Changes compared with the version before it. Added Removed
How this version looked
- 1. Who We Are
- 2. Information We Collect
- 3. Cookies and Browser Storage
- 4. How We Use Information, and Why We're Allowed To
- 5. Who We Share It With
- 6. International Transfers
- 7. How Long We Keep It
- 8. Your Rights
- 9. Keeping Chat Safe
- 10. Security
- 11. Children
- 12. Changes
Last updated: October 6, 2026
This Privacy Policy explains what information L.O.S Farms ("we," "us") collects, why, who it's shared with, how long we keep it, and the choices and rights you have. It applies to the L.O.S Farms website, game, desktop launcher, and Discord bot (together, the "Service"), and is part of our Terms of Service.
1. Who We Are
L.O.S Farms is a free, non-commercial community project run by a small team of volunteers (the "staff"). The staff decide how your information is used, so we are the "controller" of your personal data under data protection laws such as the UK GDPR.
Contact us about anything in this policy through the contact form (choose "Privacy request"), or by messaging the staff on our Discord server.
2. Information We Collect
Account information. When you sign in with Discord, we receive your Discord user ID, username, and avatar from Discord, and you choose a display name.
Email and password (optional). If you add email sign-in, we store your email address and a securely hashed password (we never store or see your actual password). When you set a password, we check it against a public list of passwords known from data breaches; only a short, anonymous fragment of its hash is sent for that check, never the password itself.
Gameplay data. Your farm, inventory, currency balances, levels, quest progress, neighbors, badges, care packages, and a record of Farm Cash rewards (what you earned and where it came from).
Discord bot activity. When you use our bot's commands or buttons, we receive your Discord user ID and what you clicked or typed in the bot's forms, so we can run the game and give you rewards.
Discord server activity. While you're in our Discord server, our bot notes that you sent a message and in which channel (never what the message says) to run chat levels and the Farmdex animal game. We keep your chat XP, level, and message count, and the animals you catch. If you set your birthday with /birthday, we store only the month and day. When you join the server, the bot uses your Discord name, avatar, and member number to post a welcome card in the welcome channel.
Content you provide. Forum posts, wiki edits, chat and direct messages, profile details, and messages you send through our contact form (including the name and email you give us there).
Safety tools. The members you block, your choice of who may send you direct messages, and reports you make. When you report a chat or direct message, we keep a copy of that message and the few messages just before it, so the staff can understand what happened.
Technical data. Your IP address, browser user agent, and session identifiers are stored with your login session, mainly for security and abuse prevention. Server and error logs may include request details and your account ID. If the game crashes, it sends us an error report, which we store with a list of your last few game actions to help us find the cause.
Admin action logs. We keep an internal log of moderation and administrative actions (such as bans or currency corrections) for accountability.
We do not collect payment information, because the Service never takes payments.
3. Cookies and Browser Storage
We only use cookies that the Service needs to work: a session cookie that keeps you signed in, a security cookie that protects forms (CSRF), and, if you choose "Remember me," a cookie that keeps you signed in longer. Your browser also remembers the site theme you pick. We do not use advertising or tracking cookies, and we do not use analytics of any kind.
4. How We Use Information, and Why We're Allowed To
| What we do | Our legal basis (UK GDPR) |
|---|---|
| Run your account, farm, the game, website, launcher, and bot; keep you signed in | Contract: it's needed to provide the Service you signed up for |
| Show your display name, avatar, levels, badges, and farm stats on leaderboards, profiles, forums, and chat | Contract, and your choices in your privacy settings |
| Send emails about your account only (confirming your address, password resets, security notices). We never send marketing email | Contract |
| Send Discord notifications you have turned on, and post community updates you trigger (such as farm shares or care package winners) | Consent (you can turn these off any time) |
| Store your birthday month and day if you add it | Consent (remove it any time) |
| Prevent cheating, alternate accounts, abuse, and unauthorized access; handle reports; enforce our Terms | Legitimate interests: keeping players and the Service safe and fair |
| Fix bugs, investigate crashes, and improve performance | Legitimate interests: keeping the Service working |
| Keep records needed for legal requests or to protect our rights | Legal obligation or legitimate interests |
We do not sell or rent your information, and we do not use it for advertising or profiling.
5. Who We Share It With
Information you post publicly (forum posts, leaderboards, profiles, public chat, farm shares and care package wins in Discord) is visible to others. Otherwise, we only share information with these services, which help us run L.O.S Farms and may only use it for that:
| Service | What for | Where |
|---|---|---|
| Discord | Signing in, our Discord server, and the bot | United States |
| Cloudflare | Carries all traffic to and from the site | United States and worldwide |
| Resend | Delivers account emails (only if you add an email address) | United States |
| Backblaze | Stores our backups and serves profile pictures | United States |
We also share information when the law requires it, or when it's needed to protect someone's safety.
6. International Transfers
Our service providers above are based in the United States, so your information may be stored or processed there. When it leaves the UK or EU, we rely on the protections those providers offer: the UK–US "data bridge" and the EU–US Data Privacy Framework where they are certified, or the standard contractual clauses (with the UK Addendum) in their data processing terms.
7. How Long We Keep It
- Your account, farm, and profile: while your account exists. When you delete it, they're deleted.
- Login sessions: end after 10 hours without activity ("Remember me" lasts longer, until you sign out).
- Server and error logs: about a week; daily website logs up to 14 days.
- Backups: one per weekday, each replaced a week later, so deleted information leaves our backups within 7 days.
- Chat and direct messages: currently kept until they are deleted by you or the staff, or your account is deleted.
- Reports, admin action logs, and Farm Cash reward records: kept to protect players and the in-game economy, and for accountability.
- Forum posts and wiki history: kept to preserve community history unless removed by staff. When you delete your account, some community content (such as forum posts others have replied to) may remain without your name attached.
8. Your Rights
- See and download: view your data in your account settings and download a copy of your save file at any time.
- Correct: change your display name, email, and profile details from your account settings.
- Delete: delete your account at any time from Account settings → Data & Account.
- Control what's shared: your privacy settings decide what others see, who can write on your wall, and who can send you direct messages.
- Ask us: for anything else, use the contact form and choose "Privacy request." We answer within one month.
If you're in the UK or EU, you also have the right to access, correct, delete, restrict, or move your data, to object to our use of it based on legitimate interests, and to withdraw your consent at any time. If you live in a US state with its own privacy law (such as California), you have the rights that law gives you. We will honor these rights and never treat you differently for using them.
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live.
9. Keeping Chat Safe
You can report any chat or direct message (⚑ on the message), block a member (their posts, wall messages, and chat are hidden from you, and neither of you can send the other a direct message), and choose who may send you direct messages. By default, only your neighbors and members you follow can. Staff do not read direct messages, except a message that has been reported (with the few before it), or when it's needed to investigate serious abuse or to meet a legal requirement.
10. Security
We use HTTPS everywhere, hashed passwords, rate limits on sign-in and rewards, and internal logs of staff actions. No system is perfectly secure, so please use a strong, unique password and keep your Discord account protected with two-factor authentication. If a security problem puts your information at risk, we will tell you and, where the law requires, the regulator.
11. Children
You must be at least 13 to use the Service, and we do not knowingly collect information from children under 13. If you believe a child under 13 has an account, let us know through the contact form and we will delete it. If you are under 18, please use the Service with your parent's or guardian's permission. Our safety tools (reporting, blocking, and direct messages limited to neighbors by default) are on for everyone.
12. Changes
We will update the "Last updated" date when this policy changes, and announce significant changes on the site or on Discord.