FESTRIVO

Privacy, short and plain.

FESTRIVO is free, non-commercial and ad-free. There is no sign-up, no email or password. We use no tracking cookies and no analytics.

What the server keeps

• Anonymous passport: festival stamps, activity progress, stories, souvenirs, selected titles and UTC visit days. Access and recovery secrets are stored as hashes. Progress remains until you delete your cloud passport from Passport → Save & recover.
• Public chat: Festival reaches everyone and keeps the last 40 lines (name, filtered text, time) for up to 24 hours. Nearby reaches visitors within 28 metres and is not copied to Festival or saved to disk. Recent message snippets and their delivery audience stay briefly in server memory, for up to 10 minutes and at most 300 messages, to validate public replies. Mentions and replies do not create private conversations.
• Human meet-ups: a joined visitor's name appears on the public meeting board. Bookings are linked to the anonymous passport and expire after the activity; completed journeys, their date and destination remain as passport memories until passport deletion. Two tabs of the same passport count as one visitor. Earned chat badges reflect verified visits or completed journeys.
• Festival discoveries and shared meals: your field bag, puzzle steps, completed discoveries and shared supper days are linked to your anonymous passport until you delete it. Supper records include the visitors' chosen display names. A repaired camp tent is a shared world change. These written activities do not send text to an AI provider.
• Finding company: availability, temporary walking crews and visitor invitations are public. These stay in server memory while active; invitations expire ten minutes after their meeting time. They do not create private chats. Meal and cooperative activity checks count distinct verified passports, not NPCs or duplicate tabs.
• Your position and movement: only used to show you to others right now. Toilet occupancy and optional lines are temporary public server state and are released when you leave or disconnect. They are not saved to your passport.
• Drawing walls and game scores: the name you chose and your drawing or score, while they stay in the game.
• «Talk to us» forms and the survey: what you write, a contact if you leave one, files you upload. Only with your consent, kept as long as needed to answer or improve the game, then deleted.
• IP address: used in memory only to limit abuse; not written to disk and there is no visit log.

On your device

Name, look, settings, muted players and a device copy of progress live in your browser’s local storage. An anonymous access token and recovery code connect your passport to its server copy. Clear site data to remove this device’s copy. This does not delete the cloud copy; use Passport → Save & recover → Delete my cloud passport to delete both. Keep your recovery code to use another device.

Festival NPC conversations

Drawing safety checks: when you submit a drawing, two image previews (colour and cropped monochrome) are sent to Google Gemini to check for harmful content. Passport secrets, IP addresses and your chosen name are not sent with these images. Text you draw is part of the image: do not include personal information. Until approval, only you and the moderators can see your submission. Uncertain or unavailable checks wait for human review. Drawings remain in the wall archive for up to seven days; review decisions and content fingerprints are retained for up to eight days. Moderation can make mistakes; you can edit an unpublished drawing, remove your current drawing or report a public drawing.

NPC conversations are public to visitors nearby. During the invited test, generated replies use Google Gemini. Your message, a short recent public conversation, the fictional character profile and limited festival memories are sent to Google to generate a reply. Passport access tokens and recovery codes are excluded from the model context. Do not send personal or secret information.

Recent NPC conversation text is kept on this game server for up to 24 hours, with at most 80 lines per character. An NPC can retain meeting days, a reported music preference and up to three short quotes from your own messages, plus verified shared activity memories. These remain linked to your anonymous passport until you delete it through Passport → Save & recover. Deleting the passport removes these game-server records; it does not control copies already seen by nearby visitors or the AI provider’s handling.

Google processes image-review and generated-dialogue requests under its Gemini API terms. This is a fictional character system: generated text may be mistaken. Game actions and rewards are validated separately by the festival server.

External music

The shared day/night cycle follows a fixed reference in Los Cristianos, Tenerife. The game server caches a weather forecast from MET Norway, credited under CC BY 4.0. Your browser requests the cached result from this game server. Your location is not requested or sent to the weather provider.

Part of the music is streamed from Audius. While you hear those tracks your browser connects to Audius servers, which see your IP address like any music site would.

Your rights

You can ask to see, correct or delete what you sent. Use the Talk to us button in the game.