Privacy Policy.
Who we are, and what this is
Outposts is a small goal-tracking game for people 18 and over. Each island (Ironpeak, Downtown, Hollowgrove, Stillwater, Hearthwick, Greyspire) is a different kind of goal — fitness, finance, reading, mindfulness, social, career — on the same engine. An account lives on one island at a time, with one village there. You can sail to another island: that erases the village you leave behind and keeps your account (see "How long we keep it"). The person responsible for the data described here is the operator of the Outposts test project, reachable at outposts@galliainc.com.
What we collect, and why
Some of what follows belongs to your account — it is the same across island you sail to. The rest belongs to a village — your progress on the island you are on now, which sailing to another island erases.
| What | Level | Where it comes from | What it is for |
|---|---|---|---|
| Your email address | Account | You type it when you save a village you started as a guest, or on the sign-in screen | Sending you the one-time sign-in link or code, and identifying your account on return. It is not used for anything else and no marketing mail is sent. |
| Your username (shown as @name), which is also your display name, and when you last changed it | Account | You choose it during onboarding or in the Friends tab | Shown with your house, on your feed lines, on the monthly board and in outpost check-in notifications, in the outpost you join — it is the same name on every island you sail to. Your friends and anyone who sends you a friend request see it too (see "Who else sees it"). Any signed-in player, a guest included, can check whether a username is already taken. It does not have to be your real name, and we ask you not to use it. You can change it once a week (changing only the capitals does not count). Feed lines and other records written earlier can still show the name you had then. |
| Your face (one of the app's pictures) | Account | You pick it during onboarding, and can change it in Profile | Shown beside your username wherever your username is shown. |
| Your age band, and when and to which version of this policy you agreed | Account | The birth month and year you pick, and the box you tick, when you save your village or sign in with a new email | Enforcing the 18+ minimum and knowing that you agreed to the current wording. Your date of birth itself is not stored — only which band it falls in. |
| Your reminder time and time zone, and whether outpost check-in notifications are on | Account | Settings, or your device (the time zone, once you turn on notifications) | Sending your daily reminder at the time you chose, in your own zone, and deciding whether you get the outpost check-in notification described below. |
| Your goal text | Village | You type it when you set a goal, on that island | Running the game (deadlines, streaks, payouts) for that village. It is private by default. No outpost feed line and no announcement ever contains the sentence you wrote — a check-in reads “checked in”, not what you checked in on. Whether a neighbour opening your house can read the sentence is a switch on your own goal screen (“Keep my goal text private”), and it starts switched on. With it off, your neighbours on that island — and nobody else — can read it. |
| An optional check-in log (up to 60 characters) | Village | The "What did you do?" field, when you check in | Your own private note. If your goal on that island is public (the switch above), the same words also appear once in your outpost's feed alongside "checked in" — never otherwise. |
| Vouches on a check-in ("vouched by N") | Village | A neighbour tapping Vouch on your check-in line | A social count on a public check-in line, visible to the outpost it was given in. It pays nothing and changes no game number. |
| Outpost feed lines and chat messages | Village | Written by you, or generated by the game about you | The shared history of the outpost you are in on that island. Everyone in that outpost can read them. |
| Pause dates and reasons | Village | You enter them when you book a pause | Stopping that island's clock for your village while you are away. |
| Game state | Village | Generated as you play | Coins, iron, streak, house tier, decorations, reward items and the Finisher's pennant count, outpost membership, plot, monthly leaderboard results — for that island only. |
| Your notification subscription | Account | Created by your browser, and only if you say yes to the reminder prompt after your first check-in | Sending you a reminder when a check-in is due, or an outpost check-in notification (below). It is a URL your browser's own push service gives us plus two encryption keys — no message content and nothing about your device. Only you can read it, and turning notifications off in Settings deletes it. There is no prompt until you have checked in at least once. |
| Your gems, and a record of every gem earned or spent | Account | Generated as you play, on any island | One gem balance for your account, kept when you sail to another island, and its history. Gems only ever buy looks. |
| Friends and friend requests: who asked whom, whether it is waiting, accepted or declined, and when | Account | Requests you send — by username, invite code or from a neighbour's card — and requests you accept or decline | Showing your friends list. A person whose request is waiting sees only your username, name and face. An accepted friend, on an island where you have a village, also sees your house and its decorations, your streak, your check-in and missed counts, what kind of goal you keep, and your outpost's name and crest — and your goal sentence only if it is public. A friend is a friend on every island. A guest cannot send or receive friend requests. |
| Your invite code (8 characters) | Account | Made for you automatically the first time the app loads your friends information | Letting someone send you a friend request. Only you are shown your code in the app. Anyone you give it to, or give an invite link to, can send you a request and will see your username, name and face. An invite link carries the code in its address, so it appears in the web server's request logs like any page address. New code replaces it at once, and the old code stops working; requests already sent with it stay. |
| Outpost invitations from a friend: which outpost, who invited whom, the answer, and when | Village | A friend in an outpost invites you to it, on one island | You see the outpost and the inviter's username, name and face. The inviter sees which friends they have invited. If the outpost needs a leader to approve you, your application says "Invited by" and the inviter's name, and the outpost's leaders can read it. |
Please note what a goal is. People use goal trackers for exercise, weight, drinking, sleep, study, saving and other things that can be health-adjacent. Anything you type in a goal, a check-in note or a milestone update is stored as you wrote it, at the village level described above. Your goal sentence is not posted anywhere, and a neighbour on that island can read it only if you have turned its privacy switch off. If you would not want something read by your neighbours, do not put it in a check-in log or a milestone update.
Notifications
Two kinds, both optional and both switchable off in Settings:
- Your own daily reminder, sent once a day at the time you choose, in your own time zone, only when a check-in of yours is open. When one goal is due it names it, in your own words (Check-in for "Lift 3×/week" is open.); when several are, it names only the islands. It is sent to nobody but you.
- Outpost check-in notifications — at most one every four hours, naming which of your neighbours checked in since the last one ("Sam and Priya checked in."). It is never sent to the person who checked in, never says what anyone's goal is, and includes a check-in's own log line only when that neighbour's goal is public. It can be turned off from Settings without turning off your own daily reminder.
Reward items and the Finisher's pennant
Finishing a goal earns your village the Finisher's pennant (a running count, visible on your house and to your outpost on that island), and finishing a longer-running one — the 1st, 3rd and every other odd milestone after it, up to the 39th — also earns a unique decoration for your yard. Neither is bought, sold or lost; they are recorded on the village row the same way a house tier or a decoration is.
The coin cost of a missed check-in
A missed check-in on a village costs a small number of in-game coins (never real money), taken from that village's own pile. It is one of the ordinary rules of the game, the same as decay to your house; it has nothing to do with the data described here beyond being one more thing generated as you play.
Moderation, and what a report keeps
Outposts is moderated by its founders, on an in-app moderator screen. Once a day, when any reports have come in, the founders get one email that says only how many new reports came in during the 24 hours before it is sent ("3 new reports on Outposts. Open the moderator screen.") — never who reported what or what was said, and sent through an ordinary email delivery service (confirmed before this goes live to anyone outside the team).
To keep players safe from bullying and abuse, a moderator can also open any outpost on an island and read its feed, as one of its members would. Its members are not told when that happens, and nobody's private goal is shown, since a feed line never carries one. Every such look is recorded in the moderators' own log.
When you report something, we keep a copy of the reported line or post and the name on it so a moderator can see what was said. We erase that copy 30 days after a moderator closes the report, and never keep it more than 90 days after the report was filed. This holds even if the person who wrote it deletes their account. The person you report is never told who reported them.
Blocking someone stops their villages showing up for you, on every island, and can be undone from Settings → Blocked players at any time. Blocking someone also ends any friendship between you and cancels outpost invitations between you. What is said in an outpost is checked against a maintained list of blocked words before it is stored, so plainly abusive text never reaches the feed in the first place.
Why we are allowed to hold it
We hold your email address and your game state because we need them to give you the account you asked for (contract). Anything you choose to type into a goal, a note or the feed — which may say something about your health, finances or habits — is held because you chose to share it with your outpost, and you may withdraw that at any time by deleting the entry, or your account. We do not profile you, we do not advertise to you, and nothing here is sold.
Who else sees it
- Other players. Your username, house, reward items and pennant count, streak, milestone updates and feed lines are visible to the members of the outpost you are in on that island, along with what kind of goal you have set and how often it is due. Your goal sentence is visible to them only if you have turned its privacy switch off — see the note above. Anyone with a village on that island can also open any outpost's page there and see its members' usernames, names, faces, houses, streaks and ranks. Your friends, on every island, see what is described under "Friends and friend requests" above. Anyone who sends you a friend request, or receives one from you, sees your username, name and face. Until you join an outpost or add a friend, that is all another player can learn about you: that your username exists, and — if they ask to be your friend by it or by your invite code — your name and face.
- Supabase (Supabase Inc.) — hosts the database, the authentication system and the server functions. Everything described above is stored there.
- Your browser's push service — Apple (Apple Inc.) on Safari and iOS, Google (Google LLC) on Chrome and Android, Mozilla on Firefox. Only if you turn notifications on. Which service is used is decided by your browser, not by us. It is given whichever notification we send, encrypted for your device. Your own reminder can contain your goal's text, as described under Notifications; an outpost check-in notification never contains anyone's goal text, and a log line only from a public goal.
These are processors acting on our instructions; each may store data outside your country. The app's typefaces are self-hosted files shipped with the app itself — no font request ever leaves your browser for any outside font service, so none is a processor of anything here. Nobody else is given your data, and it is not sold or used for advertising.
How long we keep it
For as long as your account exists, plus up to 30 days afterwards in routine encrypted backups, after which the backups holding it have rotated out. Deleting your account removes the live data immediately, as described below. The one exception is the report copy described above: it is erased 30 days after a moderator closes the report, and never later than 90 days after it was filed, whether or not your account still exists — plus, in either case, up to 30 more days while it lingers in routine encrypted backups, the same as everything else here.
Removing a friend deletes the friendship. A friend request still waiting after 30 days is deleted, and so is a declined or taken-back one 30 days after it was answered; an outpost invitation is deleted 30 days after it was sent, if nobody answered it, or 30 days after it was answered or lapsed. A guest account with no check-in for 30 days is deleted, with everything in it, the same way as Delete my account.
Sailing to another island (Settings → Sail to another island) deletes the village you leave: its goal, check-ins and notes, house, coins, iron, streak, outpost membership and yard. Your account stays, with your name, username, face, friends and gems. If the outpost you leave has other members, they see a line in its feed saying that you sailed, with your name on it.
Outposts are shared property: if you founded one, the outpost itself and its hall keep existing after you leave or delete your account, but with no name, no author and nothing you wrote attached to them.
Your rights, and how to use them
- See and take a copy of your data. Settings (the gear at the top of the village) → Download my data. Your browser builds the file itself out of one request and saves it straight away — nothing is emailed, and no copy of it is kept. It is a JSON file holding your account record (your username and invite code, your age band, and when and to which version of this policy you agreed, your reminder time and zone); your blocks, the reports you filed, your gem balance's history and any gem purchases, and your notification subscriptions; every friend request you sent or received and what became of it (accepted, waiting or declined — a request you took back is recorded as declined), each shown by the other person's username only; and every village you have, each with its check-ins and their notes, goal history, outpost applications, outpost invitations sent and received, pause requests, feed lines and announcements you wrote, vouches given and received, brush-offs given and received, votes to remove you or started by you and your own ballots, outpost bans, monthly board results, your private village log and rest-day changes, your rivalry and siege sign-ups and results, the decorations and reward items you own, and the iron you have contributed. Other players in it appear by their username (friend requests) or by a village number — or by name inside a feed line, exactly as the outpost already saw it — never by their email. Requests and invitations between you and someone you have blocked are left out of your file.
- Delete everything. Settings → Delete my account, which asks twice and then asks you to type DELETE. This is immediate and permanent. It removes your sign-in account and your email address with it, every village's player record, check-ins and notes, goal history, outpost applications and any notification subscription, your username, your invite code, your friendships and friend requests, and outpost invitations to or from your villages, and it redacts the lines you wrote in an outpost's feed to a placeholder that names nobody. If you invited someone to an outpost and their application still says so under your current username, your name is removed from it. You are signed out on the spot. There is no grace period and we cannot undo it for you.
- Correct something. Your goal can be changed in the app at any time, and your username once a week. For anything else, write to us.
- Object, or complain. Write to outposts@galliainc.com. If you are in the UK or EU you also have the right to complain to your national data protection authority.
Age
Outposts is for people 18 and over, on every island. You can start a village as a guest, without an email; a guest cannot join an outpost or add a friend, so no other player ever sees a guest's village. Saving a village to an email — asked at the first outpost door or friend request — begins with a birth month and year; if the answer puts you under 18, no email is sent, nothing is recorded and the village stays a guest's. Typing a new email on the sign-in screen sends the code first and asks the same question straight after; under 18, that account is stopped before it can claim a village, and you are signed out. On the server an under-18 answer is refused no matter what the app sends, and no account without an adult answer can join an outpost or add a friend. There is no parental-consent path — under 18 simply cannot sign up. If you believe we hold an account for someone under 18, write to outposts@galliainc.com and we will delete it.
What is stored in your browser
Signing in — or starting as a guest — stores a session token and a refresh token (and, once you have given one, your email address) in your browser's local storage, so you stay signed in between visits. Signing out removes them. One small note stays behind — that this device has held an account — so the next visit opens on the sign-in screen rather than as a new guest. An invite link's code is held in that tab's session storage until the friend request is sent or you close your profile. Your answer to the age question and to this policy is held there too, until your account has recorded it. If you install the app to your home screen it also keeps a copy of the app itself — the page, its code, its icons, its self-hosted typefaces, and this document — in your browser's cache storage, so it opens with no network. Nothing you write and nothing about your village is ever put in that cache: everything the app fetches from the server is deliberately excluded from it. Clearing the site's data removes all of it. There are no advertising or analytics cookies, and no third-party trackers.
Changes
If this policy changes in a way that matters, the version number at the top changes and you will be asked to agree again, once. This version is 2026-09-19.