Privacy Policy
Scope of This Notice
This Privacy Statement is intended to describe the Museum of All Things' privacy practices and provide information about the choices you have regarding the ways in which information collected by the Museum of All Things is used and disclosed. The Museum of All Things is referred to in this document as "The MoAT".
It covers both online platforms of the MoAT project (shop.may.as and https://may.as/moat) and the use of the MoAT application. The MoAT platforms and applications are owned and run by Bread Cat Games LLC.
Commitment to Privacy
To better protect your privacy and to comply with various laws and regulations, we have provided this Statement explaining our information practices and the choices you can make about the way your personal information is collected, used and disclosed. To make this Statement easy to find, we have made it available on our homepage.
The Information We Collect
This Privacy Statement applies to all information collected by or submitted to the MoAT, including personal data. "Personal data" is data that can be used to identify an individual.
The MoAT collects personal data when:
- you visit the MoAT web site (may.as/moat)
- you visit or make purchases on the MoAT gift shop (shop.may.as)
When you visit the MoAT website, your IP address, browser version, and page url may be collected. When you make purchases on the MoAT gift shop, your IP address, browser version, and the pages you visit may be collected.
In addition, any information you provide with your order in the MoAT gift shop will be collected to complete your purchase.
The MoAT application does not collect personal information, but it does make third party API requests to Wikipedia and Wikimedia Commons, which may collect your IP address as well as the name of the data requested, which corresponds to the exhibits visited in the MoAT application.
Using (Processing) Your Personal Data
The MoAT uses the personal data you provide to:
- Monitor usage statistics of the MoAT website
- Complete orders in the MoAT Gift Shop (This applies only to information provided to the gift shop when making an order)
The MoAT will never share your personal data except as described below.
- As required to operate the MoAT website and gift shop by sharing with the hosting provider, Cloudflare, and with BigCartel and Stripe for information submitted to the gift shop.
- As required by law (such as responding to a valid subpoena, warrant, audit, or agency action, or to prevent fraud).
- For research activities, including the production of statistical reports (such aggregated information is used to describe our services and is not used to contact the subjects of the report).
Gift Shop
We receive personal information from third party services when you purchase from the Museum of All Things Gift Shop. We do not sell or distribute this information to third parties.
Cookies and Other Browser Information
The MoAT's online services automatically capture IP addresses. We use IP addresses to help diagnose problems with our servers, to administer our website, and to help ensure the security of your interaction with our services.
Our Commitment to Children's Online Privacy
Out of special concern for children's privacy, The MoAT does not knowingly accept online personal information from children under the age of 13. The MoAT does not knowingly allow children under the age of 13 to become registered members of our sites. The MoAT does not knowingly collect or solicit personal information about children under 13.
In the event that The MoAT ever decides to expand its intended site audience to include children under the age of 13, those specific web pages will, in accordance with the requirements of the Children's Online Privacy Protection Act (COPPA), be clearly identified and provide an explicit privacy notice addressed to children under 13. In addition, The MoAT will provide an appropriate mechanism to obtain parental approval, allow parents to subsequently make changes to or request removal of their children's personal information, and provide access to any other information as required by law.
Additionally, EU residents under the age of 16 should not submit their personal data and we will delete any such data if we become aware of it.
About Links to Other Sites
This site contains links to other sites. The MoAT does not control the information collection of sites that can be reached through links from https://may.as/moat. If you have questions about the data collection procedures of linked sites, please contact those sites directly.
Your Rights and Choices in the EEA and Around the World
Where the EU General Data Protection Regulation 2016/679 (“GDPR”) applies to the processing of your personal data, especially when you access the website from a country in the European Economic Area (“EEA”), you have the following rights, subject to some limitations, against The MoAT:
- The right to access your personal data;
- The right to rectify the personal data we hold about you;
- The right to erase your personal data;
- The right to restrict our use of your personal data;
- The right to object to our use of your personal data;
- The right to receive your personal data in a usable electronic format and transmit it to a third party (also known as the right of data portability); and
- The right to lodge a complaint with your local data protection authority.
If you would like to exercise any of these rights, you may do so by mailing [email protected]. Please understand, however, the rights enumerated above are not absolute in all cases.
Where the GDPR applies, you also have the right to withdraw any consent you have given to uses of your personal data. If you wish to withdraw consent that you have previously provided to the MoAT, you may do so by mailing [email protected]. However, the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
The MoAT will undertake best efforts to provide these rights to people outside of the EEA as well.
How to Access, Modify or Update Your Information
The MoAT gives you the ability to access, modify or update your personal data at any time. On sites where you can create accounts (for example the Forum, Asset Library and Chat platform), you may log in and make changes to your login information (change your password), your contact information, your general preferences and your personalization settings. If necessary, you may also contact us and describe the changes you want made to the personal data you have previously provided by mailing [email protected].
If you wish to remove your personal data from the MoAT, you may contact us at [email protected] and request that we remove this information from our systems.
How to Contact Us
If you have any questions about any of these practices or the MoAT's use of your personal information, please feel free to contact us by email at:
We reserve the right to change this policy from time to time. If we do make changes, the revised Privacy Statement will be posted on this site. A notice will be posted on our homepage for 30 days whenever this privacy statement is changed in a material way.
This Privacy Statement was last amended on 2025-10-21.
Attribution and License
This Privacy Policy is licensed under Attribution-ShareAlike 4.0 International (CC BY-SA 4.0). It is a derivative work of:
- Godot Engine's Privacy Policy, used under Attribute-Share Alike 4.0 International (CC BY-SA 4.0). https://godotengine.org/privacy-policy/
- Software Freedom Conservancy's Privacy Policy, used under Attribute-Share Alike 4.0. https://sfconservancy.org/privacy-policy
- Red Hat's Privacy Policy for the Fedora Project, used under Attribution-Share Alike 3.0 Unported. https://fedoraproject.org/wiki/Legal:PrivacyPolicy
- The Free Software Foundation's Privacy Policy, used under Attribution-ShareAlike 4.0 International (CC BY-SA 4.0). https://www.fsf.org/about/free-software-foundation-privacy-policy
- WordPress.org's Privacy Policy, used under Attribution-ShareAlike 2.5 Generic (CC BY-SA 2.5). https://wordpress.org/about/privacy