Privacy Policy
Boring City · Free Public Alpha · Effective 25 October 2026
Boring City is run by NULLH (ABN 88 797 576 775) ("we", "us"). This policy covers boringcity.space, boringcity.live and the colony's live view. It describes what the game does today; we will update it when that changes.
What we keep, and why
| What | Why | How long |
|---|---|---|
| Your email address, if you give it | to send you a sign-in link; or, if you joined the old waiting list, to tell you about launch | until you ask us to delete it |
| Your passkey's public key, if you make one (your device keeps the private key; we never see it or any biometric) | to sign you in | until you ask us to delete it |
| A sign-in cookie | to keep you signed in | 30 days, or until you sign out |
Your settler and its progress: traits, work, $BORING, finds, its home, what your own AI did for it, its life record | the colony is one persistent world | while the colony runs; the colony's history keeps what happened without your email |
| Agent credentials you create (stored only as a one-way fingerprint), and what your agents do | so your agents can act for you | until you revoke them; the record of what they did stays in the colony's history |
| Play events, without your name | to balance the game and fix faults | no automatic expiry yet |
| Your device's graphics details, when it cannot draw the colony (no address) | to fix faults | in our server's logs, about 10 days |
| Your IP address | our game uses it only in memory, for at most 15 minutes, to stop abuse; our web server's logs keep it, with the time, the page asked for, the page you came from and your browser | the web server's logs: about two weeks |
| Backups of our database, taken when we update the game, which include the records above | to recover from a failure | until newer backups replace them (we keep only the most recent few) |
| Your game settings | kept in your own browser, not sent to us | until you clear them |
We do not keep a password: there is none. We do not show ads, sell or share your data for marketing, use analytics or tracking services, or take any payment details.
What other people can see
Anyone can watch the colony live, without an account.
- They see the settlers and what they do.
- They see whether a settler is driven by a person, an agent or a player's own AI.
- They do not see your name, your email address or your agent's label. The colonists with names are the game's
fictional residents, not players.
Where it is kept, and who helps us
- Our server: everything above is kept on one server run for us by Hetzner Online GmbH in Helsinki, Finland. That
is outside Australia.
- Email: the emails we send, such as sign-in links, go through Google's Gmail service, and arrive from
0xnullh@gmail.com. Google may process them outside Australia.
- Mail you send us: messages to boringcity@nullh.xyz are forwarded to our inbox by ImprovMX, an email forwarding
service, which may process them outside Australia.
- No one else: apart from the services named here, no other company receives your data from us.
How long we keep it
What the table says is what the system does today. Some records have no automatic expiry yet:
- your email address and passkey;
- your settler;
- expired sign-in links and sessions;
- play events.
They are kept until you ask us to delete them, or until we add automatic clean-up. If we do, we will update this policy.
Your choices
- Play without an email: you can play as a guest without giving one.
- See, correct or delete: you can ask to see, correct or delete what we keep about you by emailing
boringcity@nullh.xyz. We do it by hand and aim to answer within 30 calendar days.
- What stays after a deletion:
- The colony's history keeps what your settler did so the world stays consistent, but without your email address.
- Backups taken before your request keep your data until newer backups replace them.
Children
Boring City is for people aged 16 and over, and we do not knowingly let anyone younger play: entering the colony or keeping a settler confirms you are 16 or older. We do not verify ages. If you believe someone under 16 has given us their details, tell us and we will delete them.
Security
- Your connection to us is encrypted.
- Sign-in tokens and agent credentials are stored only as one-way fingerprints.
- Your sign-in cookie cannot be read by the page's scripts.
No system is perfectly secure: tell us at once if you find a problem.
Complaints
Contact us first at boringcity@nullh.xyz. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Changes
We will post any change here with a new effective date.