Your life.
Your privacy.

Who we are

Tallest Giant LLC operates Our Dacha and is responsible for the personal data described here (the data controller). Contact us at hello@tallestgiant.com.

Data the service processes

Our Dacha processes the information below to provide the features you use. Most of this happens automatically on our servers: saving a letter, delivering a message, or keeping your shared world in sync.

Storing your shared content is not the same as displaying it to our team. This list describes data handled by the service. The next section explains what the people who build and support Our Dacha can access.

• Your account

  Your email address (to sign in and to reach you about your account), the display name you choose, your avatar if you set one, and the pairing that joins your account with your one partner's account into a shared dacha.

• The things you make together

  Chat messages, letters, notes, and postcards; photos and drawings you upload, with their captions, reactions, and comments; your moods and statuses; daily-question answers and diary comments; dates, wishes, and countdowns; gifts, keepsakes, and everything in your shared world's economy, from the pantry and garden to your Lunari balances; and your moves and saved state in the games you play together.

• The cycle journal, only if you use it

  An optional, private space for period, symptom, energy, and cycle notes. This is health information, and it gets its own section: see The cycle journal below.

• Location, only as much as you choose

  If you turn on live sharing, your current location, so your partner can see your pin on your private map. Separately, a saved home place you set by hand powers weather, the local time, and the little place label under your house. See Location below.

• Place searches

  Place searches in Settings use the place list on our own servers. Separately, your device can look up a name for its current location as described under Location.

• Subscription state, never payment details

  When subscriptions launch, Apple or Google processes the payment and sends us a signed confirmation. We keep the product and transaction identifiers and your entitlement state (active, expired, refunded), so the app knows what you have paid for. We never receive or store your card or bank details. See Subscriptions & payments.

• Notification tokens, if you opt in

  If you say yes to notifications, your device gives us a push token we use to deliver them.

• Technical housekeeping

  Logs from our servers and limited authentication, network, error, and security records that keep the service up, safe, and debuggable. We do not use any of this to build a profile of you.

We do not ask for your contacts or your phone number. The app has no third-party analytics SDKs or advertising SDKs.

What our team can access

• Routine administration

  Our routine account-support tools show account details, technical records, and service totals. They do not display your private messages, letters, photos, diary or cycle entries, or precise location.

• Messages you send to support

  The team handling your request can read your contact details and anything you choose to include in a support form or email. See When you contact support.

• Privileged technical access

  Your shared content is not end-to-end encrypted. Administrators with privileged access to our servers or databases can technically read stored content, including optional location and cycle data. The app’s sharing controls limit what other app users can see; they do not prevent this administrative access.

• Payment details we do not receive

  Apple and Google handle your payments. Neither our app nor our team receives your card or bank details.

Why this data is used

We use this information to:

• To run the app: to show the two of you your shared rooms, moods, photos, letters, diary, gifts, games, and map.
• To deliver the notifications you have asked for (mail arriving, your partner coming home, and the like).
• To verify and honour your subscription, including restores, renewals, refunds, and the read-only archive if a plan lapses.
• To keep the service working, safe, and backed up.
• To receive, investigate, and answer your support requests.

We do not use your private content to train AI models, for advertising, or for engagement profiling.

Our legal bases

Where the GDPR or UK GDPR applies, we rely on:

• Performance of a contract, for the core service: your account, your shared world, and your subscription.
• Consent, for the optional things: live location sharing, the cycle journal, push notifications, and website analytics. You can withdraw consent at any time by switching an app feature off or changing your website privacy choices, and the relevant processing stops.
• Legitimate interests, for keeping the service secure and preventing abuse, in ways you would reasonably expect and that do not override your rights.
• Legal obligation, on the rare occasions the law requires us to keep or produce something.

Your location

Live location is a feature you choose, not a default. It is off until you deliberately turn it on, and you can turn it off again at any time, in the app and in your device's own settings.

• Within the app, your live location is shared only with your one partner. It is not public or shared with advertisers. Technical access is described above; map and place services are described below.
• It lets you see each other as pins on your private map.
• When you switch sharing off, the app stops collecting your location and clears the stored precise coordinates. We do not keep a history of where you have been.
• The map itself is drawn from tiles served by OpenFreeMap, using OpenStreetMap data. The tile service sees the map area your app asks to draw, as any map service must, but it does not receive your name, your account, or your partner's location. It requires no account and sets no cookies. Attribution is shown on the map.
• The friendly place label under your pin (a town name, not coordinates) is looked up on your own device via BigDataCloud, using only the coordinate your device has just authorised. Saved places and your partner's coordinates are never sent there.
• Saved places you create are stored on our servers for the location features you choose. In places-only sharing, the app matches your current position on your device and sends a place status instead of your precise coordinates.
• Your saved home place is used to fetch local weather from MET Norway, the Norwegian Meteorological Institute. The weather request includes coordinates for that place, not your account identity.
• Place-name searches in Settings are processed on our own servers using our own database. We do not send those searches to a third-party place-search service.

Your cycle journal

The cycle space is an optional, private journal for period, symptom, energy, and cycle notes. Because this is health information, it is handled with extra care:

• It is opt-in. The space does not exist until its owner creates it, and only its owner can write in it.
• The owner controls sharing. Your partner sees exactly as much as you choose to show, from nothing, to gentle phase context, to the full journal and history. You can change or stop sharing at any moment.
• It is stored in the same couple-scoped, access-controlled database as the rest of your world, on our own servers. The administrative access described above also applies to cycle data.
• Your journal entries and free-text notes are not sent to third-party services or used for advertising or profiling, and are never sold. If you enable cycle push notifications, Apple or Google receives the reminder text needed to deliver them. That text can reveal cycle context, such as an expected period or the number of days until it.
• You can edit or delete entries, or delete the whole space, whenever you like.

About health information: the cycle journal is a private wellness diary, not a medical device. It does not diagnose, treat, or advise, and it should never substitute for a clinician.

Push notifications

Notifications are opt-in. If you say yes, your device gives us a push token we use to send the small messages the app sends: your partner left you a note, your daily question is ready, that sort of thing. Delivery runs through Apple's and Google's push services on their respective platforms, and we keep the content of what passes through them deliberately minimal. You can turn notifications off in the app or in your device settings whenever you like, and we stop.

Subscriptions & payments

Full access to Our Dacha on mobile is offered through auto-renewable subscriptions (individual or couple, monthly or annual) sold by Apple through the App Store and by Google through Google Play. That means:

• Apple or Google takes the payment. We never receive or store card numbers, bank details, or billing addresses.
• We receive a signed confirmation of the purchase, which we verify and keep in the form of product and transaction identifiers and entitlement state, so the app knows your plan is active, restored, expired, refunded, or revoked.
• If a plan lapses, your dacha becomes a read-only archive: nothing is deleted, and you can export everything. Resubscribing wakes it back up.
• Managing or cancelling the subscription happens with Apple or Google, in your device's subscription settings.
• Lunari and every other in-app item are fictional. They cannot be purchased with real money, cannot be redeemed, and have no real-world value, so there is no purchase data to collect about them.

The services we rely on

Because we self-host, the list of outside services is short, and each one sees only the minimum needed to do its single job. Here is the complete roster:

• Apple (App Store, StoreKit, and push delivery)

  Processes iOS subscription payments and delivers push notifications to iPhones. Receives purchase confirmations and the device token and notification text needed for delivery, including cycle reminder text if you enable those notifications.

• Google (Google Play billing and push delivery)

  The same two jobs on Android: subscription billing and notification delivery.

• OpenFreeMap (map tiles, with OpenStreetMap data)

  Draws the base map behind your two pins. Receives standard tile requests for the map area being drawn; receives no account identity and no partner locations. Requires no account, no API key, and sets no cookies.

• MET Norway (weather)

  The Norwegian Meteorological Institute. Provides the real weather and daylight for the home place you set, so your dacha's sky matches yours. Receives a place, not a person.

• BigDataCloud (place labels)

  Turns your device's current, permission-authorised coordinate into a friendly place name, on your device. Receives a single coordinate at the moment you share; never your saved places or your partner's location.

• Google Analytics (this website only)

  After you allow analytics, measures visits, devices, browsers, approximate location, pages viewed, and interactions on dacha.town. It is not connected to your Our Dacha account or shared-world content.

• Our own servers

  Our servers in a professional data centre in Germany store and run your shared world. We administer the software and databases; the hosting provider supplies the infrastructure.

Google Analytics is the website's only analytics provider. There are no third-party ad networks or data brokers, and no service providers beyond those named on this page. If the list ever changes, this page changes with it.

When you contact support

Our support form sends your name (if provided), email address, topic, subject, message, and selected device type to Tallest Giant’s support desk, Bronto. We use this information to understand your request, investigate it, and reply. Technical request information is also used to limit abuse.

Support messages are available to the team handling your request. They are separate from your shared dacha and are not posted publicly or used for advertising. We keep support records as needed to handle your request and meet applicable legal obligations. You can contact us about access or deletion using the rights described below.

Please do not include passwords, invite codes, payment details, or private correspondence. A request to delete an account requires verification; submitting the form does not automatically delete anything.

This website (dacha.town)

Only after you choose Allow analytics, this website uses Google Analytics to understand visits and improve the product. It may use cookies and collect information about your browser, device, approximate location, pages viewed, and interactions. Google processes that information under its privacy policy. We never sell this data or use it for advertising. We show no ads and use no third-party ad networks. The app itself has no third-party analytics SDK.

If you decline, the Google tag does not load and no analytics data goes to Google. You can change or withdraw your choice at any time with the Privacy choices button; withdrawing removes the analytics cookies set for dacha.town.

Everything shown on the site is invented example material: example photos, example notes, example answers. No real couple's data ever appears here.

Storage and security

Your shared-world data is stored on our own servers in Germany. Data sent between your device and our public service travels over encrypted HTTPS. This protects data in transit; it does not make stored content unreadable to administrators with privileged access. See What our team can access.

Access rules in our database keep each couple’s shared content separate. One couple cannot read another couple’s records.

No method of storage is perfectly secure, and we will not pretend otherwise. But we keep our software updated, we keep the surface that faces the public deliberately narrow, and we keep backups so your shared world is not lost to a bad day.

Who we share it with

Your partner can see the content you share in your dacha. Other disclosure is limited as follows:

• We do not sell, rent, or trade your data. Not ever, not to anyone.
• We do not share app content with advertisers, data brokers, or analytics companies. After you consent, Google processes limited website activity through Google Analytics as described above.
• The services listed in the roster above each receive the minimum needed for their one job, and nothing else.
• We would only disclose data if the law genuinely compelled us to, or if it were truly necessary to protect someone's safety. Given how little we hold and how it is scoped, there is little to give.

Your choices & your rights

Everything optional stays in your hands, from inside the app:

• Location: turn live sharing on or off at any time; turning it off clears your stored precise coordinates.
• Cycle journal: choose exactly what your partner sees, change it, or delete the space entirely.
• Notifications: switch them off in the app or in your device settings, and we stop sending them.
• Website analytics: use the Privacy choices button to allow, decline, or withdraw analytics consent at any time.
• Export: use "download everything" to export your world as structured JSON, a readable PDF, and your original photos and media, in one ZIP.
• Delete: delete your account and its data from inside the app, no email required. The full walk-through is on our account deletion page.

Depending on where you live, the law also gives you formal rights over your personal data: to access it, correct it, delete it, restrict or object to its processing, take it with you in a portable format, and withdraw consent at any time without affecting what happened before. We honour all of these. Write to hello@tallestgiant.com and we will respond within 30 days. If you are in the EU or UK, you also have the right to complain to your local data-protection authority, though we would be grateful for the chance to fix things first.

For California residents: we do not sell personal information, and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. The rights to know, delete, and correct all work as described above.

Retention and deletion

We keep your account and your shared world for as long as you have an account with us, so your dacha is there when you come back to it. We do not expire your memories on a timer.

You can request deletion at any time. You can delete your account from inside the app (Settings → Account → Delete account), or ask us for help. Deletion permanently removes your login, profile, avatar, pairing, and settings from our live systems. Copies can remain in encrypted backups until the normal backup rotation removes them. Backups are kept for recovery and tested in temporary, isolated environments that are deleted after verification. They are not used for advertising or routine access to your content.

Children

Our Dacha is for adults. As set out in our terms, you must be at least 18, or the age of majority where you live if higher, to use the service. We do not knowingly collect information from children, and the app is not directed at them. If you believe a child has given us information, please contact us and we will remove it.

International transfers

Your world is stored in Germany, inside the EU. The platform services above (Apple, Google) and the map, weather, and geocoding services may process their small slices in their own regions, under their own published safeguards, as part of doing the job you asked them to do (delivering a notification, billing a subscription, drawing a map). Your shared-world content stays on our servers; the services above receive the information described in this policy.

Changes to this policy

If we change how any of this works, we will update this page and move the "last updated" date at the top. If a change is significant, something that meaningfully affects your privacy, we will tell you in the app rather than hoping you notice.

How to reach us

We are a small studio and a real person reads your mail. For anything about your privacy, your data, deleting your account, or this policy:

You can also send a privacy or data request through our support form.