Insane City is a free browser game. No account is required, there is no advertising and no third-party marketing. Signing in with Google is entirely optional (see section 6) and you can play the whole game without it. We keep a small first-party, aggregate metrics count so the public Open dashboard can show how the game is being used, and we use Google Analytics for aggregate usage understanding. We do not sell, rent or share personal information. This policy explains the limited data that moves, so you can decide for yourself.
The short version: we do not ask who you are. The dashboard shows aggregate counts only. If you play multiplayer, everyone connected sees the display name you choose, where you are in the world, and anything you type in chat. Treat all of that as public.
The Game writes a small number of keys to your browser's own storage. None of them leaves your device except where section 4 says otherwise, and none contains a name, email address, location or device fingerprint.
Clearing your browser storage removes all of these permanently, and the Game will ask you to confirm your age again.
Everyone who opens the site joins one shared world. While you are connected, our realtime server receives and relays to every other player in that world:
Chat is public. Messages are relayed to everyone connected at that moment. The server also keeps the most recent 20 messages in memory so that somebody joining mid-conversation can see what was said; that short history is sent to each new arrival. It is held in memory only, is never written to the metrics store or to disk by us, and is lost whenever the server restarts. Messages are stripped of control characters, collapsed to a single line, capped at 140 characters and rate-limited before relay.
Your realtime position, session information, display name and chat are held only in the server's memory for the length of your session. When you close the tab they are deleted. Please do not type anything into chat or the display-name field that you would not want other players, or us, to see, and never type personal information about yourself or anybody else. Other players can see, record or screenshot anything you send, and we have no control over what they do with it.
If someone sends abusive content, report it using the contact route in section 12 with the time and the display name.
When the Game opens, it sends the two random identifiers described in section 2 to our own arena service. Before writing anything, the service turns them into one-way keyed hashes and stores only those hashes, UTC dates, anonymous session counts, and aggregate interaction totals. It does not store raw identifiers, names, IP addresses, locations, device fingerprints, chat content or game coordinates. The count of chat messages sent is recorded; the content of chat messages is not, and never reaches the metrics store.
What is counted is gameplay: how many times a car was driven, a plane crashed, a pedestrian was hit, a missile fired, a coaster lap completed and so on, together with a small set of records such as the fastest anyone has driven. Every one of these is a number with nothing attached to it. Counts are added up in your browser and sent in batches roughly every twenty-five seconds, and once more when the tab closes, rather than one request per action. The public dashboard and its API expose aggregates only: current arena population, daily, weekly, monthly and all-time player counts, sessions, gameplay totals, records and daily history. No revenue, personal data or player-level records are collected or published. The hashed identifiers that make a day's player count distinct are discarded after about a month, once the longest window the dashboard reports has passed; only the resulting numbers are kept after that, and those are removed after 400 days.
Our hosting providers record standard technical logs when your browser connects, including your IP address, the time of the request and your browser's user-agent string. These are generated automatically by the infrastructure, are used only to operate and secure the service, for example to detect abuse or a denial-of-service attempt, and are retained for a short period by those providers before being discarded. We do not use them to build a profile of you.
The site is served by Vercel and the multiplayer server runs on Fly.io. Their own privacy policies govern that processing.
To keep the download small, the page loads its 3D engine from the jsDelivr CDN and its typefaces from Google Fonts. Requesting those files necessarily discloses your IP address to those providers. We send them no other information about you. If this concerns you, a content blocker will stop those requests and the Game will still run with fallback fonts.
Optional Google Sign-In. The Game offers an optional “Sign in with Google” button in the top corner. If, and only if, you use it, Google's Identity Services library is loaded from Google and you authenticate directly with Google. Google then returns your name, email address, profile picture and a Google account identifier to your browser, which we store as described in section 2 to keep you signed in and, in future, to offer account-specific features such as cosmetics. You can play the entire game without ever signing in, and signing out removes the stored details. Your use of Google Sign-In is also governed by Google's own privacy policy.
Analytics. We use Google Analytics to understand aggregate, anonymised usage of the site, such as visits and which features are used. It loads only after you accept the Terms, IP addresses are anonymised, and it is not used to build a cross-site advertising profile. Google processes this data as described in Google's privacy policy. A content blocker will stop these requests and the Game will still run normally.
Optional support and payments. Signed-in players may optionally support the game. If, and only if, you open the supporter checkout, an embedded checkout is loaded from our payments provider Polar, which acts as merchant of record and processes any payment under Polar's own privacy policy and terms. Your card and billing details are handled by Polar and never reach us; we may later receive confirmation that a supporter contribution was made in order to provide supporter features. Supporting is entirely optional and the Game remains free to play if you do not.
Where the UK GDPR or EU GDPR applies to you, we rely on our legitimate interests in operating, securing and understanding usage of a free service that holds no accounts, and on your consent where you choose to set a display name or send a chat message. You may withdraw that consent at any time by clearing it and disconnecting. We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
Insane City is intended solely for people aged 18 or over. It is not directed at children, and we do not knowingly collect or store personal information from anyone under 18. Access requires an affirmative confirmation of age, but because there are no accounts we have no way to verify it, and we make no representation that it prevents access by a minor. Parents and legal guardians are responsible for supervising the internet use of minors in their care.
If you believe a person under 18 has used the Game or has shared personal information through the display-name field or chat, contact us using section 12 and we will remove what we hold and terminate that access.
Because we hold no accounts and retain only keyed anonymous identifiers, there is generally no practical way to connect an aggregate figure back to a person, which also means we may be unable to identify your data in order to action a request. You can clear the local identifiers from your browser at any time, which is the most complete deletion available.
If you are in the EEA, the UK, or a US state with a comprehensive privacy law, you retain your rights of access, correction, deletion, portability and objection over any data we do hold, and you may lodge a complaint with your local supervisory authority. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, we do not engage in targeted advertising, and we do not process sensitive personal information.
The site is served only over HTTPS. Player input arriving at the multiplayer server is validated, sanitised, length-limited and rate-limited before it is relayed. No system is perfectly secure and we cannot guarantee absolute security, but we hold no sensitive data that would be valuable to an attacker. Our providers operate infrastructure in several countries, so data in transit may be processed outside your own; where required, those transfers rely on the providers' own standard contractual clauses.
If this policy changes materially we will update the version and date at the top of this page, and where the change is significant you will be asked to confirm acceptance again the next time you open the Game. Continuing to play after a change means you accept the updated policy.
Questions about this policy, abuse reports, or a request relating to your data can be sent to the site operator via the repository at github.com/sanket-kogekar/insane-city.