Privacy and fair play
This notice explains what personal data is collected when you use airtemp.wolfyk.com (the "Site"), the purposes and lawful bases for processing it, how long it is retained, who it is shared with, and the rights available to you. The Site is operated by a private individual as a non-commercial hobby project. That individual is the data controller and is referred to below as "I" or "me". A plain-language fair-play statement about the game follows the privacy notice; it is not a legal document.
Summary
The Site displays the temperature and humidity of a room and offers an optional play-money game.
The personal data processed is limited to the following:
- server access logs, including your IP address, retained for 14 days;
- if you play, an account identifier held in a cookie, together with any display name you set, your play-money balance, your betting history, a broad device category, and a one-way hash of your IP address;
- if you choose to sign in with Google, a one-way hash of your Google account identifier only.
No advertising, analytics, or tracking technologies are used. Personal data is not sold and is not disclosed to any third party other than the service providers named below. You may request access to, or erasure of, your data at any time. A separate fair-play statement about the game appears at the end of this page.
Information collected automatically
When you access the Site, the web server automatically records standard log data for each request. This comprises your IP address, the date and time of the request, the resource requested, the referring URL where one is provided, and the user-agent string reported by your browser.
Purpose and lawful basis. This data is processed for the purposes of maintaining the security and integrity of the Site and preventing abuse. The lawful basis is my legitimate interests in operating a secure service.
Retention. Log files are rotated daily and deleted after 14 days.
Loading the page also causes your browser to request the game's current state, so that the readings and scoreboard can be shown. Viewing the page sets no cookie and creates no account; the cookie described in the next section is set only if you go on to engage the game.
Personal data collected when you play
If you place a bet or set a display name, an account is created and the following personal data is processed:
- the random account identifier held in your cookie;
- the display name you choose, if any. This is published on the public scoreboard, so you should use a pseudonym if you do not wish to be identifiable;
- your play-money balance and betting history, including the time and outcome of each bet;
- the broad category of device used (mobile, tablet, or desktop), derived from your browser's user-agent string. This is a label on a scoreboard entry, not a device fingerprint;
- a one-way keyed hash of your IP address. The IP address itself is not stored in the database and cannot be recovered from the hash. It is used to recognise accounts originating from the same connection, in order to count restarts and to detect abuse. As it is derived from your IP address, it is treated as personal data and is disclosed to you here;
- the dates on which the account was created and last updated.
Purpose and lawful basis. This data is processed to provide the game you have chosen to use and to protect it from abuse. The lawful basis is my legitimate interests in operating the game and keeping it fair. The game is play-money only; no payment information is ever requested or processed.
Google sign-in (optional)
Signing in with Google is optional. Its only purposes are to preserve your score if you clear your cookies, to allow the same account to be used across devices, and to permit one prize entry per person.
The Site requests only the openid scope from Google. It therefore does not receive, and could
not store, your email address, your name, or your profile picture. Google returns an account identifier.
That identifier is not stored. What is stored is a one-way keyed hash of it, which is sufficient to
recognise you on a later sign-in and of no use for any other purpose.
Lawful basis. Your consent, given by choosing to sign in, which you may withdraw at any time by requesting erasure. Your use of Google sign-in is also recorded within your own Google account, which is governed by Google's privacy policy rather than this notice.
An account already linked to one Google identity will not be reassigned to another. The Site refuses this in order to avoid permanently disconnecting the first account.
No tracking or advertising
The Site uses no analytics or measurement tools of any kind. It carries no advertising and no advertising identifiers. It loads no third-party scripts, fonts, or images; the browser is instructed by a Content-Security-Policy header to block any such external requests. Your personal data is not sold, rented, or otherwise disclosed to third parties, other than the service providers identified in this notice. No email address or password is requested at any time.
Storage and international transfers
Personal data is stored on a single rented virtual server located in San Francisco, in the United States. If you are located in the United Kingdom or the European Economic Area, your personal data is therefore transferred to and processed in a country outside your own, which may not offer the same standard of data protection as your home jurisdiction. Data in transit is protected by TLS encryption, and the database is readable only by the operating-system account that runs the game.
Data retention
- Server access logs: retained for 14 days, then deleted automatically.
- Game accounts, betting history, and scoreboard entries: retained for as long as the game is operated, so that scores remain meaningful over time, and erased on request.
Clearing your cookies does not erase this data. It makes the associated account unreachable from your browser, which is a different matter, and is why an accidental clearance can be reversed on request. To have the underlying record erased, please make a request as described under Contact.
Your rights
Subject to applicable law, you have the right to request access to the personal data held about you, the rectification of inaccurate data, and the erasure of your data. Where processing is based on your consent, you have the right to withdraw that consent at any time.
Because the game deliberately holds no email address, the practical way to identify your record is to give the display name shown on the scoreboard, or to sign in and make the request from that account.
You may also choose to provide no personal data beyond the server logs. The temperature readings work without an account, and the optional Google sign-in may be declined without the loss of any other function.
If you are in the United Kingdom or the European Economic Area and believe your personal data has been handled unlawfully, you have the right to lodge a complaint with your local supervisory authority.
Changes to this notice
This notice may be updated from time to time. Any change takes effect when the revised version is published on this page, and the date shown at the top is updated accordingly. Material changes to how personal data is processed will be reflected here before they take effect.
Contact
For any request under this notice, including requests for access or erasure, contact privacy@wolfyk.com.
That address is a forwarding alias rather than a hosted mailbox. Messages sent to it are processed by Squarespace's email-forwarding service, which operates on Mailgun, and are delivered to a personal inbox. Your message therefore passes through those providers in transit, as email generally does. It is not added to the game's database.
What you are betting on
The two sections below are a plain statement about the game. They are not part of the privacy notice above.
The game is play money. What you are guessing is whether one real room will be warmer, cooler, or about the same twenty minutes from now. That room is my bedroom, and the number on the page is whatever the sensor on my wall happens to be reading at the time.
Rooms warm up and cool down on their own. Mine goes with the weather outside, the time of day, whether a window or the heating is open, and whatever I happen to be doing in there. I open a window or put a fan on when I feel like it, because I actually live in the room. None of that has anything to do with the game, and that is really the fun of it. Nobody knows what the next reading will be, me included.
Fair play
This is the part I care about most, so I will say it plainly. I will never change the temperature to make a bet win or lose. I do not look at what anyone has riding on the game before I decide whether to open a window, and I am not going to warm the room up or cool it down to do someone a favour or to spite them. I look after the room the way anyone looks after the room they sleep in, and the game just watches from the side.
The way it is built backs that up. Everything runs on the server, so the numbers are no more mine to quietly edit than they are yours. The odds come from the meter's own past readings and are the same for everyone at any given moment, and every bet is settled automatically against the temperature the meter actually recorded. No result is ever typed in by hand.
So yes, it is random. The point is that it is the same random for every single person playing. You take the readings as they come, and you can trust that they land the same way for everyone.