Privacy Policy

Your privacy matters to us. This policy explains what information we collect, how we use it, and how we protect it.

Information We Collect

When you use Masked City we may collect the following:

• Account information — your username, email address, and gender provided at registration
• Technical information — your IP address, browser type, device information, and how you navigate the site
• Security information — a random device ID stored in a cookie, and a fingerprint of your device's technical settings (see Fraud Prevention below)
• Transaction information — details of any purchases made through the game including credits and donator packs
• Profile information — any additional information you choose to add to your profile
• Communications — any messages you send to staff or submit via contact forms

Cookies

We use cookies to keep you logged in and remember your preferences across sessions. Two types are used:

• Session cookies — temporary, deleted when you close your browser. Used to keep you logged in while you play.
• Persistent cookies — stored on your device until deleted or expired. Used to remember your settings and recognize you on return visits.

One of the persistent cookies is a security cookie (mc_did): a random ID for your browser, kept for up to 2 years and also saved in your browser's local storage. It is strictly necessary to stop fraud and multiple accounts, is never used for advertising, and has no effect on what you see.

You can disable cookies in your browser settings however doing so may affect your ability to use the game properly.

Fraud Prevention and Multiple Accounts

To keep the game fair (one account per person, no farming or alt accounts) we record:

• The IP addresses you play from, with each address's network type (home, phone carrier or data center) and country, looked up in a database stored on our own servers
• The random device ID described under Cookies
• A fingerprint: a one-way hash of your device's technical settings (such as screen size, graphics card and time zone). We never read your files, contacts, location or anything on your local network

Together these show staff when several accounts are likely one person. They are used only to prevent fraud, cheating and multiple accounts. They are never used for advertising and never sold. Staff may check an address with an IP reputation service when investigating abuse.

How long we keep it: the IP and device history is deleted after 90 days. The address you signed up from and the one you last used stay with your account, and the logs of trades and transfers keep their address for fraud investigations. Scores linking accounts are kept while they are still relevant.

How We Use Your Information

We use the information we collect to:

• Run and maintain the game and your account
• Process payments and deliver purchased items to your account
• Send account related emails such as email verification and password resets
• Respond to support requests and resolve disputes
• Improve the game experience
• Enforce our rules and terms of service
• Comply with legal obligations

We do not sell your personal information to third parties. Ever.

Payments

Payments on Masked City are processed through Stripe. When you make a purchase your payment details are handled directly by Stripe and are never stored on our servers. You can review Stripe's privacy policy at stripe.com/privacy.

Information Sharing

We will never sell or rent your personal data. We may share information only in the following circumstances:

• When required by law or legal process
• To prevent fraud or protect the security of the game
• With payment processors strictly as needed to complete transactions
• In the event of a sale or transfer of the business

Data Security

We take reasonable steps to protect your personal information from unauthorized access, loss, or misuse. Your account password is stored as a secure hash — we never store or have access to your plain text password and will never ask you for it.

That said no internet transmission is completely secure. You are responsible for keeping your login credentials confidential.

Your Rights

You have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Opt out of any marketing communications at any time

To exercise any of these rights contact us at support@maskedcity.com.

Third Party Links

Masked City may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

Children

Masked City is not intended for children under the age of 13. If we become aware that a user under 13 has registered an account we will suspend it until the appropriate age is reached.

Policy Updates

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of the game after changes are posted constitutes acceptance of the updated policy.

Contact

Questions about this privacy policy? Email us at support@maskedcity.com