Privacy

Privacy Notice — CityPower

This Privacy Notice for CityPower (“we,” “us,” or “our”), operated by CityPower Team, describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

• visit our website or any page that links to this Privacy Notice;
• open or play the CityPower Telegram Mini App / bot;
• engage with us in related ways, including support, donations via Telegram Stars, or community channels.

CityPower is a third-party Mini App on Telegram. We are not affiliated with Telegram Messenger Inc. By using the Services you also accept Telegram’s Mini App Terms, Privacy Policy, and standard bot and mini app privacy policy. This Notice is part of our Terms of Use.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. CityPower Team is responsible for decisions about how personal information is processed in the game. If you do not agree with our policies and practices, please do not use the Services. Contact: Telegram support · in bot: /developer_info.

1. What information do we collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information you voluntarily provide when you register, play, contact support, or otherwise use the Services. That may include nicknames, messages, files you send, email (if you provide it), and complaint / appeal text.

Sensitive information. We do not process sensitive information.

All personal information you provide must be true, complete, and accurate. Notify us of material changes when relevant.

Information from Telegram

In Short: When you open the Mini App, Telegram may share profile and technical data described in MA Terms §4.

• Telegram user ID;
• public name, @username, profile photo;
• client language (IETF language tag);
• Telegram Premium status;
• theme color parameters;
• IP address;
• if launched from a chat: chat ID, type, title, username, and photo (if any);
• if launched from the attachment menu in a private chat: similar info about the chat partner (per Telegram rules).

After transmission, Telegram does not control our further processing of that data.

Information automatically collected / created by us

In Short: Some information such as IP address, device/browser characteristics, and gameplay logs is collected or created when you use the Services.

• Account: link between Telegram ID and internal user id, language, login platform;
• Game profile: character, level, stats, location, inventory, currencies, reputation, clan, faction, property, vehicles, quests, action history;
• Social data: in-game chats, reports, support tickets, appeals;
• Technical logs: IP, User-Agent, session cookies, UI language (citypower_locale), login times, client errors, anti-cheat signals;
• Referrals: invite code, click fact, bonus status;
• Purchases: Telegram Stars records (what was bought, when, invoice / payload), without card details.

We do not knowingly request full name, passport, or home address to play. If you send them to support yourself, they are processed only to handle your request.

2. How do we process your information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process information for other purposes with your consent.

We process personal information for reasons including:

• identifying the account (Telegram ID as a login equivalent), authentication, and saving progress;
• running gameplay, chats, clans, factions, PvP, and economy;
• accepting donations and granting purchases;
• moderating rules, investigating reports, and protecting the game from cheats, bots, RMT, and multi-accounts;
• improving server stability and fixing bugs;
• responding to support requests;
• measuring landing-page traffic (Yandex Metrika);
• complying with applicable law and Telegram platform rules.

By accepting the Terms of Use and using the Services, you consent to this processing where consent is required. Processing is also based on those terms and applicable law, including Russian Federal Law No. 152-FZ “On Personal Data” where it applies, and mandatory rules of your country.

We do not sell personal data to ad networks and do not use it for third-party advertising outside CityPower.

3. When and with whom do we share your personal information?

In Short: We may share information in specific situations described below and with the following categories of recipients.

• Telegram: Mini App auth, Stars, bot message delivery;
• Hosting / infrastructure: servers, databases, backups, CDN used to run the project;
• Analytics: Yandex Metrika on the public landing page only;
• Law / safety: when required by competent authorities or to protect users from serious threats;
• Business transfers: if CityPower Team transfers operation of the project (for example sale or reorganization of the service), information may move with the service under equivalent protections.

We do not share data with others without your explicit consent, except as above. Only what is needed for the specific purpose is shared with authorized recipients.

4. Do we use cookies and other tracking technologies?

In Short: We may use cookies and similar technologies to collect and store information needed for the Services.

We use:

• session cookies for login and CSRF protection;
• cookie / local storage for interface language;
• technical cookies required for stable site and Mini App operation.

The landing page may set analytics cookies (Yandex Metrika). You can refuse or clear cookies in browser settings, but some features may stop working (for example you may need to sign in more often).

5. How do we handle Telegram / social logins?

In Short: If you register or log in using Telegram, we receive certain profile information from that provider.

CityPower uses Telegram as the primary login. Profile information we receive may include your name, username, profile picture, and unique user identifier (Telegram ID), plus other data Telegram shares under its Mini App rules (see section 1).

We use that information only for the purposes in this Privacy Notice. We do not control and are not responsible for other uses of your personal information by Telegram. Review Telegram’s privacy notices and set preferences in the Telegram client.

6. Payments and Telegram Stars

In Short: Optional donations are processed by Telegram. We do not see card or wallet credentials.

Payments go through Telegram’s payment infrastructure. We keep only the purchase record and what was granted in-game. Payment disputes are first handled with us as the Mini App operator; Telegram’s role is described in MA Terms §3.

7. Is your information transferred internationally?

In Short: Your information may be transferred, stored, and processed in countries other than your own.

Regardless of your location, information may be processed on infrastructure of CityPower Team and of third parties listed in section 3 (including Telegram and hosting providers), which may be outside your country. If you are in the EEA, UK, Switzerland, or another region with strong data-protection laws, those countries may not always have equivalent rules. We take measures consistent with this Notice and applicable law to protect personal information.

8. How long do we keep your information?

In Short: We keep information as long as needed for the purposes in this Notice unless a longer period is required or permitted by law.

• account data is kept while the account is active;
• after a deletion request we delete or anonymize data within a reasonable time, usually within 30 days;
• some information may be kept in anonymized / aggregated form for up to 1 year after account deletion for security, anti-fraud, and dispute handling;
• technical logs, payment records, and moderation materials may be kept as required by law or to protect the service;
• public chat messages may remain with other players as screenshots or quotes that we do not control.

When we no longer have an ongoing need to process personal information, we delete or anonymize it, or securely isolate backups until deletion is possible.

9. Do we collect information from minors?

In Short: We do not knowingly collect data from or market to anyone under 18.

The Services are 18+ only. By using them you represent that you are at least 18. If we learn that personal information from a user under 18 has been collected, we will deactivate the account and take reasonable steps to delete such data. If you become aware of such data, contact support.

10. What are your privacy rights?

In Short: Depending on where you live, you may review, change, or terminate your account and exercise data-subject rights.

Subject to privacy-tpa, 152-FZ (where applicable), and other applicable law, you may:

• request information about your data and a copy of data linked to your account;
• request correction, blocking, or destruction of data processed unlawfully or incorrectly;
• request deletion of your account and related data (except what we may or must retain);
• withdraw consent by contacting us or stopping use of the Services (this does not affect lawful processing before withdrawal);
• lodge a complaint with a data protection authority if you believe your rights are violated.

Account information

To review, change, or terminate your account, contact Telegram support. Upon termination we deactivate or delete the account from active systems. We may retain limited information to prevent fraud, troubleshoot, investigate, enforce legal terms, or comply with law.

11. Confidentiality of correspondence

Support requests and any communication with the administration are treated as confidential unless you clearly state otherwise. We will not disclose such correspondence to third parties except as required by law. Do not publish private correspondence with CityPower Team representatives without their consent.

12. Security

We use organizational and technical safeguards: role-based access, HTTPS, limited admin access, logging of suspicious activity. Absolute security does not exist. If your account is compromised, contact support immediately and secure your Telegram.

13. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country, you may have the right to request access, correction, or deletion of personal information, or to withdraw consent. Rights may be limited in some circumstances by law.

Send requests to Telegram support. Confirm account ownership (Telegram). We reply within 30 days at most (or another period set by law). Removing your Telegram ID from our database equals account deletion. We may limit request frequency in case of abuse.

14. Controls for Do-Not-Track features

Most browsers include a Do-Not-Track (“DNT”) setting. No uniform standard for recognizing DNT signals has been finalized. We do not currently respond to DNT browser signals. If a standard we must follow is adopted, we will update this Notice.

15. Public information

Nicknames, clan emblems, messages in public chats, public profiles, and similar data are visible to other players. Information you choose to make public is not protected as secret by this Notice.

16. Do we make updates to this notice?

In Short: Yes, we update this notice as needed to stay compliant and accurate.

The current version is always here: https://www.citypower-mmo.com/privacy. Material changes may be announced in the channel or in-game when practical. Continued use after a new edition is published means you accept it.

17. How can you contact us about this notice?

• Support: https://t.me/CityPower_Support
• Channel: https://t.me/City_Power
• In bot: /developer_info
• Related docs: Terms · Game rules