Privacy & Accounts

Virtual contracts are game mechanics. Nobody owns the people represented by a profile, and being listed does not imply endorsement or participation.

What this game stores

Your broadcaster name, connected X identity and public profile details, game progress, contracts, Hall of Fame and gameplay transactions. Optional season participation, separate seasonal saves, final standings and commemorative titles are also stored. Account export includes these records, and account deletion removes your season participation and results. A private browser cookie keeps you signed in. Public handles, names and profile pictures can appear in the shared X galaxy; player names and scores appear on leaderboards.

X sign-in verifies your identity. The current OAuth1 flow discards the issued access token and secret after verification. Importing handles reads public profile pages without your X cookies. External profile pictures are loaded from X’s image host, which receives the image request.

Your controls

Open your broadcaster name to export your data, generate a recovery code, sign out other sessions, disconnect X or delete your account. Recovery codes are single-use: save them privately. Using one signs out all existing sessions. A typed handle cannot recover an account.

You may remove your own verified X profile from gameplay. This removes it from contracts, outposts and signing cards. Existing Hall of Fame achievements keep their bonus with an anonymous label. A hash of your X identity is retained to prevent re-importing the profile. This also happens when deleting an account with X connected. Disconnecting X alone preserves your game save and its public profile; it does not revoke authorization at X. You can revoke the app separately in X settings.

Retention

Game progress remains until you delete it. Browser sessions expire after one year or when revoked. Pending sign-in requests expire after ten minutes. Action retry identifiers are retained for seven days and pruned during gameplay. Signing cards expire after thirty days, with earlier removal when storage limits are reached. Periodic cleanup removes expired cards. Account deletion removes active account records and their signing cards; public profile removal also removes signing cards created by others for that profile.

Downloads and copies already shared elsewhere cannot be recalled by this game. Backup copies are separate from the active database and may retain older records until their backup retention expires. Production game backups run daily and before deployments; at most seven completed snapshots are retained. Restoring an older backup after public play requires reconciling deletions and profile exclusions made since that snapshot.

Advertising choices

Advertising is currently disabled. Publisher verification does not load Google advertising or consent scripts. Game account names, handles, progress and currency balances are not supplied to the advertising integration.

Advertising Privacy & Cookie Settings ↗

Read how Google uses information from partner sites. Advertising choices are separate from the anonymous Umami preference available in Privacy & Accounts.

Analytics, Heatmaps & Replays

On the public website, self-hosted Umami measures visits, navigation, time and scroll depth per screen, gameplay attempts and results, progression milestones, filters, help usage, sharing controls, account-control outcomes and performance. Typed searches, social handles, profile names, pictures, recovery codes, credentials and exact currency balances are not sent as event properties. A pseudonymous identifier derived from your internal game account links return visits for this website; it does not expose your account ID or social identity. This improves journey and retention analysis without cross-site account tracking.

We also collect click/scroll heatmaps and sampled visual session replays to understand how the interface is used. Replays mask all page text and inputs; account dialogs, sharing dialogs, profile identities, private controls and balances are excluded. The recording is a reconstruction of the interface and interactions, not a recording of your computer screen, microphone or camera. Recordings are limited to the first ten minutes per page load. Heatmaps may continue for the visit. Currently all eligible visits are sampled; browser privacy signals, opt-outs, blockers or network failures can prevent collection.

Navigation uses fixed game-section paths and removes query strings/fragments from the address before recording. Analytics retains only bounded UTM campaign tags for traffic attribution; unrelated query values are excluded. External referrers are reduced to their origin. Analytics uses no tracking cookies; the game sign-in cookie is separate. The server processes request IP addresses and browser information to measure visits. Local development and analytics layout previews are excluded. Do Not Track, Global Privacy Control and this browser’s analytics preference are respected. Exit signals are best effort. Event data is retained for 180 days, replays for up to 30 days and heatmaps for up to 90 days; storage budgets can remove older records sooner. Up to seven daily database backups may retain earlier records until rotation. Backups remain on the VPS.

Analytics Preference This preference applies to this browser. Return to or reload the game after changing it.