The Undercity (“we”, “the game”) is a free, fictional browser-based crime strategy game. This policy explains what data we collect, why, and the control you have over it. The game is intended only for adults aged 18 or older.
Data we collect
- Account & identity. When you sign in with Google, Apple, or email + password, we receive your email address and an account identifier to create and authenticate your account. When you accept the Terms and the Community Rules, we keep which version you accepted and when.
- Age confirmation.You confirm once that you are 18 or older. We do not collect or store your date of birth — only the yes/no confirmation flag.
- Avatar.You pick one of the game’s built-in avatars. We no longer accept photo uploads, so no new image of you is collected. Photos uploaded before September 2026 are no longer displayed and can no longer be opened by anyone through the game.
- Who you looked at.When you open another player’s profile we record that you opened it, once per player, so the game can award achievements and show them that someone looked. Both accounts are named in that record.
- Gameplay data. Your in-game character, progress, virtual currency, items, businesses, messages you send in chat, and related activity.
- Preferences. Your chosen language.
- Device push token.On the iOS and Android apps, if you enable notifications we store a device push token (Apple APNs or Google FCM registration token) to deliver notifications to that device. In a web browser, if you turn notifications on, we store the browser's push subscription instead: an address on your browser maker's push service and the keys used to encrypt each notification to it. Neither is used for advertising or cross-app tracking, and turning notifications off removes it.
- Invites and device identifier. If you invite a friend or use an invite code, we record who invited whom. So that one person cannot invite their own extra accounts, the game gives each browser and each app install a random identifier, kept in a cookie, and remembers which accounts used it; it also remembers which accounts have held the same push token. These are compared only between an inviter and the friend they invited, are not used for advertising or cross-app tracking, and are deleted with your account.
- Page views. Each page you open inside the game is recorded against your account, so we can see which parts of the game people actually use. We store the address of the page only: query strings are stripped, and the pages that name another player (profiles and whispers) are recorded as the feature you used, not who you looked at. Repeat views of the same page within 30 seconds are dropped, and there is a daily limit per account. It is not sold, is not shared beyond the providers listed below, and is not used for advertising or cross-app tracking.
- Moderation records. If moderators act on your account we keep a record of it: the type of sanction, its dates, the reason and where it happened, the note the moderators wrote to you and their internal note, a quote of the message involved, and your appeal and our answer. Moderators can read the global chat, any message someone reported, and the sanction history of the players they review. They never see your e-mail address or your purchases.
How we use it
- To run your account and the game’s features.
- To confirm you meet the 18+ age requirement.
- To keep the game fair and safe (anti-cheat, invite abuse, moderation of the chat and of reported content), and to tell you by e-mail when moderators act on your account.
- To see which parts of the game get used, and improve it.
Service providers
We share data only with the infrastructure and payment providers needed to run the game:
- Supabase — database, authentication, and hosting of your account and game data.
- Google and Apple — sign-in (OAuth). We never see your password.
- Apple Push Notification service (APNs) — delivery of iOS push notifications when you enable them.
- Firebase Cloud Messaging (Google) — delivery of Android push notifications when you enable them.
- Your browser's push service (Google for Chrome and other Chromium browsers, Mozilla for Firefox, Apple for Safari, Microsoft for Edge on Windows) — delivery of notifications in the browser when you turn them on. The content is encrypted end to end for your browser, so the push service carries it without being able to read it.
- Vercel — application hosting and anonymous, cookieless usage analytics.
- Anthropic— automatic translation of chat. When you post in a public or gang room, or send a whisper, the text of that message and the street name of whoever wrote it are sent to Anthropic’s API so the line can be shown to players who read another language. Your account id, e-mail and everything else about your character stay here, and the text is not used to train models. A translation lives on the message it belongs to: delete the message and the translation stops being served with it, and both are cleared out with the message after 7 days. Anthropic also narrates the Big Score: when you pull the daily score, your street name, the name of that day’s target, whether it worked and the rarity of any item that dropped are sent so a short scene can be written. The scene is kept with that attempt and shown only to you; it never decides anything in the game. And Anthropic plays the police chief you can talk to from a jail cell: the lines you type to him, your street name, the charge you are held for, the time left on your sentence and a persuasion level taken from your character’s Cunning are sent so he can answer. The conversation is stored with your account so a reported one can be reviewed. He can shorten your sentence or name a price for it, but every number is set by the game, never by the model. Anthropic also plays Detective Barone, who can stop you when you collect from a business: the lines you type to him, your street name, the name and kind of that business, the size of that collection, the share he is asking for, a persuasion level taken from your Cunning and the names of the items you hold but are not wearing are sent so he can answer. That conversation is stored with your account in the same way, and every number in it is set by the game. Nothing else you write in the game is sent there.
- Resend — delivery of the e-mails the game sends: the notice when moderators act on your account (it goes to the address on your account), and the bug reports you file, which reach us with your e-mail address so we can answer.
- Stripe — payments for Gold bought on the website. Stripe takes your card or Pix details on its own checkout page; we never see them, and we receive only a record that the purchase happened.
- Apple and Google — payments for Gold bought inside the iOS and Android apps. The store takes the payment and tells us the purchase happened; we never see your payment details.
We do not sell your personal data, and we do not use it for third-party advertising or cross-app tracking.
Data retention & deletion
We keep your data while your account is active. Three things are cleared out on a schedule: chat messages after 7 days, and page views and in-game notifications after 30 days. The rest of your history — crimes, fights, casino hands, trades and cash transactions — is kept for as long as the account exists. So are moderation records, including the quote of a message used as evidence, which outlives the 7-day chat.
You can permanently delete your account from Profile → Danger Zone → Delete accountinside the game; if you lead a gang with other members, hand leadership over first. Deletion immediately and permanently removes your account record, your character and your game data, and it cannot be undone. Records that involve another player — market sales, raids, and gang log entries — are kept without your account id, so the other player’s history stays intact, and the moderators’ log of their own actions keeps the street name it acted on, without the account id.
Your rights
You may access, correct, or delete your data. The in-app deletion tool handles erasure directly; for any other request, contact us at rafaelrmlv@gmail.com.
Children
The game is restricted to users 18 and older and is not directed at children. We do not knowingly collect data from anyone under 18.
Changes
We may update this policy; material changes will be reflected by the “Last updated” date above.
Contact
Questions about this policy: rafaelrmlv@gmail.com.