Privacy

Last updated 1 September 2026

This describes exactly what City Stakes collects and why. It is written against what the code does rather than from a template.

If you never sign in

You can explore the whole city without an account. In that case the only things stored are:

In your browser only — your own progress record (places found, distance covered, photos taken), your quality and sound preferences, and, when you are offline or the server is unreachable, a local copy of the simulated economy. This lives in localStorage, never leaves your device, and clearing site data removes it.
Analytics — see below.
Presence, if you are connected to the live city: your position inside the fictional city is relayed to other players in the same district so they can see you walking about. It is a coordinate in Ilmara, not a real-world location, and it is not stored after you disconnect.

If you sign in

Google sign-in	Your Google account id, email address, display name and avatar URL.
Email sign-in	Your email address, and a short-lived code or link used to verify it.
Session	A cookie holding a random session token. It identifies your session and nothing else — it is not an advertising identifier.
Your play	The company you founded or joined, buildings held, bids placed, campaigns run, credit balance and ledger, photo competition entries, and your progress record.
Uploads	Images you upload as advertising creatives, and frames you enter into the photo competition. Stored in Cloudflare R2 and served publicly from this site.

Measured impressions

When you are in front of an advertising surface in the city, that sighting is counted against the placement. What is stored is a per-placement, per-day tally and a count of distinct viewers — not a record of where you personally went.

Analytics

This site uses Google Analytics 4 to understand how many people visit and which parts of the city they use. GA sets cookies and receives your IP address, from which it derives an approximate location; Google is the data controller for that processing. It is not used for advertising here, and no account details or uploads are sent to it. Browser "Do Not Track" and content blockers both prevent it from loading, and the site works identically without it.

Payments

Credit purchases are handled by Dodo Payments as merchant of record. Card details are entered on their checkout and never reach this site's servers. What is stored here is the fact of a purchase: which pack, the amount, a payment reference, and the resulting credit ledger entry.

What is never done

Your data is not sold, and not shared with advertisers.
No profile of you is built for ad targeting.
The advertisers depicted in the city are fictional placements — they receive nothing about you.

Keeping and deleting

Account and play records are kept while your account exists. Uploaded creatives are removed when their campaign ends or when they are replaced. To see or delete what is held about you, email the address below and it will be actioned. Signing out clears your session cookie; clearing site data clears everything stored in your browser.

If you are in the UK, EU or California you have rights of access, correction, deletion, portability and objection. Use the same address — there is no separate process.

Contact

Privacy questions and data requests: hello@citystakes.com.