Privacy policy

This page explains what MetroLord ("we", "us") keeps about you, why, and who else handles it. We only collect what the site needs to work. We don't sell your information, and there are no ads or ad trackers.

Visiting the city

You can look around without an account. When you click a building we add one to that building's click count, which isn't linked to you. Your browser keeps a few small settings of its own (whether sound is on, whether you've seen the controls, and which buildings you clicked in the last half hour so a click only counts once). These stay in your browser and aren't sent to us.

Your account

When you make an account we keep:

• your email address, and your password stored in scrambled (hashed) form;
• your name, and your X handle if you give one;
• if you sign in with Google or GitHub, the name, email and profile picture they share with us. We never see your Google or GitHub password;
• for each sign-in, the IP address and browser it came from, so we can keep your account secure. A cookie keeps you signed in.

We email you a code to confirm your address. We don't send marketing emails.

Leasing and payments

Payments go through Stripe. Your card details go straight to Stripe and we never see them. We keep a record of each lease: the building, its length, the amount and when it was paid, so we can show your buildings and handle refunds.

What you put on your building

Signs, colours, links, billboards and posters are public: everyone who visits the city can see them. Pictures you upload are checked automatically by OpenAI's moderation service before they go up, and are scanned for child sexual abuse material by Cloudflare. We also keep the colours and signs you save on your account so you can reuse them.

Messages to us

When you use the contact page, we keep your message and the email to reply to, and forward it to our inbox.

Who handles your information

We use these services to run the site. Each one only gets what it needs to do its job:

• Convex, which stores the site's data and runs its server;
• Stripe, for payments;
• Resend, which sends our emails;
• Cloudflare, which stores and serves the pictures on buildings;
• OpenAI, which checks uploaded pictures;
• Google and GitHub, only if you choose to sign in with them.

We may also share information if the law requires it, or to report illegal content such as child sexual abuse material to the authorities.

How long we keep it

We keep your account while it's open. Payment records are kept for as long as tax and accounting rules require, even after an account is closed. Pictures taken down for breaking the terms are kept so they can be reported.

Your choices

You can change your name and X handle on your account page at any time. To get a copy of what we hold about you, correct it, or close your account and delete it, contact us from the email on your account and we'll take care of it.

Children

MetroLord isn't meant for children under 13, and we don't knowingly keep information about them. If you think a child has made an account, let us know and we'll remove it.

Changes and contact

We may update this policy; the date at the top shows when it last changed. Questions about your privacy? Get in touch.