Privacy
Little Town · Updated September 22, 2026
This notice covers the 3D town, accounts, shops and payment features at whoarethebest.top.
Information we collect and use
For username registration, we store your username, display name and a password hash, never your plain-text password. Google sign-in provides an identity credential that may include a name, email and profile picture. After verification, we retain only Google’s stable account identifier and the associated town account. We do not retain that credential, Google name, email or picture, and do not read email, contacts or Drive.
We store plot trades, payment orders, public wallet addresses, wallet-link verification records, proceeds and payout requests, blockchain transaction identifiers, ownership history, shop content and reports to operate these features. Shop views and clicks support site statistics. The server processes request information, including IP addresses, for connectivity, security rate limits and troubleshooting.
Public content and sharing
Your display name, published shop information and some activity records are visible to visitors. Default Google account display names do not use your real Google name; you can change them. Do not publish information you wish to keep private. We do not sell personal information. The website runs on a server in Singapore. Google processes authentication information under its own policies.
Cookies and third-party services
Building generation sends your description and selected reference images to Tripo to create preview images or 3D models. We remove uploaded image metadata. Reference images and unpublished previews are visible only to the account owner and administrators. Published models and shop content are public. Jobs, generated files and results are stored on our server for editing and troubleshooting.
A language preference cookie remembers English or Chinese for one year. Resident sessions last up to 30 days and administrator sessions up to 8 hours. Signing out revokes the current session; you can also sign out of all devices. Google sign-in uses a single-use verification cookie for up to 10 minutes and loads its official component only when the sign-in panel is opened. Statistics use keyed digests of session identifiers and IP addresses for deduplication and rate limits; new statistics retain only daily aggregates long term. External shop websites are independently operated.
We also count public page views and source categories (such as Google, Phantom, GitHub or direct). Your browser stores a random identifier and source category in tab-scoped session storage. We do not store referring URL query parameters or track you across websites. The server stores no raw IP addresses or session identifiers for these metrics, using day-specific keyed digests to deduplicate visits. Expired digests are cleaned up on subsequent requests, and daily aggregates are retained for up to 366 days. These metrics respect Do Not Track and Global Privacy Control and are not sent to third-party analytics platforms.
You sign payments in your own wallet. We do not collect seed phrases or private keys. Receiving addresses, amounts and transaction records are public on Solana and cannot be deleted by us. We store orders and transaction identifiers to reconcile payments and deliver plot ownership.
Retention, corrections and deletion
Account and activity data are retained while providing the service and may appear in recovery backups. You can edit your display name in your account panel. Contact the maintainer below to request access, correction or deletion; we verify account ownership first. Records involving other participants may need anonymization. Backup data is removed when backups are retired. Revoking access in Google’s third-party connection settings does not automatically delete your town account.
Contact
For account, privacy or deletion requests: adalynngabriella235@gmail.com. Do not send passwords or sign-in credentials.