The Undercity (“we”, “the game”) is a free, fictional browser-based crime strategy game. This policy explains what data we collect, why, and the control you have over it. The game is intended only for adults aged 18 or older.
Data we collect
- Account & identity. When you sign in with Google, Apple, or email + password, we receive your email address and an account identifier to create and authenticate your account.
- Age confirmation.You confirm once that you are 18 or older. We do not collect or store your date of birth — only the yes/no confirmation flag.
- Avatar photo (optional).If you choose to upload a profile image instead of a preset avatar, it is stored in a public game-avatars bucket and shown to other players. Uploading is optional — preset avatars are available.
- Gameplay data. Your in-game character, progress, virtual currency, items, businesses, messages you send in chat, and related activity.
- Preferences. Your chosen language.
- Device push token. On the iOS app, if you enable notifications we store a device push token to deliver iOS notifications. It is not used for advertising or cross-app tracking.
- Anonymous usage analytics. Aggregate, non-identifying page-view metrics to understand overall usage. This data is not used to track you across other apps or websites.
How we use it
- To run your account and the game’s features.
- To confirm you meet the 18+ age requirement.
- To keep the game fair and safe (anti-cheat, moderation of reported content).
- To understand aggregate usage and improve the game.
Service providers
We share data only with the infrastructure providers needed to operate the game:
- Supabase — database, authentication, and hosting of your account and game data.
- Google and Apple — sign-in (OAuth). We never see your password.
- Apple Push Notification service (APNs) — delivery of iOS push notifications when you enable them.
- Vercel — application hosting and anonymous, cookieless usage analytics.
We do not sell your personal data, and we do not use it for third-party advertising or cross-app tracking.
Data retention & deletion
We keep your data while your account is active. You can permanently delete your account at any time from Profile → Danger Zone → Delete account inside the game. Deletion immediately and permanently removes your account record and all associated game data; it cannot be undone. Chat messages are automatically pruned after 30 days.
Your rights
You may access, correct, or delete your data. The in-app deletion tool handles erasure directly; for any other request, contact us at rafaelrmlv@gmail.com.
Children
The game is restricted to users 18 and older and is not directed at children. We do not knowingly collect data from anyone under 18.
Changes
We may update this policy; material changes will be reflected by the “Last updated” date above.
Contact
Questions about this policy: rafaelrmlv@gmail.com.