Privacy Policy

1. Who this policy applies to

This Privacy Policy applies to visitors, registered account holders, players and people who contact Capora City support. For privacy questions, contact support@caporacity.com. Where UK data-protection law applies, Capora City acts as the controller for personal data it determines the purposes and means of processing.

2. Information we collect

Account and identity information

• email address, email-verification status and encrypted/hashed password credentials;
• account identifiers, character names, profile images and profile information you choose to provide;
• account status, staff roles, permissions and support history where relevant.

Gameplay and community information

• character progression, XP, rank, cash, virtual currency, Credits, inventory, vehicles, families, achievements, missions, Seasons, cooldowns, transactions and other game state;
• messages, forum posts, live chat, support tickets, profile content and other information you submit through community features;
• gameplay events used for rankings, statistics, security, economy integrity and customer support.

Technical and security information

• IP address, session identifiers, login time, activity time, browser/user-agent information and device/client identifiers used by the Game;
• security signals relating to suspected duplicate accounts, VPN/proxy/Tor observations where available, device links, bans, rate limits and anti-abuse reviews;
• logs generated by authentication, payments, live requests and system errors.

Support information

If you use the public contact form or in-game support, we collect the name or character details you provide, your email address, message, category, IP address and technical metadata needed to prevent spam and respond to the request.

3. Email verification and account communications

New accounts must verify ownership of their email address using a short-lived code before a character can be created. We also use email for password resets, security or account notices and support responses. Verification and reset codes are stored in hashed form, expire after a limited period and are invalidated after use.

4. How we use information

We use information where necessary to provide the Service, protect legitimate interests, comply with law or, where required, based on consent. Purposes include:

• creating and authenticating accounts and characters;
• operating gameplay, rankings, families, markets, Seasons, purchases and live systems;
• preventing cheating, fraud, duplicate-account abuse, unauthorised access and payment misuse;
• providing support, investigating reports and maintaining audit records;
• processing and reconciling purchases and refunds;
• maintaining performance, availability, backups and security;
• meeting legal, tax, accounting, fraud-prevention and regulatory obligations;
• improving game balance and features using aggregated or operational data.

5. Payments and payment providers

Capora City does not intentionally store complete payment-card numbers or card security codes. Payments are handled by third-party payment providers such as Stripe and, where enabled, One Link or other approved processors. Payment information is submitted to those providers using their payment systems and encrypted connections. Their own privacy and security policies apply to the information they process.

We may receive and store information needed to fulfil and reconcile a purchase, such as an order number, processor transaction or PaymentIntent identifier, payment status, amount, currency, product/package, account identifier, timestamps and limited payer/contact information provided by the processor. We use these records for fulfilment, duplicate-payment protection, refunds, chargebacks, support, fraud prevention and financial records.

6. Cookies and local storage

Capora City uses strictly necessary session cookies to keep you signed in securely and to protect requests. The Game may also use browser storage for non-sensitive preferences such as selected interface views or client identifiers used for security and continuity. Blocking essential cookies can prevent authentication or gameplay from working correctly.

7. Who we share information with

We do not sell personal data to advertisers. We may disclose information to:

• hosting, infrastructure, email, security, analytics or technical providers that process data for us;
• payment providers, including Stripe and other configured processors, where necessary to handle payments;
• authorised staff who need information to operate, moderate, secure or support the Game;
• law-enforcement, courts, regulators or other parties where disclosure is legally required or reasonably necessary to protect rights, safety, security or prevent fraud;
• a successor organisation if the Service or relevant assets are reorganised, transferred or acquired, subject to applicable law.

Public game information, such as character name, profile content, leaderboard position, forum content or family membership, may be visible to other players where the relevant feature is public. The Game is designed not to expose a player’s current city on their public profile.

8. International transfers

Some service providers may process information outside the United Kingdom. Where data-protection law requires safeguards for an international transfer, we will rely on an appropriate legal mechanism such as adequacy regulations, approved contractual safeguards or another lawful transfer basis.

9. Data retention

We keep information only for as long as reasonably necessary for the purpose it was collected, including:

• account and core game records while the account remains active and for a reasonable period after closure where needed for security, disputes or legal obligations;
• security, login, moderation and anti-abuse records for periods proportionate to fraud prevention and enforcement needs;
• payment and financial records for periods required by accounting, tax, chargeback and legal obligations;
• support correspondence while a request is active and afterwards for quality, dispute and security purposes;
• short-lived email verification and password-reset challenges only until they expire or are consumed, subject to limited audit retention.

Backups may retain deleted information for a limited period until they rotate out of the backup cycle.

10. Security

We use technical and organisational measures intended to protect information, including password hashing, session controls, CSRF protection, permission restrictions, server-side validation, audit trails and encrypted HTTPS connections where the site is configured correctly. Payment-card handling is delegated to specialist payment providers rather than being stored directly by the Game. No internet service can guarantee absolute security, so you should use a unique password and protect access to your email account.

11. Your privacy rights

Depending on where you live, you may have rights to request access to personal data, correction, deletion, restriction, objection, portability or withdrawal of consent where processing is based on consent. Some requests may be limited where we must retain records for legal obligations, fraud prevention, security, dispute resolution or the rights of others.

To make a privacy request, contact support@caporacity.com or use the contact form. We may need to verify your identity before acting on a request. If UK data-protection law applies and you are dissatisfied with our handling of a privacy matter, you may also have the right to complain to the UK Information Commissioner’s Office (ICO).

12. Children and younger users

Capora City is not intended for children under 13. We do not knowingly permit users under 13 to create accounts. Users who are minors should have permission from a parent or legal guardian where required by local law. If you believe a child has provided personal information contrary to this policy, contact us so we can review the account.

13. Third-party links and services

The Service may link to payment providers, maps, social platforms, external media, support resources or other websites. Their privacy practices are controlled by them, not by Capora City. Review the privacy information provided by those services before supplying personal data.

14. Changes to this policy

We may update this Privacy Policy as the Game, providers or legal requirements change. The current version will be published here with an updated date. Material changes may also be announced in-game or by email where appropriate.

15. Contact

Privacy enquiries can be sent to support@caporacity.com or submitted through our public contact form.