FarmCapi privacy policy: what we store and why

Last updated: November 9, 2026 · Controller: Marmmet Tecnologia LTDA (Brazilian company registry CNPJ 22.147.363/0001-97), Av. Presidente Wilson, 228, Pav. 13, Centro, Rio de Janeiro, RJ, 20030-021, Brazil · Contact: privacy@farmcapi.com

FarmCapi is a cozy farming game. We collect the minimum needed to keep your farm safe and to improve the game. We don't sell your data and don't show personalized ads.

What we store

Guest ID: a random code created the first time you open the game, with a secret key kept in your browser. The server only keeps a hash of that key.
Game progress: your farm (level, coins, crops, animals, items, settings such as language and sound) and the latest saved versions.
Account (optional): if you choose "Create account & save", we store the email you type, or the ID and email provided by Google or Apple. We never receive your password, and we don't store your name.
Gameplay events: what happens in the game (for example: started playing, first harvest, level up, session length), with time, language and time zone, so we can see where the game is confusing or dull and make it better.
Gameplay metrics: counts of which screens, buildings and actions get used (for example, how many times the Shop was opened or how many radishes were harvested) and of where people tap on the farm (a grid with the number of taps on each tile). The game adds these numbers up on your device and sends them to our server along with your guest ID. The server then rolls them up into daily totals that don't include any player ID.
Notifications (optional): if you accept alerts, we store your browser's push subscription, your time zone and the times of upcoming farm events (for example, "chick hatches at 3 p.m.").
Technical data: your IP address is used on the spot to prevent abuse (rate limits) and may appear briefly in server logs.

Email sign-in codes and player keys are stored on the server only as hashes, never in readable form.

Why we use it

To store and restore your farm, including on another device (providing the service you asked for).
To send sign-in codes by email and the alerts you allowed (consent, which you can withdraw anytime).
To measure, in aggregate, whether the game is fun, and to fix problems (legitimate interest).
To produce aggregated usage statistics for the site and the game with Google Analytics, only if you opt in (consent, which you can withdraw anytime).
To protect the service from abuse.

How long we keep it

Farm and account: while you play. If a guest farm with no linked account isn't opened for 60 days, we delete its save, save history, and push subscriptions and scheduled alerts from the server. We keep only the basic player record (ID, hashed key, language, time zone, and creation and last-visit dates) and the gameplay events, which follow the period below.
Gameplay events: 13 months. After that, a daily server job deletes the older events.
Gameplay metrics: to count how many different players used each screen or action on a given day, the server briefly keeps a "seen" marker tied to the player ID and deletes it after 3 days. The daily totals, which carry no player ID, are kept for up to 400 days.
Log of alerts sent: we keep a record of which alerts we sent to each farm (so we can stick to 2 a day) for 90 days, then delete it.
Email codes: valid for 10 minutes and deleted within 1 day after they expire.
Push subscription: until you turn alerts off or delete your account. Subscriptions your browser has deactivated are deleted automatically.

Only with services that keep the game running:

Hosting: FarmCapi's server is hosted by Limestone Networks, Inc., in a data center in Dallas, Texas, in the United States. That's where the data described above is stored.
Email: sign-in codes are sent through the email provider FarmCapi has set up, which receives your email address and the message with the code.
Google or Apple sign-in: optional. Google and Apple are involved in sign-in only if you choose to sign in with them.
Notifications: your browser's notification service (Google, Apple, Mozilla or Microsoft) only receives an empty alert. The alert text is then fetched directly from our server.
Analytics: Google, through Google Analytics 4, and only if you opt in. See "Google Analytics 4" below.

International transfer. FarmCapi is run from Brazil, and its server is in the United States, so player data is transferred out of Brazil. This transfer follows Article 33 of Brazil's data protection law (LGPD): it happens to provide the service you asked for (storing and restoring your farm), with contractual and security safeguards in place.

Notifications

Notifications are optional, and you can turn them off at any time. We send at most 2 a day, never between 10 p.m. and 8 a.m. in your time zone, and nothing while you're playing. On iPhone, notifications only work if the game is added to your Home Screen, which is an Apple rule.

How to delete your data

In the game, open Settings › Account › "Delete my account and data" and type the confirmation word. We immediately erase from the server your farm, account, linked sign-ins, saved versions, history, gameplay events, alert log and push subscriptions, including those of older farms that were merged into it. The game then starts fresh on this device. If you can't open the game, email privacy@farmcapi.com.

Your rights

FarmCapi is run from Brazil, under Brazil's data protection law (LGPD). You can ask to confirm, access, correct, export, anonymize or erase your data, or withdraw consent, at privacy@farmcapi.com. You may also complain to your data protection authority; in Brazil, that's the ANPD (Autoridade Nacional de Proteção de Dados).

Children

The game is for all ages, and anyone can play as a guest without an account. You need to be 13 or older to create an account. Children under 13 may create an account only with the consent of a parent or legal guardian. If you're a parent or guardian and want a child's account deleted, email privacy@farmcapi.com.

Google Analytics 4

The farmcapi.com website and the game may use Google Analytics 4 to see, in aggregate, how many people visit, which pages and screens get used most, and what's worth improving. It only runs if you say yes.

Provider: Google LLC, in the United States. For people in the European Economic Area (EEA), the provider is Google Ireland Limited.
Opt-in only: the site and the game show a notice, and Google Analytics loads only after you click "Accept". If you decline or don't answer, no Google script loads and no Google cookie is set. Your choice applies to both the site and the game in this browser.
Purpose: aggregated usage statistics, such as how many visits a page gets or which game screens are opened most. We don't use it for advertising. The legal basis is your consent.
Cookies: _ga and _ga_<ID> (where <ID> is our Google Analytics property code). They tell one visitor and one visit apart, and last up to 2 years.
Settings: Google signals and ad personalization are turned off.
IP addresses: Google Analytics 4 doesn't log or store IP addresses.
How to opt out: on the site, use the "Cookie settings" button in the footer of any page; in the game, open Settings. When you decline, data stops going to Google and the site's _ga cookies are deleted from your browser.
International transfer: Google may process this data in the United States and in other countries where it has servers. For players in Brazil, this transfer follows Article 33 of the LGPD, with the contractual safeguards Google offers Google Analytics customers. For players in the EEA, Google relies on the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses.

To learn more, see Google's page on how Google uses information from sites that use its services.

Storage on your device

The game uses your browser's local storage (localStorage) to keep your farm, your guest ID with its access key, and a queue of events not yet sent. The site and the game also keep your Google Analytics choice there (accepted or declined). We don't use advertising cookies. Google Analytics cookies are set only if you opt in, and the site's only cookie of its own is fc_lang, explained below.

This website

The farmcapi.com website (these pages outside the game) shows no ads, and its fonts are served from the site itself. Its only third-party script is Google Analytics, described above, which loads only if you opt in. The site sets a single cookie of its own, fc_lang, and only when you pick a language in the language switcher: it remembers that choice for 1 year so the site opens in the same language next time, and it isn't used to track anyone.

Changes to this policy

When this policy changes, the date at the top of the page changes too. Before a significant change takes effect, we'll post a notice on the site and in the game. Questions: contact us.