Privacy Policy

What we collect when you play Empire Heights, why, who else sees it, and how to get it deleted.

Last updated October 29, 2026

What we collect

• Account: your email address, player name, a securely hashed password (we can't read it), or your Google account's email and ID if you sign in with Google. We also record when you agreed to these terms.
• Gameplay: your saved game (level, cash, items, progress), what you do in the multiplayer parts (fights, trades, gangs, rankings), and what you post in chat, forums, mail and profiles.
• Purchases: what you bought, the price, the date and Stripe's payment reference. Card details go straight to Stripe. We never receive or store your card number.
• Security and fair play: your IP address and a random ID stored in your browser, used to stop cheating, account sharing and multi-accounting, to protect accounts, and to keep the game fair (see Fair Play & Rules). We store them hashed where we can.
• Usage: basic information about visits (which game pages you open and when), used to keep the Game running well and to understand what players use. We use our own systems for this. There are no advertising trackers and we don't sell your data.
• Support: what you send us when you email us, report a player or appeal a decision.

Why we use it

To run your account and save your game (our contract with you), to process purchases, to keep the Game secure and fair, to fix problems and improve the Game (our legitimate interests), and to send account emails you need: confirming your email, password resets, important notices. We don't send marketing email unless you've agreed to it.

Cookies and browser storage

We use a small number of essential cookies: a session cookie that keeps you logged in and a security cookie that protects forms. If you open a friend's invite link, one more cookie remembers their invite code for 30 days so the invite counts when you sign up. The Game also stores your settings and a copy of your save in your browser (local storage), and caches game files so it loads fast and can work as an installed app. We don't use advertising or cross-site tracking cookies, so there's no cookie banner to click through.

Who else handles it

A few service providers process data for us, only to run the Game: Render (hosting and database, United States), Stripe (payments, plus tax as seller of record), Resend (account emails) and Google (only if you choose "Continue with Google"). Other players see your player name, profile, rankings and what you post publicly. We may share information if the law requires it, or to protect players from fraud or harm.

How long we keep it

We keep your account and game data while your account exists. When you delete your account, your account, cloud save and save backups are deleted. Messages you already sent to other players or posted publicly may stay visible. Email us if you want them removed too. Encrypted database backups roll off within 90 days. We keep purchase records as long as the law requires for tax and accounting, usually up to 7 years. Security logs are kept for a limited time.

Your choices and rights

• Delete your account any time in the Game: Account → Delete account.
• Ask us for a copy of your data, to correct it, or to delete it by emailing tarussmith77@gmail.com from your account's email address. We'll answer within 30 days.
• Depending on where you live (for example the EU, the UK or California), you may have extra rights, such as to object to or restrict some uses, or to complain to your data protection authority.

Children

The Game is not for children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has an account, email tarussmith77@gmail.com and we'll delete it.

Security

Passwords are hashed, connections are encrypted (HTTPS), sessions are stored only as fingerprints, and access to the database is restricted. No system is perfect. If a breach ever affects you, we'll tell you as the law requires.

Changes and contact

If this policy changes in a meaningful way, we'll tell you in the Game or by email. Questions or requests: tarussmith77@gmail.com.