Privacy policy
You can play without giving us your name, email or phone number. Your city is saved on your own device. We count anonymous play data only if you say yes. Separately, unless you have said no, we add one to a count of how many times the game is opened each day, with no id and nothing stored on your device. You can delete everything we hold about you from the game's Privacy page at any time.
Who we are
Naijapolis is a city-building game for phones and computers at naijapolis.com. In this policy, "we" means the people who run Naijapolis. Write to us at [email protected].
What we collect, and why
| When | What | Why |
|---|---|---|
| You just play | A random id made on your device (not linked to your name). Your saved cities and settings stay in your browser's storage on your device. | So the game remembers you, and so you can share, invite and use cloud save if you choose to. |
| You open the game (and have not said no) | One is added to the number of opens for that day, with whether you are on a phone or a computer and whether it was opened from the home screen or a browser. No id, no IP address and nothing stored on your device. Nothing is counted if your browser sends Do Not Track. | To see how many times the game is used and whether it is growing. It cannot tell one person from another. |
| You allow anonymous play data | Short events such as what kind of thing you built, how long a session lasted, milestones reached, screen size (small, medium, large), graphics quality, how long the game took to open, a short error message (never an address or a name) if the game fails, and once a year of play the size, mood and approval of your city. They are sent with your random id. | To see how many people play and where the game is too slow, hard or confusing. We never collect your IP address with this data. |
| Google Analytics, if switched on | A few game events, sent to Google only after you say yes. Ad personalisation and Google signals are off. | The same reasons as above. |
| Ads on sponsor boards | A sponsor board is chosen using only your city's size, the time of day and whether you are on a touch screen. Views and clicks are counted against your random id to stop the same ad being shown too often and to stop fraud. | Ads are how the game is paid for. Every ad is labelled "Sponsored" and reviewed by a person first. |
| You sign in (optional) | Your email address, through Google or a six-digit code we email you, linked to your random id, and a copy of your city on our server. | So you can get your city back on another phone. |
| You share your city or a place (optional) | The layout, a title, and the figures worked out from it (people, stars, points). It gets a public id that is not your own. Other players can see and visit it. | To let other players visit, invest, trade and compete. |
| You invite friends, make treaties, invest or co-build | Invite codes, which friend joined and whether their city counted, offers and agreements between cities, and short-lived room codes. For invites the server reads the friend's city layout to check it is real. | To run these features and to stop rewards being farmed. |
| You are a sponsor or partner | Name, company, email, a hashed password, campaigns, pictures, orders and payment references. Card details go to Paystack; we do not see or store them. | To run campaigns, take payment and send receipts. |
| You use the site | Your network address is used for a short time to limit abuse (for example too many sign-in attempts). Our web host and Cloudflare may keep ordinary access logs. | Security and keeping the game running. |
We do not sell your data. We do not use it to build advertising profiles.
Cookies and device storage
The game does not set advertising cookies. It keeps your saved cities, settings and random id in your browser's storage on your device. Cloudflare, which delivers the site, may set cookies that are strictly needed for security, and counts visits to the front page without cookies. If you use Sign in with Google, Google may set its own cookies on its sign-in screen.
Who else handles your data
- Vultr runs our server, in Johannesburg, South Africa.
- Cloudflare delivers the site and protects it from attacks.
- Google provides Sign in with Google, and Google Analytics if it is switched on and you agreed.
- Paystack takes online payments from sponsors.
- Resend sends our emails (confirmations, password resets and sign-in codes).
Some of these companies handle data outside Nigeria. We use them only to run the game and ask them to protect it.
How long we keep it
- Anonymous play events: up to 400 days.
- A shared city: removed after 60 days without an update. A shared place: 120 days.
- Cloud saves: removed after 400 days without an update.
- Sponsor accounts, orders and payment records: while the account is open and as long as the law asks us to keep payment records.
- Abuse-limit counters: minutes to days.
Your choices and rights
- Say no to analytics. Open the game's Privacy page and switch off sharing. We also respect your browser's Do Not Track setting.
- Delete everything. On the Privacy page choose Delete my data. It removes the analytics we hold under your random id, your shared city and place, rooms, investments, treaties, invites, cloud save and account link. Clearing your browser's storage removes the copy on your device.
- Ask us. Email us to see, correct or delete personal data we hold, such as a sponsor account or an email address. You have rights under the Nigeria Data Protection Act 2023, and you may complain to the Nigeria Data Protection Commission if you are not happy with how we handled your request.
Children
Naijapolis is a game for a general audience. We do not knowingly collect personal information from young children. If you are young, please ask a parent or guardian before you give anyone your email address.
Changes
If we change this policy in a way that matters, we will change the date at the top and say so in the game. The version on this page is the current one.