Privacy Policy

Last updated: 25 October 2026

Browser City Tycoon (“the game”, “we”) is a free browser game operated by Daniel Zeszut, an individual based in Poland. This policy explains what personal data the game uses, why, and what rights you have. Questions: support@browsercitytycoon.com.

1. What we collect

Account data. When you open the game we create an anonymous guest account (a random ID). If you choose “Sign in with Google”, Google gives us a unique account identifier and the email associated with the account. We do not show your email to other players.
Profile. The nickname and country flag you choose. These are public: they appear on leaderboards.
Game data. Your cloud save (your city and company), your company name, and your leaderboard scores: net worth, level, population, company age and daily-challenge results.
Invite a friend. Your account gets a short referral code, which is included in links you share from the game. If someone joins through your link, we store which account invited them, when they joined, their nickname and flag (if they set one), whether they met the reward conditions (play time and a first station or vehicle), and which rewards were collected. People who joined through your link appear in your Friends list with their nickname and flag; if you joined through a friend’s link, your nickname and flag appear in theirs. We do not store IP addresses for this feature.
Sharing. The share text and picture are created in your browser. They are only sent where you choose to share them (for example a social network or messaging app), and that service’s own privacy policy then applies.
Website analytics. We use Cloudflare Web Analytics to count page views and visits. It does not use cookies and does not track you across other websites.
Technical data. Like any website, our hosting and Google services process your IP address, browser type and basic request data to deliver the game and keep it secure.
On your device. The game stores your sign-in session and settings (sound, options, cookie choices) in your browser’s local storage. If you open an invite link, the referral code is kept there for up to 30 days, until your new account is linked to it.

Please do not use your real name or any personal details as a nickname.

2. Why we use it (legal bases)

To provide the game, your account, cloud saves and leaderboards, which is necessary to perform our service to you (Art. 6(1)(b) GDPR).
To run the invite-a-friend feature and pay its rewards, which is part of the service you use (Art. 6(1)(b) GDPR).
To keep the service secure, prevent cheating and referral abuse, and fix problems, which is our legitimate interest (Art. 6(1)(f) GDPR).
To understand how many people visit the website, using cookie-free analytics, which is our legitimate interest (Art. 6(1)(f) GDPR).
For advertising cookies, only if and when ads are enabled, and only with your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time in Cookie Settings.

3. Who else is involved

Google Firebase (Authentication and Cloud Firestore) stores accounts, saves, profiles, scores and referral records. Provider: Google Ireland Limited / Google LLC.
Cloudflare hosts the website, provides DNS and security, runs the server that checks invites and rewards (Cloudflare Workers), and provides Cloudflare Web Analytics.
Google Fonts and Google servers deliver fonts and the Firebase code to your browser.
flagcdn.com serves the small country-flag images. Your browser requests them directly, so that service sees your IP address.
Advertising partners (for example Google AdSense) may be added in the future. This policy will be updated before ads are shown.

Some of these providers may process data outside the European Economic Area, using safeguards such as the EU Standard Contractual Clauses. We do not sell your personal data.

4. How long we keep it

We keep your account, save and scores for as long as the account exists. Referral records are kept for as long as the inviting account exists, so that rewards are not paid twice. Guest accounts that are not used for a long period may be deleted. You can ask us to delete your data at any time (see below).

5. Your rights

Under the GDPR you may ask for access to your data, correction, deletion, restriction, a portable copy, or object to our processing, and you may withdraw consent at any time. To exercise a right, email support@browsercitytycoon.com with your nickname so we can find your account; we may ask you to confirm you own it. You may also complain to the supervisory authority: in Poland, the President of the Personal Data Protection Office (UODO, uodo.gov.pl), or the authority in your own country.

6. Children

The game is not directed at children under 16 and we do not knowingly collect their data. If you think a child has given us personal data, contact us and we will delete it.

7. Security

Data is transmitted over HTTPS and protected by access rules so that only you can read or change your own save. No online service is perfectly secure, so please take care with what you share.

8. Advertising

At the time of writing the game does not show advertising. If we add full-screen or rewarded ads, we will ask for your consent where the law requires it and update this policy first.

9. Changes

We may update this policy. The date at the top shows when it last changed.