← The Wayfarers Rest

Privacy policy

This covers the website at thewayfarersrest.org and the Android app named The Wayfarers Rest. The app shows this website. It does not include its own advertising or analytics SDK. Last updated September 23, 2026.

Accounts

The app does not offer public sign-up. An administrator creates an account and chooses which pages it can open. An account record can include a username, a hashed password, a role, page permissions, and a two-factor secret if that person turns two-factor on. A signed-in session uses an HTTPS-only cookie that lasts about eight hours.

Other information on the server

Support tickets you submit, game quest progress for a signed-in user, and finance numbers a signed-in user chooses to save are stored on the server. The finance desk does not ask for a bank password. You sign in on the bank’s own site, then import a file you downloaded from them. Sign-in attempts are counted in memory by address to slow repeated failures. That count is not kept as a profile. The server may also keep ordinary request logs, including an address and a time.

Files on the phone

A file you upload is sent to the site for the tool you are using. A file you download is saved in the phone’s Downloads folder. On Android 9 and older, the app asks for storage access only so that save can finish. The app does not ask for the camera, microphone, or location.

Sharing

The site operator does not sell this information.

Removing an account

Ask the site operator to remove an account. An administrator can delete that user record. There is no public registration page to undo, because people cannot create their own accounts in the app.