and neither of you can send the other a direct message), and choose who may send you direct messages. By default, only your neighbors and members you follow can. Staff do not read direct messages, except a message that has been reported (with the few before it), or when it's needed to investigate serious abuse or to meet a legal requirement.

10. Security#

We use HTTPS everywhere, hashed passwords, rate limits on sign-in and rewards, and internal logs of staff actions. No system is perfectly secure, so please use a strong, unique password and keep your Discord account protected with two-factor authentication. If a security problem puts your information at risk, we will tell you and, where the law requires, the regulator.

11. Children#

You must be at least 13 to use the Service, and we do not knowingly collect information from children under 13. If you believe a child under 13 has an account, let us know through the contact form and we will delete it. If you are under 18, please use the Service with your parent's or guardian's permission. Our safety tools (reporting, blocking, and direct messages limited to neighbors by default) are on for everyone.

12. Changes#

We will update the "Last updated" date when this policy changes, and announce significant changes on the site or on Discord.