Privacy policy · Shopopolis

Shopopolis ("the game") is made by Aland Shahab, Sulaymaniyah, Kurdistan, Iraq ("we", "us"). This policy says what the game collects, why, who can see it, how long we keep it and how to delete it. Questions: support@shopopolis.app.

In short

We collect what the game needs to run on our server: an account, your shop, your trades and your progress.
We collect play stats and crash reports to fix bugs and balance the game. In the EU, the EEA, the UK and Switzerland we ask you first; everywhere you can turn them off in Settings.
If you choose to save your account with an email address, Apple or Google, we keep that sign-in.
We don't show ads from ad networks, don't track you across other companies' apps or websites, and don't sell your data.
You can delete your account in the game: Settings → Your account → Delete.

What we collect and why

What	Details	Why
Your account	An account id and a random username that our server makes the first time the game connects. A random id that the game makes and keeps on your phone (the "device id") signs you in. An account code (8 letters and digits) that our server makes when you open Settings.	To keep your game on our server and sign you in. The account code lets you ask us to delete your account on the web.
A sign-in you choose to add	Email: your email address and a one-way hash of your password (we can't read your password). Apple: an account id from Apple. We don't ask Apple for your name or email address. Google: an account id from Google and the email address of your Google account. We don't ask Google for your name or photo.	So you can play the same shop on a new phone.
Your shop	The shop name you type (it has to pass a word filter, because other players see it), your business, level, stock, coins, gems, upgrades, staff, jobs, season and goal progress, your home town, and when you started and last played. The game makes up town names; you don't type them.	To run the game.
Trades and the neighbourhood	Your stall listings, orders, contracts and deliveries; a record of every change to your coins and gems; the likes you give and get; the preset messages you send; your weekly board scores; the neighbourhood you're in and its invite code.	To run the market and the neighbourhood.
Play stats	Events such as opening the game, creating a shop, levelling up, tutorial steps, building, opening a second business, claiming rewards, buying something and watching an ad, with the app version, the platform (iPhone or Android) and how many times you've opened the game.	To understand how the game is played and to balance it.
Crash and error reports	The error message, a technical stack trace, the app version and the platform. The game keeps up to 20 on your phone until they're sent.	To find and fix bugs.
Purchases	Once in-app purchases are on: what you bought, from which store, the store's transaction id, what we gave you, and the store receipt, which our server checks with Apple or Google. We never see your card or bank details.	To give you what you paid for, once, and to deal with refunds.
Reports and blocks	When you report a player: who reported whom, both shop names, the neighbourhood and the reason. The list of players you've blocked.	To keep the game safe, and to hide players you've blocked.
Connection data	Like any internet service, our server and our hosting provider see your IP address when the game connects. Our server doesn't keep a log of the addresses that connect to it. We don't use your IP address to work out where you are.	To deliver the game and protect the server from abuse.

Play stats and crash reports are linked to your account id. They go to our server, and our server passes crash reports on to Sentry (see "Who else handles your data"). To stop them, turn off Settings → "Send play stats and crash reports".

Where we ask first. If the region set on your phone is in the EU, the EEA (Iceland, Liechtenstein, Norway), the UK or Switzerland, or one of their territories where the same rules apply, the game asks the first time you open it whether to send play stats and crash reports. Until you answer it collects and sends none. It also asks if it can't read the region. The region is the one in your phone's settings (on an iPhone: Settings → General → Language & Region → Region; on Android, the country of the phone's language setting). We don't use your IP address or location to decide. Everywhere else they're on until you turn them off.

We don't collect your location, contacts, photos, camera, microphone or your phone's advertising id. There's no open chat: players can only send preset messages, such as "Thanks!".

What's kept on your phone

Your settings: sound, the play stats switch (and whether you've answered the play stats question), whether you've finished the tutorial, which of your businesses is on screen, and how many times you've opened the game.
The device id. On an iPhone it's kept in the Keychain, so it can stay on the phone after you delete the game and signs you back in if you reinstall it.
Crash reports waiting to be sent.

What other players can see

Your shop name, business, level, likes, followers, and whether you're online now.
Your town's name and your shops on the neighbourhood map.
If they step into your shop: how it looks inside (its size, stations, colours, decorations and staff), its counter upgrades and its star rating.
Your stall listings, orders and contracts, with your shop name.
Your weekly board scores (coins earned, likes, deliveries), with your shop name.
Preset messages you send them, and notices such as "Sunny Café bought 3 Bread".

Other players' games get only the things above, from our server. They can't read the rest of your shop's record (such as your stock, coins, gems or purchases) or your account (such as a linked Apple or Google id).

A player who blocks you no longer sees your shop name, stall, orders or messages.

Who else handles your data

Alwyzon runs our server and database in Austria (Vienna, in the EU). They store the data for us and may not use it for anything else.
Apple and Google. When you buy something, your app store takes the payment, and our server sends it the receipt to check. When you sign in with Apple or Google, they confirm your account to us. Their own privacy policies cover what they do with your data.
Sentry (Functional Software, Inc., which stores the data in the USA) receives crash and error reports from our server so we're alerted to new bugs: the error message, the stack trace, the app version, the platform and your account id. It doesn't receive your IP address, because the reports come from our server, not your phone, and our Sentry account is set not to store IP addresses and to scrub sensitive data from reports. Sentry keeps them for up to 90 days and, under its data processing agreement with us, may not use them for anything else. This means your crash reports leave the EU and the UK for the USA.
Nobody else. We don't sell or share your data with advertisers or data brokers. If we add an ad network, we'll update this policy first and ask for your consent where the law requires it.

How long we keep it

Your account and game: until you delete your account. If you don't play for 14 days, your town moves out of its neighbourhood, but your account stays. If you don't open the game for 2 years, we delete your account automatically, in the same way as if you'd deleted it yourself (see "Deleting your account"). An account that never opened a shop is deleted 2 years after it was made.
Play stats, crash reports and other server logs: 14 days. Our server deletes older log entries every day. Our database's own log is set up to leave players' data out. The copy of a crash report that Sentry receives is kept for up to 90 days.
Reports about a player: 90 days, so we can deal with repeat problems, then they're deleted automatically.
Purchase records: while your account exists, with your account. When your account is deleted, we delete the store receipt and the link to your account, and keep only what was bought, from which store, when, and the store's transaction id, linked to no one, for refunds and fraud checks, as long as tax and accounting law requires (up to 10 years).
Backups: deleted data can stay in backups until they expire, at most 14 days.
Notices (such as "your stall sold"): until your game has shown them.

Deleting your account

In the game: Settings → Your account → Delete. This deletes, straight away:

your account, the device id link, your email address and password, your Apple and Google sign-ins, and your account code;
your shop, home town, coins, gems and their history, likes, blocks, follows, weekly board scores, notices and the game's record of your purchases;
the store receipts of your purchases, and the link between your account and the store's record of each purchase;
your place in the neighbourhood, and your stall listings, orders and contracts;
reports you filed.

What stays:

reports other players made about you, until they're 90 days old;
your past share of a neighbourhood goal, as a number that no longer points to you;
server logs (14 days) and backups, until they expire;
for each purchase, what was bought, from which store, when, and the store's transaction id, linked to no one (see "How long we keep it"), and what Apple or Google keep about your purchases under their own policies.

Deleting the game from your phone doesn't delete your account.

If you can't open the game, go to shopopolis.app/delete or email support@shopopolis.app and give your account code, which the game shows in Settings → Your account, with your shop name and town name. We check that the code belongs to that account, then delete it in the same way. If you don't have the code, we may ask for more details to check the account is yours.

Your rights

Depending on where you live (for example the EU, the UK or California), you can ask us for a copy of your data, to correct it, to delete it, or to stop using it for play stats. Email support@shopopolis.app. We'll answer within one month. You can also complain to your local data protection authority.

Legal bases (EU, EEA, UK and Switzerland). We use your account, shop, trades and purchases to run the game you asked to play (performance of a contract). We send play stats and crash reports only with your consent, which you can withdraw at any time in Settings. We handle reports, blocks and connection data to keep the game safe and protect our server (our legitimate interests). We keep purchase records because tax and accounting law requires it (legal obligation).

Data leaving the EU. Our server is in the EU. Crash and error reports go to Sentry in the USA, under the Standard Contractual Clauses in Sentry's data processing agreement.

Children

Shopopolis is for a general audience. It isn't directed at children under 13 (or the higher age set by the law where you live, which is up to 16 in some EU countries), and we don't knowingly collect data from them. If you think a child under 13 has given us data, email support@shopopolis.app and we'll delete it.

Security

Release builds of the game talk to our server only over an encrypted connection (https). Passwords are stored only as a one-way hash. Only the people who run the game can reach the server and database.

Changes

If we change this policy, we'll update the date at the top. For important changes, we'll tell you in the game before they take effect.

Contact

Aland Shahab, Sulaymaniyah, Kurdistan, Iraq, support@shopopolis.app.