TIMECARD OS
Opening your next stop…
The navigation stays available while this page loads.
The navigation stays available while this page loads.
What this site keeps about you, why, and how to have it removed. Last updated 9 October 2026.
Most of the site needs nothing from you. We keep data only when you give it to us (the First Shift roster) or when you play the game with your wallet. We do not use advertising cookies, we do not sell data, and we never ask for your seed phrase or private key.
When you finish the First Shift and tick the box, we save your X username, the link to your reply, your wallet address, the steps you said you did, and the time. We use it to review entries by hand and to build the free-mint allowlist. The legal basis is your consent; you can withdraw it (see below).
To stop bots, each roster attempt counts against a one-way, keyed hash of your IP address. We do not store the IP address itself, and the counter starts over every hour.
Once the game is open, some records live on our server next to the chain: the daily time card (wallet, day, character) and event records such as Trick or Treat knocks (wallet, door, result). They exist to run the game and its leaderboards.
We count page views with Vercel Web Analytics, which is cookie-free and reports in aggregate. It does not follow you to other sites.
Your style, motion setting, quest progress, a Trick or Treat sign-in and similar preferences are kept in your browser's local storage. They stay on your device and are not sent to us.
Wallet addresses, characters, offices and every transaction on Ink are public by design and cannot be changed or deleted by anyone, including us. To read the chain, your browser and our server ask public RPC providers (the Ink gateway and Alchemy), which see those requests. Minting happens on OpenSea under its own terms and privacy policy.
Vercel hosts the site, Neon hosts the database, the Ink gateway and Alchemy answer chain reads, and X shows anything you choose to post there. They process data for us to run the service. We do not sell or rent personal data to anyone.
Roster entries are kept until the allowlist is final and the mint is over, then reduced to what the published allowlist needs (the wallet). Game records are kept while the game runs. The abuse counter resets every hour.
Wherever you live, and in particular under the LGPD (Brazil) and the GDPR (EU), you can ask to see, correct or delete what we keep about you, or withdraw your consent. Write to us on X at @thetimecard. A roster entry deleted before the allowlist is final is simply removed; once the allowlist is fixed on chain, the wallet in it cannot be taken out of the chain's record.
TIMECARD is not meant for anyone under 18.
If what we keep changes, this page changes first, with a new date at the top. See also the terms.