What we know about you.

Your email and a hashed password, so you can get back in. The handle, name and bio you choose — these are public inside the game, on your card, deliberately. What your character does: cash, energy, jobs, inventory, travel, the city you are from.

The hour you usually play is kept as a single rounded number, on the clock of your own city, and it is what your card’s skyline is lit by. It is not a log of when you were online.

No analytics scripts, no advertising, no third-party trackers, no selling or sharing data with anyone for their own purposes. If any of that ever changes it will be announced in the changelog with a way to opt out, not slipped in.

Supabase keeps the database and the passwords, and Vercel serves the pages. Both are processors acting for us. Nobody else sees your data.

You can rewrite or empty your bio, and you can ask for your account and everything attached to it to be deleted, permanently, with one email. There is no export queue and no retention period after that — the row is gone.

One, and only when you sign in: a session cookie that keeps you signed in. Plus a local preference for light or dark. Nothing that follows you around the web.