Privacy Policy

1. What we collect

• Your email address (required). Used to send your verification code, updates about your house, and launch news. It is never shown in the city.
• What you choose to show publicly: the name on your door, your character's look, and your GitHub username if you add it. These, with your plot number, place in line, floors and join date, are visible to everyone in the city.
• Referrals: which invite link you joined with, so we can add a floor to the person who invited you.
• Payments: if you pay, your UPI app or PayPal handles the payment. We keep the transaction ID you submit, the amount and the date, and we see what our bank or PayPal statement shows (usually your name and UPI ID or PayPal email). We never see your card number, bank password or UPI PIN.
• Technical data: basic logs (IP address, browser, timestamps) kept by our hosting provider to run the site and stop abuse.

2. Why we use it

• To create your account, verify your email and give you a plot.
• To run referrals, upgrades and team towers.
• To email you about your account and about the MergeMate launch. You can unsubscribe from launch news at any time.
• To prevent spam, fake signups and fraud.

3. Who else handles it

We use a few providers to run the service. Each only gets what it needs:

• Vercel: hosting.
• Supabase: database and sign-in.
• Google: sending sign-in emails, and Google Analytics to count visits and signups.
• PayPal and our bank / UPI app: receiving payments.
• GitHub: only if you connect your GitHub account.

Some of these providers store data outside India, including in the United States.

4. Cookies and local storage

We use your browser's local storage to remember your sign-in, your graphics setting and what you last saw in the city. We use Google Analytics, which sets cookies to count visits, see which pages people use and measure signups. It doesn't receive your email or name. You can block it with any tracker blocker or Google's opt-out add-on. We do not use advertising cookies.

5. How long we keep it

We keep your account while the waitlist and product exist, or until you ask us to delete it. Payment records are kept as long as tax law requires, even after an account is deleted.

6. Your choices and rights

Email hardikhs2806@gmail.com to see a copy of your data, correct it, or delete your account and house. Wherever you live, including India (DPDP Act), the EU/UK (GDPR) and California (CCPA), we handle these requests within 30 days.

7. Children

MergeCity is not meant for children under 13. You must be 18 or older, or have a parent's permission, to make a payment.

8. Changes

If we change this policy in a way that matters, we will email you before it takes effect.

See also our Terms and Refund Policy.