Last updated: 13 October 2026
Seedling Studio, Business ID 3656594-3, Finland. Email: help@seedlings.world.
| Data | When | Why | Legal basis (GDPR) |
|---|---|---|---|
| Email address | Digital sign-in; activation of a physical card | Sign-in links, delivering what you bought, support | Contract (6.1.b) |
| Card ID, tend/scan dates and times, story progress, dig choices and finds, ride game runs and scores, DEW and DEW given to your character, Root Holds | While you use Seedlings | Running the game | Contract (6.1.b) |
| Shortened hash of your IP address (the IP itself is not stored) | Sign-in requests and scans | Preventing abuse and spam | Legitimate interest (6.1.f) |
| Approximate location (country/city) from your IP. Looked up on our own server; the IP is not sent to any outside service. | Physical card scans | Detecting cloned cards; giving the character a vague sense of the season and climate where you are | Legitimate interest (6.1.f) |
| Chat messages, and your location only if you tell the character yourself | If your card has chat | Generating the character's replies and remembering the conversation | Contract (6.1.b) |
| Discord user ID | Only if you link your card to Discord | Giving you your Discord roles | Contract (6.1.b) |
| A picture of Grub's wall, your day number and the name you choose for Discord (or "A Guardian"). No email, card ID or Discord ID. | Only if you press "Send to Discord" and confirm | Posting it in #dig-site in the Seedlings Discord, where anyone in the server can see it. The name is kept until you change it or use "Forget me". | Consent (6.1.a). Ask us to remove a post any time; "Forget me" removes your posts. |
| Purchase details: amount, time, and email (no card details), and when you agreed that your right of withdrawal ends | When you buy | Delivery, accounting, proof of your agreement | Contract (6.1.b), legal obligation (6.1.c) |
| That you asked us to email you when the full story can be bought: the day, and the exact text you saw when you pressed the button | If you press "Email me" | Sending you one email when the full story can be bought | Consent (6.1.a). "Forget me" removes it. |
| That you asked to hear about physical cards, and when | If you press "Tell me when it's available" | Sending you one email when physical cards can be ordered | Consent (6.1.a). Remove yourself any time on the same page. |
| Reminder settings: whether daily reminders are on, and when we sent a reminder | While you use a digital card | Sending the day-2 reminder and, if you choose, daily reminders | Day-2 reminder: legitimate interest (6.1.f), you can turn it off. Daily reminders: consent (6.1.a), off by default. |
| The Hedera account ID or EVM address you give us for your NFT | Before you mint | Sending you the NFT | Contract (6.1.b). The transfer and the account are public on Hedera. |
| Which link you used to start (a short code such as "yt" for YouTube). Nothing else about the link or the site you came from is stored. | When you start a free story | Knowing which channels bring new readers | Legitimate interest (6.1.f) |
We don't use advertising or tracking cookies, and we don't use analytics tools. Your browser stores a sign-in token for digital cards, and a short-lived (12-hour) card token after you tap a physical card (localStorage). The service needs these to work.
We don't send marketing emails. We only send sign-in links, purchase confirmations, important messages about your card, one reminder if you miss your second day (you can turn it off), daily reminders if you turn them on, and, if you ask for it, one email when the full story can be bought and one email when physical cards can be ordered.
Each tend or scan writes a short record to the public Hedera Consensus Service: the card ID, day number, and time. Your email address and name are never written there.
These records are public and permanent. Nobody can delete them, including us. After "Forget me", the card ID is no longer linked to you in our database.
If you mint an NFT, your wallet address and the NFT are publicly visible on Hedera.
| Service | What it does | Where |
|---|---|---|
| Supabase | Database | EU (Ireland) |
| Railway | Backend server and Discord bot. All data passes through it. | USA (US West) |
| Netlify | Website | USA / global |
| Resend | Sending emails | USA |
| Stripe | Payments | EU/USA |
| Anthropic | AI replies in chat (Claude) | USA |
| Hedera | Public ledger (card ID, day, time) | Decentralised |
| Discord | Only if you link your card, or send Grub's wall there | USA |
Our database is in the EU, but our server runs in the USA, so your data is processed there. When data goes outside the EU/EEA, the transfer relies on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework, as provided by the service in question. Under Anthropic's commercial terms, chat messages sent through its API are not used to train its models.
We don't sell your data.
You can ask us to:
Email help@seedlings.world. We will answer within a month.
You also have the right to complain to the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).
Seedlings is meant for users aged 13 and over. If you believe a child under 13 has given us their email, contact us and we will delete it.