$100K MRR Town: Privacy Policy

Effective September 23, 2026

$100K MRR Town (“we”, “us”) is a pixel-art city game where founders put their real startups on the map. This policy explains what we collect when you use 100kmrr.town and the game at game.100kmrr.town, why, and the choices you have.

1. What we collect

• Account details. If you sign up with email: your email address, a name if you give one, and your password, stored only as a secure one-way hash, never in plain text.
• X (Twitter) details. If you sign in with or connect X: your X user ID, @handle, display name and profile photo URL. We never see your X password and we cannot post for you.
• Your startup listing. The startup name, website, one-line description and sign icon (your site's favicon, your X photo or a pixel icon) that you enter when claiming a garage.
• Game progress. Your coins, level, upgrades, decorations, team, goals and the look of your founder character.
• Reports. If you report a startup, we store which startup you reported and, if you are logged in, your account ID.
• Technical data. Our hosting provider may keep standard server logs (such as IP address, browser type and time of request) for security and troubleshooting.
• Purchases. If you buy gems, we store the payment ID, the pack you bought, the amount and the date, so we can add the gems to your account and help with any problems.

We never see or store your card or bank details. Payments are handled entirely by our payment provider, Dodo Payments. We do not use advertising or cross-site tracking cookies.

2. What is public

The city is a public map. Anyone visiting the game, signed in or not, can see your startup's name, website link, description, sign icon, building size, level, user count, your connected X @handle and profile photo, and the inside of your garage (furniture, decorations, team and founder character). Your email address, password, coins and other account details are never shown to other players.

3. How we use your information

• To create your account, sign you in and keep you signed in.
• To save your game and let you continue on any device.
• To show your startup on the shared city map and on leaderboards.
• To keep the city safe: reviewing reports and removing listings that break our Terms.
• To contact you about your account if we really need to (for example, a security issue).

4. Services we rely on

• MongoDB (database hosting) stores accounts, saves and startup listings.
• X handles “Sign in with X”. Their privacy policy applies to what you do on X.
• Google's favicon service fetches your website's icon. Your website's domain name is sent to Google for this.
• Resend sends account emails (the welcome email, password reset links and security notices) to the email address on your account.
• Dodo Payments processes gem purchases as our merchant of record. When you buy gems you give your payment and billing details directly to them, and their privacy policy applies.
• YouTube and Loom host the demo videos in the Demo Cinema. A video only loads from them when you press play (YouTube in its privacy-enhanced mode), and then their privacy policies apply.
• Our hosting provider runs the website and may process server logs.

We do not sell your personal information.

5. Cookies and local storage

• mrr_session: an essential cookie that keeps you signed in for up to 30 days.
• mrr_x_oauth: a temporary cookie (10 minutes) used only while you sign in with X.
• mrr_ref: set only if you open a founder's invite link. It remembers who invited you for 30 days so you both get the invite reward when you claim a garage.
• Local storage: only your sound on/off setting. Your game, coins and gems are stored on our servers, not in your browser.

6. How long we keep data

We keep your account, save and listing until you delete your account. You can do this at any time in the game: open your profile and choose Delete account. This immediately deletes your account, your saved game and your startup listing, and frees your garage spot. Copies in backups are removed within 30 days. Reports may be kept for up to 12 months for safety reasons.

7. Your rights

Depending on where you live (for example under the GDPR in the EU/UK), you may have the right to access, correct, export or delete your personal data, and to object to or restrict how we use it. You can edit your startup and delete your account inside the game; for anything else, send a message to @georgevichdev on X. You can also complain to your local data protection authority.

8. Children

$100K MRR Town is not directed at children. You must be at least 16 years old to create an account.

9. Security

Passwords are hashed with bcrypt, sessions use signed, HTTP-only cookies, and the site is served over HTTPS. No system is perfectly secure, so please use a unique password.

10. Changes

If we change this policy we will update the date at the top, and for important changes we will let you know in the game before they apply.

11. Contact

Questions about privacy? Send a message to @georgevichdev on X.