# Privacy notice

This notice covers afyniti.xyz, the marketing site. The Afyniti app at app.afyniti.xyz handles accounts, wallets and quest data, and is governed separately.

## Scope

This notice describes **afyniti.xyz** only: the homepage, the partner page, this page, `/about`, `/contact`, and the blog.

afyniti.xyz has no accounts, no login and no user database. It does not ask you to connect a wallet. Everything that involves an account — registration, wallet connection, quest completion, XP, characters and equipment — happens on **app.afyniti.xyz**, which is a separate application with its own data handling. Nothing on this page describes what the app does with your data.

## What this site collects

### Analytics

The site runs two analytics tools.

**Plausible Analytics**, self-hosted at `analytics.afyniti.xyz` and loaded through a first-party proxy at `/_a/sc.js` and `/_a/v`. Plausible is cookieless. It does not store a persistent identifier, does not track you across sites, and does not build a profile. It records page views and a small set of named events — clicks on app links, referral landings, campaign form steps — with the page path, the referrer, and coarse device and country information derived from the request.

**Vercel Web Analytics**, loaded from `/_vercel/insights/script.js`. It records page views and Core Web Vitals. Vercel states that it does not use cookies and does not track visitors across sites.

Neither tool sets a cookie on this domain. This site sets no cookies of its own.

### Referral codes

If you arrive on a link carrying `?ref=CODE`, the script at `/js/ref-capture.js` validates the code and stores it in your browser under the key `afyniti_referral_code`, in both `localStorage` and `sessionStorage`. It then rewrites links pointing at `app.afyniti.xyz` so the code travels with you into the app, and records a `referral_landed` event in Plausible.

The code is an eight-character identifier for the person who referred you. It is not an identifier for you, and it stays in your browser until you clear site data. To remove it, clear site data for afyniti.xyz in your browser settings, or use a private window.

### The partner campaign form

The form at [`/partner#partner-contact`](/partner#partner-contact) is the only place on this site that asks you to type anything. When you submit it, these fields are sent to `https://app.afyniti.xyz/api/contact/send`:

- Name, work email, organisation and website
- Organisation type and campaign objective
- Your message
- The campaign type, platform fee, reward allocation and estimated budget you selected in the campaign builder

The submission is used to answer your enquiry and to scope a campaign. Nothing is submitted until you press send, and the campaign builder itself runs entirely in your browser.

## Third parties that receive data

Loading a page on this site makes requests to these hosts, and each therefore sees your IP address, your user agent and the page you requested:

| Host | Purpose | Pages |
| --- | --- | --- |
| `vercel.com` infrastructure | Hosting and CDN. Server logs, including IP addresses, for delivery, security and abuse prevention | All |
| `analytics.afyniti.xyz` | Plausible analytics, proxied first-party through `/_a/*` | All |
| `fonts.googleapis.com`, `fonts.gstatic.com` | Google Fonts stylesheet and font files | All |
| `d3e54v103j8qbb.cloudfront.net` | jQuery, a dependency of the Webflow interaction runtime | Homepage, error pages |
| `translate.google.com` | Google Translate, loaded only if you choose a language from the selector on a blog post | Blog posts, on demand |
| `app.afyniti.xyz` | Receives the partner campaign form when you submit it | Partner page, on submit |

Google Fonts and jQuery load on page view. Google Translate loads only after you actively select a language. No advertising, retargeting or social tracking pixels are present on this site.

## Legal basis and retention

Analytics data is aggregate and cannot be traced back to an individual, so there is nothing to look up, export or delete on request. Server logs are retained by the hosting platform for operational and security purposes. Partner form submissions are retained for as long as needed to answer the enquiry and manage the resulting commercial relationship.

## Your choices

- **Analytics**: block the domains listed above, or use a browser or extension that blocks analytics scripts. The site works normally without them.
- **Referral code**: clear site data for afyniti.xyz, or browse in a private window.
- **Fonts and translation**: blocking `fonts.googleapis.com` changes the typeface but not the content. Google Translate never loads unless you select a language.
- **Do Not Track**: this site sets no cookies and runs no cross-site tracking, so there is nothing for a DNT signal to switch off.

## Questions

Email [hello@afyniti.xyz](mailto:hello@afyniti.xyz) for anything in this notice, or [security@afyniti.xyz](mailto:security@afyniti.xyz) to report a vulnerability. For data handled inside the app, contact the team through the app or the [Telegram community](https://t.me/afyniti).

This notice describes the site as it is built today. It is updated when the site changes, and the date above is the date of the last substantive change.

---

Canonical URL: https://afyniti.xyz/privacy  
Last updated: 2026-08-21  
Factual product information on this page may be cited with attribution to Afyniti and a link to https://afyniti.xyz.