This policy explains what personal data StableTree ("we", "us") collects when you use this website, why we collect it, who we share it with, and the choices you have. We keep it as short and concrete as we can.
The short version
- We collect only what the service needs: your account details, your orders, and the trees you own.
- If you sign in with Google, we receive your Google email address, name and a unique Google account ID. We never see your Google password.
- We never ask for, receive or store the private keys or seed phrase of your crypto wallet.
- We do not sell your personal data and we do not show advertising.
- You can ask us to access, correct or delete your data at any time.
1. Information we collect
Information you give us
- Account details: your email address, an optional display name, and a password (stored only as a one-way hash, never in readable form). If you use Google sign-in, no password is created.
- Crypto wallet address: an optional public TRON address you can link to your account. A public address is not a secret and does not give us access to your funds.
- Telegram chat ID: only if you choose to receive diary or game notifications through Telegram.
- Volunteer reports: if you are a volunteer, the name you enter, up to three photos of the planted tree, and the GPS coordinates you submit.
Information created when you use the service
- Orders and payments: the species and region you chose, the amount, the order status, timestamps and the blockchain transaction hash that confirmed your payment. Blockchain transactions are public by nature.
- Your trees: the generated token ID, species, region, story, artwork and the growing diary entries linked to your account.
- Game data: if you play Guardians of StableTree, your game progress (plots, care actions, daily health history and results), your virtual leaves balance, records of items you bought (item, amount and transaction hash) and your reminder settings.
Technical information
- A session cookie that keeps you signed in and a security token that protects forms (see Cookies).
- Like any website, our web server and the third-party resources the site loads (see section 4) can see your IP address and browser details when your browser connects to them.
2. Sign in with Google
You can create an account or sign in with your Google Account. When you do, Google asks for your permission and shares the following with us:
- your email address and whether Google has verified it;
- your name;
- your unique Google account ID, which lets us recognise you the next time you sign in.
We request only the openid, email and profile scopes. We use this information solely to create your StableTree account and sign you in. We do not access your Gmail, Drive, Contacts, Calendar or any other Google data, we do not use Google data for advertising, and we do not sell it or transfer it to third parties except as needed to operate the service or as required by law.
StableTree's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
If you already have an account with the same verified email address, signing in with Google links the two. You can revoke StableTree's access at any time in your Google Account permissions, and you can ask us to delete your StableTree account (see your rights).
3. How we use information
- to create and secure your account and sign you in;
- to process your order, detect your USDT payment on the TRON network and deliver your tree;
- to generate your tree's story and artwork, and to keep its growing diary;
- to review volunteer reports and publish approved planting reports;
- to run the game, save your progress and award prizes;
- to send notifications you asked for, such as Telegram diary updates and email or Telegram game reminders;
- to prevent fraud and abuse and to keep the service running and secure;
- to comply with legal obligations.
If you are in a region where a legal basis is required (for example the EEA or UK), we rely on performing our contract with you, our legitimate interest in running and securing the service, your consent where we ask for it, and legal obligations.
4. Who we share it with
We do not sell your personal data. We use the following service providers, each only for the purpose described:
- Google provides sign-in (section 2) and hosts the fonts and icons the site loads (Google Fonts), which means your browser contacts Google servers.
- TronGrid / the TRON network are queried to detect and verify payments. Blockchain data is public.
- Sber GigaChat writes your tree's story, and Pollinations draws its artwork. We send them only the tree species, region and a generic description. For game prizes and the daily spirit message, we also send non-personal game statistics, such as the day of the season, gauge values, the number of waterings and the event of the month. We do not send your name, email or wallet address.
- OpenWeather receives approximate coordinates of a tree's region to include the weather in diary entries.
- Telegram delivers diary and game notifications, only if you enabled them.
- Email delivery. Game reminder emails are sent through our hosting provider's mail service, only if you left email reminders on.
- QR code service (api.qrserver.com) renders the payment QR code. It receives our receiving wallet address, not your personal data.
- Content delivery networks (for example the one serving our page styling library) deliver code that makes the site work.
- Our hosting provider stores the site and its database.
Some of these providers are located outside your country, so your data may be processed in other jurisdictions. We may also disclose information when the law requires it or to protect the rights and safety of our users and the service.
Public information. Approved volunteer reports (photo, species, region, volunteer name and date) and the trees shown in our public gallery (artwork, species, region, token ID and story) appear on the website. Your email address, wallet address and account details are never shown publicly.
5. Cookies and similar technologies
We use only strictly necessary cookies: a session cookie that keeps you signed in, and a security token that protects our forms against cross-site request forgery. We do not use advertising or analytics cookies. You can block cookies in your browser, but you will not be able to sign in.
6. How long we keep data
We keep your account data for as long as your account exists. When you ask us to delete your account, we delete or anonymise your personal data, except records we must keep for legal, accounting or security reasons. Transactions recorded on the TRON blockchain are public and permanent, and we cannot erase them. Approved public planting reports may be kept in anonymised form.
7. Your choices and rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its use, receive a copy in a portable format, and withdraw consent you previously gave. You can also lodge a complaint with your local data protection authority.
To use any of these rights, or to delete your account, contact us at dengirossii@yandex.ru from the email address registered to your account. We will respond within a reasonable time. You can unlink your wallet address or stop Telegram notifications at any time.
8. Security
We take reasonable technical and organisational measures to protect your data, including hashing passwords, protecting forms against cross-site request forgery, and using HTTPS for connections to our service providers. No online service is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password or sign in with Google.
9. Children
StableTree is not directed to children under 16, and our payments require an adult. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date above, and for significant changes we will make a reasonable effort to notify you, for example with a notice on the website.
11. Contact us
Questions or requests about this policy? Contact us at dengirossii@yandex.ru. See also our Terms of Service.