Privacy Policy

1. Who is responsible

Use this contact for privacy questions and requests. Please do not send passwords, payment-card details or identity documents unless we specifically explain why a limited identity check is necessary.

2. Data we use and why

Website access and live streams

Our web host and the network delivering the streams receive connection information such as your IP address, request time, requested page or video segment, browser information and error information. This is needed to deliver content, maintain availability and protect the service. Stream previews may connect automatically when the homepage loads or a camera tile becomes visible. Declining optional analytics does not prevent these necessary connections.

The cameras show the barn in Thailand, not your own device. RealHens does not access your camera or microphone. People and voices in the barn may appear in broadcasts; contact us if a broadcast affects your privacy.

To protect the live visitor counter from automated abuse, we retain a daily changing keyed network identifier and short-lived request counters separately from account data. These contain no raw IP address, are not used for advertising or linked to accounts, and expire at the next UTC day change (within 24 hours). Active-tab limits expire after 90 seconds. Country totals count a network at most once per day.

Accounts and security messages

We use your username, chosen display name, first and last name, date of birth, email address and verification status, password hash, account settings and sign-in information to create, review and secure your account. For new registrations, your date of birth checks the minimum age of 20. First and last name and date of birth are required for account registration and review; your country of residence is optional and helps us understand where members live. These private account details are available to authorised account administrators, not displayed publicly. Only your chosen display name is public. New accounts require team approval after email verification while manual review is enabled. We send confirmation, password-reset and other necessary account emails and keep delivery records. We do not store your password in readable form. An email address is required for email registration and recovery; without the required details we cannot provide those functions.

Google sign-in, when available

If you choose Google sign-in, Google supplies a stable account identifier, email address, whether that email is verified, and basic profile information such as your name. We use the identifier and email to sign you in and associate the Google identity with your RealHens account; new members choose their own display name in the account completion form. A signup session temporarily holds the verified Google identifier and email while this form is completed. This permission to complete signup expires after 15 minutes and does not give account access; expired session data follows the session cleanup cycle. We request only basic sign-in permissions, not access to Gmail, Drive, contacts or your Google password. We do not retain Google access or refresh tokens or use Google profile photos as RealHens avatars.

Google account data is used for account access and associated support and security, not advertising or training AI models. You can revoke the connection in your Google Account; revocation alone does not delete an existing RealHens account. Google's own processing is explained in its Privacy Policy.

Community and feeding

We store your favourite chicken, votes, badges, streaks, virtual Egg balance and history, feeding activity and chat messages when you use these features. Display names, feed activity and rankings may appear publicly, including in the activity ticker. Chat messages and display names are visible to other members and moderators. Choose a display name you are comfortable sharing and do not post private information about yourself or others. You can change your public display name in My RealHens once every 14 days; we store the change time to enforce this interval. Existing activity uses your current name. Older Google accounts appear as “Member” until a public name has been explicitly chosen or confirmed.

Orders and subscriptions, when available

For purchases we process the items ordered, amount, currency, payment status and transaction references, together with contact, billing or delivery details supplied at checkout. These can include your name, email, phone number and shipping address. For memberships we keep the subscription status, period, plan and payment-provider identifiers. Payment-card details are entered with Stripe; RealHens does not store full card numbers or security codes. Required checkout information is necessary to process the order.

Support and misuse prevention

We use the contact details and messages you send to respond to you. Sign-in failures, security events, moderation actions and technical errors may be recorded with an account identifier, IP address, browser information, time and outcome to prevent misuse and investigate problems.

Optional visitor analytics

With your permission, our own analytics records a random visitor identifier, IP address, approximate country, browser information, referring page, visit and viewing times, selected cameras and interactions such as feeding, voting or opening the shop. Country lookup is performed locally. The analytics database is hosted with our website; no Google Analytics or advertising pixel is used for this measurement. The IP address and visitor identifier mean these detailed records are personal data, not anonymous statistics.

Basic audience counts

Separately, we count visits by country and day and display how many pages are currently open. The country count uses an IP address for a local lookup without keeping it in that counter. The open-page count uses a random value held only in the page's memory; entries are removed after 90 seconds without an update when the counter next runs. These counters do not create a persistent visitor profile. Hosting and network logs described above are separate.

4. Cookies and browser storage

• __Secure-RHStream: a necessary, signed access cookie for member-only streams. It contains no name or email, expires after three minutes and is renewed while you use the site. It is shared with our stream subdomain and cleared on logout.
• RHSESS: a necessary session cookie for account access and security, configured for up to 30 days. It is not an advertising cookie.
• rh_consent: stores your analytics choice until you change it or remove this site's browser data.
• rh_vid: a random analytics identifier, created only after analytics permission; removed when you reject or withdraw that permission in this browser. Otherwise it remains until the site's browser data is cleared.

Google and payment-provider pages use their own cookies when you visit them; their notices explain those separately.

5. Grounds for processing

We rely on consent for optional analytics and confirmed newsletter subscriptions; providing the service you request for accounts and orders; legitimate interests for service security, basic audience counts and moderation, balanced against your rights; and legal duties where records must be retained or disclosed. The Thai Personal Data Protection Act applies to our processing. Where the GDPR also applies, the corresponding grounds are Article 6(1)(a), (b), (f) and (c). This notice is information, not a request to consent to all processing. Thai PDPA, English translation.

Newsletter choices

The registration form offers a preselected request for a newsletter confirmation email. That setting alone does not subscribe you. After your account email is verified, we send a separate link; your subscription starts only when you actively confirm it. The newsletter contains flock news, updates and occasional offers. We record your address, request time, confirmation time and the version of the consent text. We send campaigns only to confirmed subscribers with approved accounts, using our existing email provider. We do not add existing accounts automatically or use newsletter tracking pixels.

You can unsubscribe without signing in through any newsletter email, or manage the subscription in My RealHens. Unsubscribing does not stop necessary account or security emails. Account deletion removes the newsletter subscription; changing the account email requires a new subscription. A message already in transmission may still arrive. Subscription records remain until account deletion or a separately processed deletion request; delivery/security records are assessed separately as described below.

6. Recipients and international processing

• ALL-INKL.COM – Neue Medien Münnich, Germany: website/database hosting, account email delivery and newsletter delivery. Provider privacy information.
• Cloudflare: delivery and protection of the barn stream connections. Network/request information is processed as part of that service. Cloudflare privacy information.
• Google: identity verification when you use Google sign-in. Google receives the sign-in request and operates its own account service.
• Stripe: payment and subscription processing when you use checkout or payment management. Stripe privacy information.
• Gelato and its printing/delivery partners: merchandise fulfilment where used for your order, using the necessary order and delivery details. Gelato privacy information.
• Authorised administrators, moderators and support personnel: access relevant to their tasks; authorities or professional advisers where required by law or necessary to address claims.

RealHens operates from Thailand and uses hosting in Germany. The named providers may process data in other countries, including the United States. Your data is therefore not necessarily confined to Thailand or the EU. Applicable transfer requirements depend on the provider, destination and processing; contact us for information about the arrangements relevant to your data. We do not sell your personal data.

Links to services such as Instagram take you to their own websites. Their privacy notices apply there.

7. Retention and deletion

Retention depends on the purpose and whether a record is needed for an active account, an unresolved request, an order, security investigation or a legal obligation.

• Account profile and sign-in identities: kept while the account is maintained. You can request closure under My RealHens → Delete account, with a separate email link and final confirmation, or contact us by email. Unverified email registrations with no activity are eligible for cleanup after seven days; cleanup runs periodically when the registration service is used.
• Verification and reset links: valid for 24 hours and one hour respectively. Expiry prevents use of a link; it does not mean every associated security or mail-delivery record has been deleted.
• Detailed analytics: currently has no scheduled automatic deletion. Please contact us to request deletion or a review of records associated with your visits. Withdrawing analytics permission stops future collection but does not automatically delete earlier records.
• Chat, feeds, virtual Egg history, security and mail records: may remain after account closure. They are assessed separately for community history, abuse prevention, outstanding matters and legal requirements; account deletion does not automatically erase them. A retired internal account ID is kept reserved to prevent a new account inheriting old activity. To prevent repeated welcome-feed gifts after deletion and re-registration, we retain keyed, non-readable matching values derived from verified email addresses and Google account identifiers, together with timestamps. These values remain personal data; they are used only for preventing repeat gifts, are kept while this programme and its abuse-prevention need continue, and do not prevent a new registration. New registrations recognised this way receive no further free welcome feeds.
• Orders and subscriptions: retained as needed to fulfil the contract, resolve claims and comply with applicable accounting or tax requirements. The required period depends on the record and applicable law.
• Hosting logs and backup copies: follow the host's configured retention and backup cycle. Copies can remain until that cycle replaces them; requests involving these records require a separate check.

When handling a deletion request, we identify what can be deleted or anonymised and explain any necessary retention. We do not promise that closing an account immediately removes every historical record or backup.

8. Your rights and how to contact us

Subject to applicable conditions, you can request access, correction, erasure, restriction, portability or object to processing. You can withdraw consent without affecting earlier lawful processing. Email hello@realhens.com with the account or activity concerned; we may need proportionate information to verify the request. You can complain to Thailand's Personal Data Protection Committee or another competent authority where applicable. You do not have to contact us first to complain.

We do not use visitor data for decisions that produce legal or similarly significant effects solely through automated profiling. Automated security limits and community counters are used to operate the site.

9. Children and changes to this notice

New accounts are currently restricted to people aged 20 or over. We do not currently offer registration through parental authorisation. If you believe we hold a child's data without the required authorisation, contact us.

We update this notice when the service or its processing changes and show the date above. Where a change requires fresh consent, updating this page alone does not replace that consent.