Daily Forest Privacy Policy
Effective: 8 November 2026
1. Who we are
Daily Forest ("we") is a pixel farming and adventure game played in the browser at dailyforest.io. Operator: Alfian Bambang Yuliato, Cimahi, Bandung, Jawa Barat, Indonesia, email: admin@dailyforest.io.
This policy explains what data we collect, why, how long we keep it, and your rights, under Indonesia's Personal Data Protection Law No. 27 of 2022 (PDP Law).
2. Data we collect
a. Signing in to the game
- Wallet: your public wallet address. You sign a free sign-in message (SIWE). We never ask for or store your seed phrase or private key.
- Guest: your browser keeps a guest key in a cookie. We store only a hash of it.
b. Joining the waitlist with X
- Your X account ID, username, display name, account creation date and follower count. We cannot post for you or read your private messages.
- Your waitlist card look, invite code and who invited you.
- A wallet address, if you add one.
c. Playing
- Character name, look, level, inventory, in-game currencies, pets, farm, quests and in-game activity history.
- Market trades, in-game mail, friends, blocks and player reports.
- Chat: chat messages are not stored in our database. If another player reports you, your last few whispers still held in server memory are saved with that report for moderators to review.
- Minutes online per day.
d. Security and anti-cheat data
- Device fingerprint: a hash of browser traits (browser, screen size, language, time zone, processor count). Only the hash is stored.
- IP address: stored only as a salted hash, never in plain form.
- Trust score and flags for unusual play patterns, worked out from game data and never shown.
e. Blockchain transactions (when enabled)
- Wallet address, amount and transaction ID for deposits and withdrawals.
- Blockchain transactions are public and cannot be deleted by us.
f. Stored in your browser
| Storage | Purpose |
|---|---|
| Game session cookie | Keeps you signed in. Up to 7 days. |
dfwl cookie | Waitlist page session. Up to 60 days. |
df_guest cookie | Guest account key. Up to 400 days. |
| localStorage | Language, theme and display preferences. |
We use no advertising or third-party tracking cookies.
3. How we use data
- To run your account and the game.
- To keep play fair: detecting bots, multiple accounts and cheating, and handling reports.
- To run the waitlist, whitelist and Founding Villager perks.
- To process deposits and withdrawals, when enabled.
- To fix errors and keep the service secure.
- To meet legal obligations.
Legal bases:
- performance of a contract (the Terms of Service);
- legitimate interest (security and anti-cheat);
- legal obligation;
- your consent where required.
We do not sell your personal data or use it for advertising.
4. Who can see your data
- Other players: character name, look, level, rankings, profile, and your garden if you allow visits. You can change ranking visibility in Option > Privacy.
- Our moderators: account data and reports, to handle violations.
- Service providers:
- Hostinger, for servers and the database;
- X Corp., for waitlist sign-in;
- Reown/WalletConnect, for wallet connection;
- BNB Smart Chain, for transactions.
- Authorities: when required by law.
5. Retention
| Data | How long |
|---|---|
| Account and game data | While the account is active |
| Deleted accounts | After a 30-day waiting period (cancelled by signing in again), personal data is erased and the character anonymised within the next day. Records the law requires us to keep (e.g. transactions) are kept. |
| Anti-cheat data | Up to 90 days, unless tied to an open case |
| Waitlist data | Up to 12 months after launch |
| Player reports | Up to 12 months |
| Guest accounts no longer opened | Erased 400 days after the last sign-in (the life of the guest cookie) |
6. Your rights
Under the PDP Law you may:
- request a copy of your data;
- correct it;
- request deletion or account closure (directly in Option > Account > Delete account);
- withdraw consent;
- object to certain processing.
Email admin@dailyforest.io from the same account, or include proof of ownership (a wallet signature or X sign-in).
7. Security
- Connections use HTTPS.
- Session and guest keys are stored as hashes.
- IP addresses and devices are stored only as hashes.
- Admin access is limited and logged.
If a data breach affects you, we will notify you and the authorities within 3 × 24 hours of becoming aware of it, as the PDP Law requires.
We will never ask for your seed phrase, password or a fund transfer by chat, DM or email.
8. Children
Daily Forest is only for players aged 18 and over. We do not knowingly collect data from anyone under 18. Parents who learn their child created an account can contact us and we will delete the account and its data.
9. Changes
We may update this policy. Important changes are announced in the game and on the site at least 7 days before they take effect.
10. Contact
admin@dailyforest.io · Alfian Bambang Yuliato · Cimahi, Bandung, Jawa Barat, Indonesia