Privacy Policy

Copy Town operates this extension and its game service at copytown.lol. This policy covers Copy Town Coin and its API.

Data we use

We process your Pony.Town account ID and display name to link your progress to your account. We also store your chosen nickname, profile description, privacy settings, coins, taps, purchases, inventory and game activity, including your current server, connection status and whether your character is inside the pond. The extension connects to the API and joins the leaderboard automatically when it identifies your account.

The extension stores its own access token, cached progress, preferences and unfinished operations on your device. It reads the Pony.Town page, resource addresses and game data needed for its features. We do not collect your Pony.Town password, email, chat messages or browsing history from other websites. Character coordinates are processed locally; raw coordinates are not sent to the API. We do not request GPS location.

Skin downloads

Selected pony names and appearance data are processed locally to create skin files. The API receives purchase and download records, including a file hash, but not the skin file itself. Unfinished downloads may be stored locally until completed. Downloaded files stay on your device until you remove them.

How we use and share data

Data is used to run the game, restore progress, process purchases, display rankings, measure game activity and prevent abuse. Public profile details, selected cosmetics and scores are visible to other players. Your current server is shown when your online status is public. Privacy settings control name and online visibility; your profile description remains public. Administrators can access records needed for support and security.

We do not sell data or use it for advertising or credit decisions. Our hosting provider and Cloudflare process network requests to deliver and protect the service.

Storage and deletion

The server processes IP addresses for security and request limits. The game database stores a keyed hash rather than the original address. Registration records containing these hashes are removed by periodic cleanup once they are older than 24 hours. Web server logs may contain IP addresses, request URLs, timestamps and request details. Logs are rotated daily with 14 archives; daily database backups older than 7 days are removed.

Account, inventory and purchase data is kept until the account is deleted by an administrator or at your request. Uninstalling the extension removes its local storage but does not delete the server account. Deleted data may remain in backups until their next scheduled expiry. Administrative audit records may retain a technical player ID to document changes.