Your little corner of privacy

Privacy, plainly.

Last updated September 23, 2026. This notice covers the Little Loam website, mailing list, and game. Website subscriptions and analytics are separate from game accounts and game activity.

Game accounts and sign-in

We store a generated account ID and your chosen handle. Other players can see your handle when you play together or exchange friend requests; choose one you are comfortable sharing.

For email-and-password sign-in, the server processes your email address to identify your account. The account database stores a SHA-256 identity key derived from the sign-in method and normalized email address, rather than a readable email address. For supported provider sign-in, such as Sign in with Apple, the key is derived from the provider and its account identifier. Accounts are not automatically linked just because their email addresses match. These keys remain linked to your account; they are not anonymous data.

Passwords are stored as salted Argon2id hashes, not readable passwords. The server stores hashes of session tokens with the account ID and session creation and expiry times, rather than the bearer tokens themselves. This lets us recognize and revoke signed-in sessions. The game may keep the session token in your device's credential storage to remember your sign-in.

Password recovery is unavailable during alpha. Password-reset emails are not available, and email-and-password registration does not verify ownership of the address. Keep your sign-in details safe. Joining the website mailing list does not create or recover a game account.

Your farm, adventures, and friends

The game saves progress on your device and synchronizes account-linked progress with our server. This includes farm state, inventory, crops, buildings, currency, adventurer progression, and Deep rewards. The server processes gameplay command journals and keeps synchronization metadata, including device identifiers, revisions, timestamps, and retry receipts, to apply progress consistently across devices.

We store friend requests and accepted friendships. Multiplayer services process live presence, positions, party membership, farm visits, and actions so players can share a world. Players in the same town, visit, or adventure can see the information needed for that experience; accepted friends can see when your farm is open for a visit. Live presence is distinct from the durable progress and activity records described here.

First-party game activity, not third-party tracking

We keep first-party, account-linked activity records to understand alpha use and returning players. These include account creation time when known; the time of the first successful authentication on each UTC calendar day; a client-declared platform category at signup and for daily activity (Windows, macOS, Linux, iOS, Android, or unknown); committed in-game bed-rest counts per account and UTC day; and session revocation time and reason, such as signing out or reaching a session limit. Older accounts may have an unknown creation date; we do not invent earlier activity for them.

Our private operational dashboards and cohort reports use aggregates, such as total registered accounts and daily active accounts. Daily active means distinct authenticated accounts on a UTC calendar day, not simultaneous players or a rolling 24-hour count. Totals include retained internal verification accounts. Metrics do not carry per-account identifiers, handles, or email labels, but the underlying first-party activity records are account-linked, not anonymous.

We do not add third-party analytics trackers to the game. The Manyforge website analytics described below do not track in-game play. Game services also process connection and technical information needed to operate multiplayer, prevent abuse, and diagnose service problems.

Alpha progress and your choices

We do not plan to wipe alpha progress. Your farm, account and friendships will carry forward through normal updates and launch.

We retain account-linked progress and friendships to provide that continuity, and activity records for first-party usage and retention reporting. There is currently no automatic deletion schedule for these records. Signing out revokes that session; it does not delete your account or progress. For questions or requests to access or delete game information, contact josh@bluescripts.net. We handle these requests through support, not an automated account deletion or password-recovery flow. Please do not send passwords or session tokens. See our alpha policy and support information.

Website: when you join the mailing list

We use your email address to send a confirmation request, Little Loam launch news, and occasional development updates. You choose to join by checking the consent box and confirming the link in your email. Signing up does not create a game account.

The list is managed through our Manyforge hub at hub.bluescripts.net. Manyforge records your email, subscription status, and consent information, including signup time, IP address, and browser information. Email delivery is handled by Resend.

You can unsubscribe using the link in any mailing-list update. An unsubscribe or suppression record may be retained to prevent further unwanted email. To request access to or deletion of your information, contact josh@bluescripts.net.

Website analytics, not a trail of cookies

We use Manyforge analytics to understand visits to this site. It measures page paths, referring sites, campaign tags, and aggregate visitor information. The tracker does not use cookies or browser storage, and it respects your browser’s Do Not Track setting.

Your email address and the contents of the signup form are not sent to analytics. We do not include personal information in custom analytics events.

Website hosting and email security

Cloudflare hosts this site. Requests to Cloudflare, Manyforge, and our email provider necessarily include connection information such as an IP address. These services may process technical information to deliver the site and email, prevent abuse, and keep the services secure.

Questions?

Write to josh@bluescripts.net with questions about the game, your data, the mailing list, or this notice. If you contact support, we receive your email address, message, and any details or attachments you choose to send so we can respond. Please do not include passwords or session tokens.