Your wallet address, and the game record tied to it: your tower and floors, your chip ledger, bets, trades, races, jobs, purchases, cash-outs, your friends, mutes, blocks and crews, your suggestions and votes for the city, any other wallet you verified for paying, and when you were last seen.

If you sign in with X or link it: your X account's id, handle, display name, profile picture address and verified status. The game does not keep your X access tokens.

What you write: your tower's and character's names (and earlier names), chat in rooms and public channels, private messages and crew chats, reports you make, and messages to the developers on the Dev Line.

What you upload: ad pictures and ad text for the city's boards. A picture is decoded and re-encoded by the game before anything is stored, which removes its metadata.

Your network address (IP) and the country it maps to, read from the connection. It is used to limit abuse, to lock out repeated wrong tester passwords, to hold your place in the city's queue and to decide which parts of the game are open where you are. It is kept on a few records (a tester password attempt, a place in the queue, an ad upload, and, as a hash, a chat sanction) and, with the wallet that made the request, in the server's logs for requests that failed.

Your own limits: the casino's age confirmation, a daily loss limit and any break you set.

Performance samples from your device, to tune the game: the graphics quality, the graphics card's name, frame rates and the screen's size. They are not tied to your wallet.

The game stores your sign-in session and your preferences in your browser's local storage: the wallet you chose, sound and graphics settings, your character, guide progress and similar. Signing out ends the session; clearing the site's data in your browser removes the rest.

The game itself sets no advertising cookies and uses no third-party analytics trackers. Before launch, one cookie remembers that you entered the site's password. Our hosting and network providers may set a security cookie of their own to deliver and protect the site.

Solana is a public blockchain. Your wallet address, its balances and every transaction, including $TOWER sent to the Cashier and cash-outs sent to you, can be seen by anyone, permanently. We cannot change or delete them.

In the game, other players can see your tower, your name and character, your place on the boards, your public chat, your ads, and some of what you do in the city's feed.

If you join from another player's invite link, that player sees your name (or a short form of your wallet), the day you joined, when you first deposited and the chips your play earned them. They earn chips from what the house keeps from your play, for as long as you play: it costs you nothing, and your balance and winnings are never touched. Never your full wallet address.

Approved ad pictures are stored on IPFS, a public network. Once a picture is published there, copies can persist outside our control even after it is taken down from the game.

The game uses what it keeps to:

• run the game and keep its ledger, so that every chip is accounted for;
• prevent cheating, abuse and fraud;
• moderate chat and ads, and handle reports;
• decide which parts of the game are open in which countries;
• find and fix faults;
• meet legal duties.

The game uses services run by others, which process some of this for us:

• hosting and network providers, which run the servers, the database and the edge network and see connection data;
• Solana RPC providers, which see the chain requests the game makes;
• a swap service on Solana, which receives your wallet address when you buy chips with SOL or USDC;
• X, when you sign in with it or link it;
• AI decision services, which classify text and pictures for the game. Ad pictures and ad text are sent to them to be screened. So are lines of public chat (to catch scams), the words you type to the phone's assistant, and what you say to a character in the game, an officer at a police stop for example. Chat lines, the assistant's words and what you say to a character are sent without your wallet or your name, with the players a chat line mentions masked, and with any wallet address or @name in what you type to the assistant masked. Private messages, crew chats and the Friends feed are never sent;
• an IPFS pinning service, which stores every ad picture you upload, privately until it is approved and publicly after, without your wallet address. Ad pictures in the city are loaded from its gateway, so it sees the connection of anyone who views them;
• Discord: a message you send on the Dev Line is passed to the team's own channel there, with your tower's name, your wallet address, and the context your page attached (where you were in the game, your browser, your screen's size and your language).

Moderators on the team can read public chat and reports. Private messages stay between the people in them, with one exception: when an account has been reported, a moderator can read that account's messages from the day before the report to the day after, its private messages and crew chats included. Every such read is logged.

We do not sell your data. We share it with authorities only where the law requires it.

By the game's settings today:

• chat in rooms and public channels: 30 days (a line the filter refused: 7 days);
• private messages and crew chats: 30 days;
• reports, with the copy of the messages around them that a report carries: until 180 days after the report is handled. The record of a sanction is kept, and messages under a legal hold are kept for as long as the hold lasts;
• ad pictures: an approved picture that is not in use is removed after 30 days, a rejected one after 7. A picture held because it may be unlawful is kept privately for up to a year. The network address an ad was uploaded from is kept with it for 30 days;
• performance samples: 90 days;
• the game's ledger (chips, bets, trades, cash-outs, and the audit of what the team changed): for as long as the game runs, because the books have to balance and be checkable.

You can play without X, and an account that has a wallet can unlink X from the wallet menu. Where linking X merged two accounts, the record of that merge is kept. You can mute or block any player, and undo it in the phone's Settings.

To ask what the game holds about you, or to ask for it to be corrected or deleted, write to us on the Dev Line. We will do what the law where you live requires. Some records cannot be deleted: anything on the blockchain, and the ledger entries the books depend on.

The game is for people aged 18 or older, as the Terms of Use say. We do not knowingly keep data about anyone younger.

We protect what the game keeps with reasonable measures. No system is perfectly secure, and the game never has your wallet's keys.

We may update this notice as the game changes. This page shows the version and the date it was last updated. Players reach the team on the Dev Line, an app on the in-game phone.