NOT THE CITY! — Privacy Policy
Spin the planet. Save cities.
Summary
NOT THE CITY! does not require a named profile, email address, or social sign-in to play, and does not access contacts, precise location, camera, or microphone. Progress and settings stay on your device. When an enabled purchase or recovery service is used, it creates or reconnects a pseudonymous commerce account using a random install identifier and a private recovery code. Production builds show ads through AppLovin MAX and measure the game with PostHog, Tenjin and Google Analytics for Firebase where the choices described below permit it. Sentry provides crash and stability reporting. In the European Economic Area, the United Kingdom and Switzerland, Google's consent message asks for your consent first, and ads, attribution and analytics follow your answer. The game does not ask your age. Internal/staging builds keep live ads and production measurement egress disabled.
This policy describes version 0.23.0 and later, including its purchase-recovery feature set. It is not a cloud-save service: a purchase account does not back up your wallet or gameplay progress. A feature that is not enabled in your build does not send data merely because it is described here.
Data stored on your device
- Campaign, city-restoration, Stardust, cosmetics, settings, local daily results, replay data, and local purchase, entitlement, and refund records
- Random install identifiers and the private commerce recovery code; a limited pending event queue for analytics
- Your consent choices (including those stored by Google's consent message where it is shown) and your "Do not sell or share my personal information" choice
Data we collect
Consent and privacy choices
In the European Economic Area, the United Kingdom and Switzerland, Google's consent message (Google User Messaging Platform, an IAB TCF v2.2 consent management platform) appears once, when you leave the first result screen or when you first tap an ad offer, and never during play. Until you answer it, no ad is requested and no advertising or attribution SDK starts; analytics events wait on your device. After you answer, ads, attribution and analytics follow your choices, and analytics is sent only if you consented to storing and accessing information on your device. To change or withdraw your answer, open Settings → Privacy → Ad privacy options. Everywhere else there is no consent prompt: ads, attribution and analytics run from the first launch, and you can turn on "Do not sell or share my personal information" in Settings → Privacy at any time. That choice is passed to AppLovin MAX, which forwards it to the ad networks it mediates, so the networks receive your sale/share opt-out; it also stops Tenjin attribution. It does not stop PostHog analytics, which carries no advertising identifier. For Firebase it denies advertising storage, advertising user-data and personalization consent; analytics storage follows the analytics consent described below. You can also reset or delete your advertising ID, or opt out of ads personalization, in your Android settings.
Product analytics and attribution
PostHog receives a random app-install identifier, app/build and device context, your consent state, and fixed gameplay or commerce events. Tenjin receives install attribution data, approved events and MAX impression-level ad revenue, subject to the choices above. We do not ask for your real-world identity through these events, do not send an advertising identifier to PostHog, and do not send the private recovery code to these providers. Purchase verification and recovery processing are separate from measurement.
Google Analytics for Firebase
Version 0.23.0 and later uses Google Analytics for Firebase to measure app sessions and earned gameplay milestones, such as completing the tutorial, reaching campaign milestones and receiving rewarded-ad rewards. It receives a random install identifier, app-instance and device identifiers, app/build and device context, and advertising impressions with the ad network, format, ad unit and actual revenue in USD. Collection starts disabled and is enabled only when the regional analytics consent described above allows it; it excludes development builds, recognized emulators and listed internal test installs. Withdrawing consent disables collection. The sale/share opt-out denies advertising storage, advertising user-data and personalization consent while analytics storage follows the analytics choice. Where Google Play is linked to Analytics, Google may also measure purchases automatically; the game does not send a separate purchase-revenue event to Firebase. The private recovery code is not sent to Firebase.
Advertising and ad measurement
AppLovin MAX runs an auction among AppLovin and the ad networks it mediates in this game (Google AdMob, Unity Ads, Liftoff Monetize (Vungle), Pangle, InMobi, ironSource and Bigo Ads). MAX and these advertising partners may process advertising identifiers, IP address, device/app information, consent signals, ad interaction information, and ad-impression/revenue data to serve, measure, and limit ads, and, unless you opt out (or, in the regions above, do not consent), to personalize ads. The game forwards the mediation provider's ILRD payload to Tenjin only under the choices above.
Purchase verification and server records
Google Play processes payment. The app and Dizzywalk commerce service receive the product identifier, purchase token, order reference, purchase state, and entitlement information needed to verify and grant purchases. The service checks purchases with Google Play and receives cancellation, refund, and revocation notifications. Its database stores the pseudonymous account and install mapping, a hash of the recovery credential, purchase-token and order-reference hashes, product identifiers, granted Stardust amounts or entitlements, completion times, and refund/revocation history. We use these records for delivery, duplicate-grant prevention, eligible restoration, refund adjustments, and payment support. We do not receive payment-card data or your Google password.
Private recovery code
The optional recovery field accepts an account recovery code, not a personal message. The code acts like a password: the app sends it over HTTPS to the commerce service for authentication, and the account database stores its hash. Showing or copying it is your choice; copying uses your device clipboard. Keep it private because someone with the code can access the associated purchase account. Do not email it or post it publicly. On a fresh install, importing it reconnects the account; Restore purchases can then restore eligible non-consumable purchases. Existing local paid property cannot be merged with another account.
Recovery limits and refund adjustments
The service keeps purchase history, not a cloud wallet or cloud save. It does not back up current Stardust balances, spent Stardust, City upgrades, campaign progress, or other local gameplay progress. Recovery does not recreate consumed Stardust or promise cross-device consumable recovery. Verified pending or unconsumed purchases may be completed through the Play purchase flow. Refunds and revocations can remove an entitlement or adjust local Stardust, including an outstanding adjustment applied against later earnings.
Crash and stability diagnostics
Release builds send crash and stability reports to Sentry: the error type and message, the app release, build identifier and build environment, device model and operating-system version, a random per-session identifier, and whether each session ended normally, crashed, or ended without closing. A report about a failed purchase or an unexpected Stardust change can name the product identifier, the reason, and a rounded size of the change. These reports carry no advertising identifier, account identifier, recovery code, or payment details. Sentry receives the IP address of the network connection to deliver the request. We use these reports only to find and fix crashes and to monitor release stability.
Service delivery and request protection
The commerce service is hosted on Render. The service and hosting provider process network/request information, such as IP address, to deliver requests and limit misuse.
Advertising
Production builds can show app-open, interstitial, banner and rewarded ads through AppLovin MAX. App-open ads can appear on the loading screen at launch, an ad break can appear when returning after time away, and a banner can appear at the top of the screen for players who have not purchased. Ads run from the first launch; in the European Economic Area, the United Kingdom and Switzerland, ads start after you answer Google's consent message. Internal/staging builds disable live ads. A one-time Google Play ad-removal product can disable interstitial ads; reward availability and any specific offer can vary by build and region.
Third parties
We do not sell your data for money. Letting our advertising partners use data to personalize ads is a "sale" or "sharing" of personal information under some US state laws. You can opt out at any time with "Do not sell or share my personal information" in Settings → Privacy; the choice reaches AppLovin MAX and the networks it mediates. These providers process data for the features described in this policy, and advertising partners also process data under their own privacy policies.
| Provider | What they do |
|---|---|
| Google Play | checkout, purchase verification, purchase state, refunds, and revocations |
| Google (User Messaging Platform) | the advertising consent message in the European Economic Area, the United Kingdom and Switzerland |
| Render | hosting for the Dizzywalk commerce service and processing network/request information needed to deliver that service |
| AppLovin (MAX mediation and AppLovin ads) | advertising, ad delivery, ad measurement, and personalized advertising subject to your choices |
| Ad networks mediated by MAX: Google AdMob, Unity Ads, Liftoff Monetize (Vungle), Pangle, InMobi, ironSource and Bigo Ads | bidding on and serving ads in the game, ad measurement, and personalized advertising subject to your choices; each under its own privacy policy |
| Tenjin | mobile attribution, approved event measurement, and MAX impression-level ad revenue data, subject to your choices |
| PostHog | first-party product analytics (no advertising identifier), subject to consent in the European Economic Area, the United Kingdom and Switzerland |
| Google Analytics for Firebase | app sessions, earned gameplay milestones, ad-impression revenue and Play-linked purchase measurement, subject to the choices above |
| Sentry | crash and stability reporting for release builds |
Children
NOT THE CITY! is intended for adults 18 and older and is not directed at children. It does not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review the request.
Your choices & data deletion
Clearing the app's storage or uninstalling removes device-local data and credentials; it does not delete server purchase records or guarantee later recovery. For privacy questions or requests concerning the commerce account, purchase records, or the analytics and advertising providers, email the contact below with the app name and only the information needed to locate the record, such as a relevant Google Play order reference. Do not send a recovery code, purchase token, payment-card data, or Google password. A limited verification step may be needed before account data can be changed. Transaction records may need to be retained to provide purchased benefits, reconcile refunds, resolve payment issues, or meet applicable legal and platform requirements. Google Play and other providers have their own data-handling processes and retention requirements; no fixed retention period is promised here.
Changes
We will update this policy as the game changes and revise the effective date above. Material changes will be reflected in the app and store listings where required.
Contact
Privacy questions and deletion requests: mtime88@gmail.com.
DIZZYWALK RECORDS LLC, 930 S 4th St Ste 209, Las Vegas, NV 89101-6845, US.