Last updated 7 October 2026
This describes exactly what City Stakes collects and why. It is written against what the code does rather than from a template.
You can explore both cities without an account. In that case the only things stored are:
localStorage: your progress record (places found, ground covered, photos taken, race ghosts), your quality, sound and caption preferences, the character you chose, where you last stood in each city, your game points from jobs and the day's challenges, the shops you have visited, which tips you have seen, and, when the server is unreachable, a local copy of the simulated economy. It never leaves your device unless a section below says so, and clearing site data removes it. Points from jobs are kept on your device only and are never sent to the server.| Google sign-in | Your Google account id, email address, display name and avatar URL. |
|---|---|
| Email sign-in | Your email address, and a short-lived code or link used to verify it. |
| Session | A cookie holding a random session token. It identifies your session and nothing else: it is not an advertising identifier. |
| Your play | The company you founded or joined, buildings held, bids placed, screens held, credit balance and ledger, shop orders in Bengaluru, photo competition entries, and your progress record. |
| Your name | Your display name is shown over your character to the players near you. |
| Uploads | Images you upload as advertising creatives, and frames you enter into the photo competition. Stored in Cloudflare R2 and served publicly from this site. |
When you are in front of an advertising surface in the city, that sighting is counted against the placement. What is stored is a per-placement, per-day tally and a count of distinct viewers, not a record of where you personally went.
A photo you take is made on your device. On a phone, sharing it opens your device's own share sheet; it is sent only where you choose to send it. Nothing is uploaded unless you enter it into the photo competition.
The game never uses your microphone. The street's voices are recordings made by a speech model in its own voices, not anyone's recorded or cloned voice, and the radio plays openly licensed recordings credited in Settings. Both are fetched from this site as you play.
This site uses Google Analytics 4 to understand how many people visit and which parts of the city they use. GA sets cookies and receives your IP address, from which it derives an approximate location; Google is the data controller for that processing. It is not used for advertising here, and no account details or uploads are sent to it. Content blockers prevent it from loading, and the site works identically without it.
Credit purchases are handled by Dodo Payments as merchant of record. Card details are entered on their checkout and never reach this site's servers. What is stored here is the fact of a purchase: which pack, the amount, a payment reference, and the resulting credit ledger entry.
Account and play records are kept while your account exists. An uploaded creative is removed when its screen is taken by another bidder or when you replace it. To see or delete what is held about you, email the address below and it will be actioned. Signing out clears your session cookie; clearing site data clears everything stored in your browser.
If you are in the UK, EU or California you have rights of access, correction, deletion, portability and objection. Use the same address: there is no separate process.
Privacy questions and data requests: hello@citystakes.com.