Privacy Notice

• Your email address and password. Held by our authentication provider. The password is stored as a hash — we never see it, and neither does anyone with database access.
• Your display name and, if you join or found one, your clan and role.
• Your payments: amount, what it bought, when, and the payment reference from the payment processor. No card number, and no billing address, ever reaches our database — that data stays with the payment processor.
• Game history that follows from the above: contributions, spotlight slots, city ownership changes, join requests, and reports you file.
• Technical logs kept briefly by our hosting and rate-limiting providers, including IP address, for security and abuse prevention.

Your display name, your clan membership and role, the amounts you have contributed, and the cities your clan holds are visible to anyone. Your email address is not — it is never shown to other players and is not readable through the public API.

To run your account and the game (performance of our agreement with you), to take payment and keep the records the law requires us to keep, and to keep the platform safe — moderation, abuse prevention and rate limiting (our legitimate interest, and yours).

• Supabase — database, authentication and file storage (EU region)
• Vercel — hosting and application logs
• Lemon Squeezy, LLC — payments, invoicing and tax as merchant of record
• Resend — transactional email, when clan alerts are enabled
• Upstash — rate limiting
• OpenFreeMap / OpenStreetMap — map tiles, which your browser requests directly

We do not sell your data, and we do not run advertising or tracking analytics on the site.

The site sets one kind of cookie: the session that keeps you signed in. There are no advertising or analytics cookies, which is why there is no consent banner. Your theme choice is kept in your browser's local storage and never leaves your device.

Account and game data are kept while your account exists. Payment records are kept as long as tax and accounting law requires, which is longer than the account itself. Technical logs are kept for a short period by the providers above.

You can ask for a copy of your data, correction of it, or deletion of your account, and you can object to processing based on legitimate interest. Write to support@takethecity.lol and we will respond within 30 days.

Deleting your account removes your display name and disconnects you from your clan. Payment records and the game history that money produced — a city changing hands — are kept, without your name attached, because they are the ledger the game is built on and the record our accounts require.

If you are in the EU, the UK or Türkiye you may also complain to your local data protection authority.

The service is not for anyone under 16. If you believe a child has an account, tell us and we will remove it.