Your information

Million Tree Dollar is operated by Stefan Djordjevic. This page describes implemented data handling. For privacy questions, email stefanjorjevic@gmail.com.

Playing and public information

The game processes your nickname, pseudonymous player and device identifiers, search sessions, selected bill IDs, timestamps, daily progress, referrals and security signals. These support operation, continuity, eligibility checks and prevention of repeated or forged rewards.

Your nickname can be displayed publicly after a verified win, including champion history. Do not put private information in it. Browsing an information page does not itself start a search or create a game result.

Cookies and browser storage

A signed, HttpOnly player cookie can last up to one year and is sent to this site’s game API. Local storage keeps identifiers, the nickname and visual theme; session storage supports request retries. A referral code in an incoming URL is carried through internal navigation to the game. It does not award a reward by itself.

Clearing browser data can interrupt recognition of progress. It does not remove server records, restore a daily entitlement or automatically erase champion or referral history.

Hosting and bot protection

Cloudflare Workers hosts the service, D1 stores game records, and Turnstile provides bot checks for protected actions. Requests necessarily pass network information such as an IP address to the hosting or bot-protection service. The game uses derived security signals and does not store raw IP addresses or Turnstile challenge tokens in its game database.

That database statement is not a claim that infrastructure providers process no network data. See Cloudflare’s Privacy Policy for its own handling.

Retention

Scheduled cleanup targets ordinary search details and security events at about 30 days, daily eligibility records at 35 days, device links after 400 days of inactivity, and verified advertising receipts at 180 days if such receipts exist. Cleanup is batched, so these are operational periods, not exact deletion deadlines.

Player progress, champion history and records preventing repeated referral claims can be retained longer. Winning submissions supporting champion history are excluded from ordinary cleanup. Clearing a browser is different from removing these server records.

Advertising and this version

Live ad units and rewarded ads are disabled. Public pages contain an AdSense account-verification meta tag and the site publishes ads.txt; these are identifiers, not an ad-serving script. This version does not load Google’s ordinary advertising script on public pages or the game page.

Future advertising activation requires a separate integration and review of disclosures and applicable consent controls. This policy must reflect that activation; a publisher ID alone should not be read as an offer of ad rewards.

Contact and requests

If you email support, your email address and the information you send are used to respond. Do not include passwords, session cookies, API keys or payment details. Send privacy, access or deletion questions to stefanjorjevic@gmail.com. Explain the request without authentication credentials; enough information may be needed to identify the relevant records.

Some records serve security, anti-duplication or champion-history purposes. Clearing local storage does not delete them. Questions about a particular record should be reviewed individually.