Privacy Policy

At SFL Farmhand your privacy comes first. The app works without an account and, if you don't sign in, collects no personal data. The account is optional: if you create one, we only store your email and your purchase records so you can use SFL Farmhand Pro on your other devices. Purchases are handled by the app store, not by us. This policy explains what information the app uses, where it is stored and who it communicates with.

1. Controller

SFL Farmhand is an independent app developed by Sebastian Hernandez. For any privacy question you can write to contacto@sflfarmhand.com.

2. Data we don't collect

We don't ask for your name, phone, location, contacts, photos or any other personal data. You don't need to sign up to use the app: the account is optional, only asks for an email and has no password (see section 4). We never see or store your payment details (card, bank account or billing address). We don't use analytics, advertising or tracking tools, and we don't sell or share data with third parties for commercial purposes.

3. Information the app uses

• Farm ID: the public number of your Sunflower Land farm that you enter at the start. It is only used to look up that farm's public data. • Farm data: timers, inventory, level and other public information returned by the Sunflower Land API for that Farm ID. • Preferences: app settings (currency, notifications, home order, daily plan, etc.). • Account (optional): if you sign in, your email and the open session (see section 4). • SFL Farmhand Pro status: whether you have the free version, the free trial, the quarterly subscription or the one-time payment plan, and the renewal date. It comes from the app store and, if you are signed in, also from your account, to unlock features. • Temporary copies (cache): market prices, radar history and game images, so the app runs faster.

4. Optional account

The account is optional and the app works the same without it. It lets you use your account's SFL Farmhand Pro on your other devices (iPhone, Android and computer) with the same email and link a computer with your phone. To sign in, you enter your email and we send you a 6-digit code, valid for 10 minutes, from no-reply@sflfarmhand.com; there are no passwords. To link a computer, you scan the QR code it shows or type its short code, which expires after 5 minutes. If you have an account, the app's server stores only: • Your email, an account identifier and the dates of creation and last sign-in. • Your open sessions: only a digest (SHA-256 hash) of the session token, the device type (iOS, Android or web), its name or model and the dates. Each session lasts 180 days and is renewed when used. • Your account's SFL Farmhand Pro records: source (for example, the App Store), product, plan, original transaction identifier (for Google Play, only a hash of the purchase token), expiry date and status. Sign-in codes are stored only as a hash and are deleted once used or expired. To limit attempts, hashes of the IP and the email are used, and they are deleted after about 2 days. The camera is only used, with your permission, to scan the computer's QR code; images are not saved or sent.

5. Purchases and subscriptions

In-app purchases (the quarterly subscription, its free trial and the one-time payment plan) are processed entirely through Apple's App Store or Google Play, with the account signed in on your device. Apple or Google handle payment and billing data according to their own privacy policies. If you redeem an offer code, the redemption is also handled by Apple. The app receives from the store a signed confirmation of the purchase or redemption (which plan it is, when it started and when it renews or expires) and checks it on your own device to unlock SFL Farmhand Pro. If you are not signed in, that confirmation never leaves your device. If you are signed in, the app also sends it to the app's server, which verifies it (Apple's signature with its certificate chain, or the purchase token with the Google Play Developer API) and saves it to your account to give you SFL Farmhand Pro on your other devices. The developer can see aggregated, anonymous sales reports in the Apple and Google dashboards and, if you have an account, the purchase records linked to your email, but never your payment details.

6. Where it is stored

Without an account, all information is stored only on your device: preferences, the last known SFL Farmhand Pro status and the last copy of your farm in the app's storage and caches in the app's folder. None of this is sent to the developer. If you sign in, the session token is stored on your device and the account data in section 4 is stored on the app's server (Cloudflare Workers, with a Cloudflare D1 database). Your farms, your Farm IDs and your preferences are never stored in the account.

7. External services the app uses

To show you up-to-date data, the app connects over HTTPS to these services: • SFL Farmhand intermediary (Cloudflare Workers, api.sflfarmhand.com): farm and marketplace requests go through this service of the app, which adds the access key and forwards them to api.sunflower-land.com. It only receives the Farm ID looked up and does not store your Farm ID, your IP or your farm data (only a temporary in-memory copy of a few minutes to avoid repeating requests). To avoid querying the game once per user, it keeps for a while public game data that is the same for everyone: leaderboards, raffles and their winners, marketplace activity and farm names. The app also sends a random installation identifier used only for the request limit; it doesn't identify you and isn't stored. This same service manages the optional accounts (section 4). • Cloudflare D1: the database of the app's server, where only the accounts are stored (section 4). • Cloudflare Email Service: sends the email with the sign-in code from no-reply@sflfarmhand.com; it receives your email and the code. • api.sunflower-land.com: faction pet data and, through the intermediary, farm and marketplace data. • sfl.world: community prices and yield data (usually through the intermediary, which keeps a temporary copy; directly if it doesn't respond). • api.coingecko.com: FLOWER token price (likewise: through the intermediary or directly). • sunflower-land.com, animations.sunflower-land.com, pets.sunflower-land.com, buds.sunflower-land.com and raw.githubusercontent.com: game images. • App Store (Apple) or Google Play (Google): plans, prices, purchases and purchase restoration. If you are signed in, the app's server also queries the Google Play Developer API to verify Google Play purchases. As with any internet connection, these services receive your IP address and the request made (for example, the Farm ID looked up). Each service handles that information according to its own privacy policy. Cloudflare, as the intermediary's provider, processes technical connection data under its own policy; the developer does not store that information, except for the temporary hashes used to limit sign-in attempts (section 4).

8. Notifications

"Harvest ready" alerts are local notifications scheduled by your own device. They are only enabled if you grant permission, and you can turn them off at any time in the app's or the system's Settings. The app does not send notifications or promotional alerts to sell you SFL Farmhand Pro.

9. How long it is kept and how to delete it

Information on your device stays there until you delete it. You can delete it at any time from Settings → Legal & privacy → "Erase all app data", or by uninstalling the app. Erasing the data signs you out on that device, but does not delete your account, cancel a subscription or remove your purchases: they remain linked to your Apple or Google account and you can recover them with "Restore purchases". Account data is kept for as long as the account exists. You can delete it whenever you want from Settings → Danger zone → "Delete my account": the account, your email, its sessions and its purchase records are removed from the server immediately. Your store purchases remain valid in the store and keep working on that device. "Sign out" only ends the session and does not delete the account. Sessions expire after 180 days without use.

10. Security

All connections use encrypted HTTPS, the access key for the Sunflower Land API is not inside the app (it is kept encrypted as a secret in the app's intermediary service) and purchases are verified with the store's cryptographic signature. On the server, session tokens and sign-in codes are stored only as hashes, and each code allows a limited number of attempts. Even so, no system is 100% foolproof.

11. Children

The app is not directed at children under 13 and does not knowingly collect information from children. Purchases by minors are subject to Apple's parental controls (Family Sharing, "Ask to Buy") or Google's (Family Link).

12. Your rights

If you don't have an account, we have no information about you to access, correct or delete: everything the app stores is on your device and you can delete it yourself. If you have an account, you can ask us for a copy of its data, its correction or its deletion by writing to contacto@sflfarmhand.com from the account's email, or delete it yourself at any time from Settings → Danger zone → "Delete my account". For payment data about your purchases, contact Apple or Google.

13. Changes to this policy

If this policy changes, we will publish the new version in the app and on its website, with the update date.