Scope
This notice describes afyniti.xyz only: the homepage, the partner page, this page, /about, /contact, and the blog.
afyniti.xyz has no accounts, no login and no user database. It does not ask you to connect a wallet. Everything that involves an account — registration, wallet connection, quest completion, XP, characters and equipment — happens on app.afyniti.xyz, which is a separate application with its own data handling. Nothing on this page describes what the app does with your data.
What this site collects
Analytics
The site runs two analytics tools.
Plausible Analytics, self-hosted at analytics.afyniti.xyz and loaded through a first-party proxy at /_a/sc.js and /_a/v. Plausible is cookieless. It does not store a persistent identifier, does not track you across sites, and does not build a profile. It records page views and a small set of named events — clicks on app links, referral landings, campaign form steps — with the page path, the referrer, and coarse device and country information derived from the request.
Vercel Web Analytics, loaded from /_vercel/insights/script.js. It records page views and Core Web Vitals. Vercel states that it does not use cookies and does not track visitors across sites.
Neither tool sets a cookie on this domain. This site sets no cookies of its own.
Referral codes
If you arrive on a link carrying ?ref=CODE, the script at /js/ref-capture.js validates the code and stores it in your browser under the key afyniti_referral_code, in both localStorage and sessionStorage. It then rewrites links pointing at app.afyniti.xyz so the code travels with you into the app, and records a referral_landed event in Plausible.
The code is an eight-character identifier for the person who referred you. It is not an identifier for you, and it stays in your browser until you clear site data. To remove it, clear site data for afyniti.xyz in your browser settings, or use a private window.
The partner campaign form
The form at /partner#partner-contact is the only place on this site that asks you to type anything. When you submit it, these fields are sent to https://app.afyniti.xyz/api/contact/send:
- Name, work email, organisation and website
- Organisation type and campaign objective
- Your message
- The campaign type, platform fee, reward allocation and estimated budget you selected in the campaign builder
The submission is used to answer your enquiry and to scope a campaign. Nothing is submitted until you press send, and the campaign builder itself runs entirely in your browser.
Third parties that receive data
Loading a page on this site makes requests to these hosts, and each therefore sees your IP address, your user agent and the page you requested:
| Host | Purpose | Pages |
|---|---|---|
vercel.com infrastructure | Hosting and CDN. Server logs, including IP addresses, for delivery, security and abuse prevention | All |
analytics.afyniti.xyz | Plausible analytics, proxied first-party through /_a/* | All |
fonts.googleapis.com, fonts.gstatic.com | Google Fonts stylesheet and font files | All |
d3e54v103j8qbb.cloudfront.net | jQuery, a dependency of the Webflow interaction runtime | Homepage, error pages |
translate.google.com | Google Translate, loaded only if you choose a language from the selector on a blog post | Blog posts, on demand |
app.afyniti.xyz | Receives the partner campaign form when you submit it | Partner page, on submit |
Google Fonts and jQuery load on page view. Google Translate loads only after you actively select a language. No advertising, retargeting or social tracking pixels are present on this site.
Legal basis and retention
Analytics data is aggregate and cannot be traced back to an individual, so there is nothing to look up, export or delete on request. Server logs are retained by the hosting platform for operational and security purposes. Partner form submissions are retained for as long as needed to answer the enquiry and manage the resulting commercial relationship.
Your choices
- Analytics: block the domains listed above, or use a browser or extension that blocks analytics scripts. The site works normally without them.
- Referral code: clear site data for afyniti.xyz, or browse in a private window.
- Fonts and translation: blocking
fonts.googleapis.comchanges the typeface but not the content. Google Translate never loads unless you select a language. - Do Not Track: this site sets no cookies and runs no cross-site tracking, so there is nothing for a DNT signal to switch off.
Questions
Email hello@afyniti.xyz for anything in this notice, or security@afyniti.xyz to report a vulnerability. For data handled inside the app, contact the team through the app or the Telegram community.
This notice describes the site as it is built today. It is updated when the site changes, and the date above is the date of the last substantive change.