Privacy policy

To run an account on FreeHaven we store the username, the email address and a password hash for every account. Passwords are never stored in readable form; they are hashed with a per-user salt using scrypt.

While you use the service we also store: credit transactions (every earning and spend, with a description), ad watch records (start time, duration and reward of each completed watch), server records (which plan a server runs and when it renews), and session tokens, which are stored only as hashes.

Request metadata such as IP addresses is processed in memory to enforce rate limits and to block abuse, and is written to standard server logs for short-lived debugging purposes.

Account data is used to operate your account. The credit ledger and ad records exist so balances are correct and can be audited. Rate limiting data exists to stop automated abuse of the ad earning system.

Your email address is used for account administration only. FreeHaven does not send marketing email and does not sell, rent or trade personal data with anyone.

FreeHaven is funded by advertising. Ads on the earn page are served by Google AdSense or by another ad network configured by the operator. These providers may set cookies or use similar techniques to measure and personalize ad delivery.

You can opt out of personalized Google advertising through Google Ads Settings, and many browsers offer a global do-not-track setting that ad networks respect to varying degrees. Blocking ads in your browser does not earn credits; rewards are only paid for completed ad watches.

Game servers run on a Pterodactyl-based hosting panel. When you deploy a server, the username and email tied to your FreeHaven account are shared with that panel so it can create a matching panel account for you. Files you upload to your server (worlds, plugins, configurations) live on the panel, not in the FreeHaven website database.

Data is kept for as long as your account exists. The credit ledger may be retained after account deletion where needed to prevent fraud, since credits are funded by ad revenue and abuse of the earning system is effectively theft from the service.

If you want your account and its data deleted, contact the site operator.

Passwords are stored as salted scrypt hashes. Session tokens are 256-bit random values stored only as hashes. API keys for connected services are encrypted at rest with AES-256-GCM. Traffic to and from the site is served over HTTPS.

No system is perfect. If you believe you have found a security problem, report it to the site operator instead of exploiting it.

FreeHaven is not directed at children under 13, and accounts for players under 13 should be created by a parent or guardian. Ad providers have their own rules for serving ads to younger users, which they apply automatically.

This policy may be updated as the service changes. The last-updated date at the top of the page always reflects the current version. Material changes will be announced on the site.