Privacy policy

Last updated 8 October 2026

Short version: you can play without an account and nothing leaves your phone. If you sign in with Google we keep your farm save, your public farm profile and your chat messages so you can play on any device and with other farmers. We never sell your data. You can delete your account at any time in Settings.

Who we are

Naija Farm (“we”, “us”) is a farming game played in the browser. We are the data controller for the personal data described here, under the Nigeria Data Protection Act 2023 (NDPA). Contact us at .

What we collect

• Playing without signing in: your farm is saved only on your device (browser storage). We count anonymous page views and receive crash reports (the error, the game version and your browser type) so we can fix bugs.
• Google sign-in: your Google account ID and email address. We do not receive your Google password or contacts.
• Your farm profile: the farmer name, farm name, @handle, level, avatar and likes you choose to show. Other players can see these.
• Your cloud save: a copy of your farm so you can continue on another device.
• Feedback and complaints: what you write in Menu → Feedback, your star rating if you give one, and with it your level, the screen you were on, your screen size, browser and game version, linked to a random device id (and your account if signed in) so our reply reaches you.
• Chat and social: messages you post in the forum or on farms, gifts, swaps and likes, and reports you make or that are made about you.
• Purchases: which pack you bought, the amount, the date and the Paystack reference. Card and bank details go to Paystack only; we never see or store them.

Why we use it, and our lawful basis

• To run the game, save your farm and deliver what you bought (performance of our agreement with you).
• To keep chat safe: filtering, rate limits, reports, mutes and bans (legitimate interest and our duty to protect players).
• To fix crashes and understand how many people play (legitimate interest; the counts are not tied to you).
• To keep payment records as the law requires (legal obligation).
• Your consent when you tick “I am 13 or older” and sign in. You can withdraw it by deleting your account.

Who we share it with

Only the service providers that run the game for us, under their own data protection terms:

• Cloudflare hosts the game server, database and chat. Cloudflare Web Analytics counts visits (page, country, device type, load speed) without cookies and without storing anything on your device.
• Vercel hosts the game files.
• Google handles sign-in.
• Paystack processes payments.

These providers may store data outside Nigeria. Where they do, we rely on their contractual safeguards as the NDPA allows. We share data with authorities only when the law requires it. We do not sell personal data or use it for advertising.

How long we keep it

• Account, profile and cloud save: until you delete your account.
• Chat messages: the latest messages in each room only; older ones are dropped automatically.
• Reports and moderation decisions: up to 12 months.
• Feedback, complaints and our replies: up to 12 months.
• Crash reports: up to 90 days.
• Payment records: as long as Nigerian tax and accounting law requires (usually 6 years), even after you delete your account.

Children

Online features (sign-in, chat, gifts, swaps and purchases) are for players aged 13 and over. Younger players can still play on their device without signing in. If you believe a child under 13 has signed in, write to us and we will delete the account.

Your rights

Under the NDPA you can ask to access, correct, move or delete your data, object to how we use it, or withdraw consent. You can delete your account and cloud save yourself in Settings → Cloud save → Delete my account; for anything else write to . We reply within 30 days. If you are not satisfied you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

Security

Traffic is encrypted (HTTPS). Sign-in sessions are signed and expire after 30 days. Purchases are confirmed on our server with Paystack before anything is granted. No system is perfectly secure; if a breach affects you we will tell you and the Commission as the law requires.

Changes

If we change this policy we will update the date above, and tell you in the game when the change matters.