Privacy & Accounts

Virtual contracts are game mechanics. Nobody owns the people represented by a profile, and being listed does not imply endorsement or participation.

What this game stores

Your broadcaster name, connected X identity and public profile details, game progress, contracts, Hall of Fame and gameplay transactions. Optional season participation, separate seasonal saves, final standings and commemorative titles are also stored. Account export includes these records, and account deletion removes your season participation and results. A private browser cookie keeps you signed in. Public handles, names and profile pictures can appear in the shared X galaxy; player names and scores appear on leaderboards.

X sign-in verifies your identity. The current OAuth1 flow discards the issued access token and secret after verification. Importing handles reads public profile pages without your X cookies. External profile pictures are loaded from X’s image host, which receives the image request.

Your controls

Open your broadcaster name to export your data, generate a recovery code, sign out other sessions, disconnect X or delete your account. Recovery codes are single-use: save them privately. Using one signs out all existing sessions. A typed handle cannot recover an account.

You may remove your own verified X profile from gameplay. This removes it from contracts, outposts and signing cards. Existing Hall of Fame achievements keep their bonus with an anonymous label. A hash of your X identity is retained to prevent re-importing the profile. This also happens when deleting an account with X connected. Disconnecting X alone preserves your game save and its public profile; it does not revoke authorization at X. You can revoke the app separately in X settings.

Retention

Game progress remains until you delete it. Browser sessions expire after one year or when revoked. Pending sign-in requests expire after ten minutes. Action retry identifiers are retained for seven days and pruned during gameplay. Signing cards expire after thirty days, with earlier removal when storage limits are reached. Periodic cleanup removes expired cards. Account deletion removes active account records and their signing cards; public profile removal also removes signing cards created by others for that profile.

Downloads and copies already shared elsewhere cannot be recalled by this game. Backup copies are separate from the active database and may retain older records until their backup retention expires. Production game backups run daily and before deployments; at most seven completed snapshots are retained. Restoring an older backup after public play requires reconciling deletions and profile exclusions made since that snapshot.

Analytics & advertising

Advertising is currently disabled. On the public website, self-hosted Umami measures visits, game sections, confirmed gameplay actions, help usage and approximate active time. It does not receive your game account ID, social handle, profile names, pictures, typed input, credentials or currency balances. Navigation URLs are replaced with fixed game-section paths; external referrers are reduced to their domain. Analytics uses no tracking cookies or cross-site account identifiers. The server processes request IP addresses and browser information to measure visits; this is separate from the game’s sign-in cookie. Local development is excluded. Do Not Track and Global Privacy Control are respected. Exit signals are best effort and cannot guarantee that every departure is recorded. Analytics records are retained for 180 days; up to seven daily database backups are kept on the server. Backups are not an off-site disaster recovery copy.

Analytics Preference This preference applies to this browser. Return to or reload the game after changing it.