Docs · Privacy
Privacy, your data and contact
What Internet Paradise keeps about your wallet, for how long, how to download it or have it deleted, and how to reach the host to ask a question or appeal a decision.
Write to internetparadisexyz@gmail.com or use the form on this page; the host reads both and aims to answer within 7 days. This page is part of the terms of service.
What is kept, and for how long
| What | Why | How long |
|---|---|---|
| Your wallet address | It is how you sign in, and what your plot, sign and publications belong to. | While you use the site, or until a deletion request |
| Sign-in session | A random cookie; the host keeps only its hash. | 8 hours |
| Your nickname and avatar | Shown to people in the room while you are there. The host keeps the name and avatar your wallet chose, so they follow you to any device; only your wallet can read or change them. Your browser keeps a copy. | Until you change them or ask for deletion |
| Your profile page | Public: your handle, name, description, links, your photo or your avatar’s picture, your published plots and galleries, and who follows you and whom you follow. Only your wallet can change it; the host can hide it or remove its photo. A handle you give up still leads to your page for 7 days. When someone follows you, the host keeps that notice for you (90 days) and, if you turned on reminders on a device, sends it there. | Until you change it or ask for deletion |
| Your email (optional) | Only if you add it in your profile’s Settings and tick Send me reminders before my plot rent ends and official announcements: the address, whether you confirmed it and when you agreed. Private: never on your profile, in a shared card or shown to other people; the host sees only whether a wallet has a confirmed address. Every email has a link to stop them. An address never confirmed is removed after 7 days. | Until you remove it, turn reminders off and remove it, or ask for deletion |
| Challenges | The stamps and badges you collected (which landmarks, places and artists’ galleries you visited, and when you finished each challenge), so they follow your wallet to any device. Only your wallet can read them; there is no leaderboard. Your browser keeps a copy. | Until you ask for deletion |
| Town chat | Delivered to the people in the room. The room keeps the last lines only so a report can be checked against what was really said. | 15 minutes |
| Chat in published spaces | The fallback meeting keeps the last 60 lines so people arriving can read them. | 5 minutes |
| Network address | Never stored. Request limits count a truncated network (IPv4 /24, IPv6 /48), hashed with the day. | 2 days, then deleted |
| Reports you send | What you reported, why, your note, and what you saw (for a chat line, its text and author). Never shown to the person reported. | Until handled, then 180 days; a chat line's text is removed after 30 days |
| Moderation actions | Who acted, on what, when and why: the audit log that keeps moderation accountable. | 730 days |
| Contact and appeal messages | So the host can answer. | Until closed, then 365 days |
| Deletion requests | Proof that a request was received and carried out. | 365 days after it is processed |
| Renewal reminders on your devices | Only if you turn on Remind me on this device: the push address your browser gives for that device and its public encryption keys, so the host can send the reminder. The reminder's text is encrypted for your device. | Until you turn it off, the device stops accepting it, or a deletion request |
| Plots, payments, publications | Your plot's tenure and payments in tez, your published plot, gallery sign and galleries. | See below |
There is no advertising and no data is sold. Daily usage counters carry no personal data. Your browser keeps your drafts, a copy of your name and avatar, settings and the people you blocked; clear them from your browser. Wallets, Tezos, objkt, IPFS gateways and Cloudflare have their own policies.
Download my data
A JSON file with every row this host keeps that names your wallet: your name and avatar, profile page and follows, your email if you added one, challenges, invitation, plots, tenures, payments, gallery sign, galleries, agent connections, audio spaces, live screens, the reports and messages you sent, any request you made, and moderation that applies to you.
Checking whether you are signed in…
Request deletion of my data
Send a request from your signed-in wallet. The host sees it at the host desk and processes it with one action. Choose whether your published work should stay.
What deletion removes
- Your sign-in sessions (you are signed out everywhere) and any chat kept by published-space meetings.
- The name and avatar the host keeps for your wallet, your profile page (its handle is freed), whom you follow and who follows you, and your email.
- Your challenges’ stamps and badges.
- Your AI agent connections and their tokens, and your agents' plot drafts.
- Your contact messages, your audio spaces that are not live, your live screens and request counters.
- The devices you turned renewal reminders on for.
- Reports you sent are kept for the thing they are about, without your wallet.
- If you do not keep your publications: your gallery sign, your plots’ names and descriptions, your galleries, your invitation, and your published plot leaves the map (its stored files are then released by the host).
What is kept, and why
- Payments and land: payments in tez, your plot's tenure, listings, gifts and extra storage, the version of the terms of sale you confirmed before paying, and which renewal reminders were sent. They are the ledger and say who holds which plot; the payments are public on Tezos anyway. To give up a plot, ask the host to release it.
- Moderation records about you: a suspension, a chat mute, a banned nickname, reports other people made about you and the audit log. They keep moderation fair and stop it being undone by a deletion, until their own retention ends.
- The island's history: who claimed, released and curated, and who invited whom.
- Anything on the blockchain: tokens, sales and operations are on Tezos, which nobody can delete.
Contact and appeals
Ask a question, report a problem the in-world Report buttons do not cover, appeal a moderation decision about you or your work, or ask about your data. Messages are stored for the host and read at the host desk; no email is sent.
For an appeal: hidden content is normally kept rather than deleted, so most decisions can be reversed. The host looks again and aims to answer within 7 days.