FIRE GOAT
GROW WITH THE HERD

Privacy Policy

Effective and last updated: October 4, 2026

How FIRE GOAT handles game progress, wallet information and optional third-party features.

1. Who is responsible

The FIRE GOAT project team operates firegoat.xyz, its installed web app and its Discord Activity. Contact @FireGoat_Ember on X for privacy questions or requests. This policy covers data handled by FIRE GOAT; other platforms’ policies cover their own services.

The current public release is a demo. Live token verification, payouts and server-backed AI chat depend on services being connected. This policy distinguishes current demo storage from the information used when those optional features are enabled.

2. Information we use

  • Device-local game data: demo garden state, outfits, item copies, claims, scores, lives, trial passes and preferences. Your browser also stores TV ownership, the last video, installation preferences and cached web app files.
  • Wallet features, when enabled: public wallet address, ownership challenge and signature, token balance check, expiring session credentials, claim dates, inventory, goat state and Candle Run progress. We never request seed phrases or private keys. Public wallet addresses and on-chain balances are already visible on the blockchain.
  • Discord: the Activity uses launch information supplied by Discord to connect to its client. If Discord sign-in is enabled and authorized, we process your Discord user ID, username and display name to verify and display your identity. The current sign-in code handles the access token in memory rather than saving it as a game record. It does not request your email, friends list or server message history.
  • Ember chat, when server AI is enabled: your message, recent conversation and relevant goat state, including its needs and outfit, are processed to generate a reply. Messages and usage counts can be stored with your wallet. Demo quick reactions do not use the server AI provider.
  • Technical and support data: hosting providers process network requests, which can include IP address, browser information, requested URLs and error details. If you contact the team, we receive the information you choose to send.

3. Why we process it

We use this information to operate the game, save progress, verify holder eligibility, enforce daily claims and fair-play rules, provide optional chat and media features, troubleshoot errors and respond to requests. Discord identity never replaces wallet verification.

Where applicable, the legal basis is providing the service you request, our legitimate interests in security and service operation, consent for optional features where required, and compliance with legal obligations. We do not use the app’s game or Discord data for targeted advertising or sell it.

4. Providers and external services

  • Hosting and database providers: deliver the website and store server-backed game records when those features are enabled.
  • Discord: handles Activity launch and optional authorization under its Privacy Policy.
  • Solana RPC and wallet providers: receive public wallet information needed for balance checks and wallet interaction. A blockchain record cannot be erased by FIRE GOAT.
  • YouTube / Google: turning on the TV loads YouTube’s player and sends requests to Google services. We use youtube-nocookie.com for the player, but playback can still involve cookies, device identifiers and network data. Fonts can load from Google Fonts when you visit the game pages. See Google’s Privacy Policy. In Discord, the current music control opens Cercle on YouTube externally.
  • AI provider, if enabled: OpenAI receives the message, recent dialogue and relevant goat state. Requests use the API’s store:false setting; this does not promise that the provider retains no operational or security data. See OpenAI’s Privacy Policy.
  • External links and support: visiting Pump.fun, Dexscreener, X or another linked service shares information with that service under its own policy.

Data may be processed outside your country by these providers. Applicable legal safeguards and provider terms govern those transfers. We may also disclose information when legally required or necessary to address abuse or protect users.

5. Storage, retention and security

Browser storage and cached files remain on your device until you clear them, they are replaced by an update or the browser removes them. Clearing site data also removes local demo progress and preferences. Removing the home-screen icon alone may not clear browser storage.

Wallet challenges expire after five minutes and garden sessions after one hour. Expired challenge and session records are cleaned during relevant later requests, rather than immediately at expiry. When live features are enabled, persistent game records remain while needed to maintain your collection, progress and claim history. The current code does not automatically delete these records after a fixed inactivity period.

You can request deletion of server records using the contact below. We may retain limited information where required by law or necessary to resolve abuse or disputes. Deletion from blockchain networks or a provider’s independent systems is outside our control. We use wallet signature checks, expiring credentials and server-side access checks; no service can guarantee absolute security.

6. Your choices and requests

You can use public demo features without connecting a wallet. Keep the TV off to avoid loading its player, disconnect your wallet to end the current connection, and remove Discord authorization through Discord settings where applicable. These actions do not themselves delete saved server progress.

For access, correction, export or deletion requests, contact @FireGoat_Ember on X and identify the relevant wallet or Discord account privately. We may ask you to prove control of that account or wallet, but never to reveal a private key or seed phrase. Please do not post sensitive information publicly. We respond within applicable legal deadlines.

Depending on applicable law, you may have rights to access, correct, erase or obtain a copy of your data, restrict or object to processing, withdraw consent and complain to your local data protection authority. Withdrawing consent does not affect prior lawful processing.

7. Age requirements

The service must be used in line with the applicable platform age requirements. We do not knowingly seek personal data from children below the relevant minimum age. A parent or guardian can contact us if they believe a child has provided information that should be removed.

8. Policy updates

We will update this page as features and data practices change, and communicate material changes through the service or project account. Contact @FireGoat_Ember on X with questions.