Privacy Policy

Hometown is run by Anvil Interactive Solutions (“we”). We are the data controller for the personal data described here. We follow the Nigeria Data Protection Act 2023 (NDPA) and the rules of the Nigeria Data Protection Commission (NDPC). In plain words: we collect as little as possible, we no dey sell your data, and you fit take it or delete it anytime.

What we collect

• Your display name, avatar look, home state and LGA, which you choose when you join.
• An account id. Guests get an anonymous one. If you save your progress, we keep your email address or Google sign-in.
• What you do in the game: your plot, decorations, coins, circles, visits, emotes and preset chat. Free-text chat is filtered and shown to nearby players. We do not store chat history.
• If you buy a cosmetic: the order reference, item, amount and status. Paystack handles your card or bank details. We never see or store them.
• Reports you file and reports about you, so our team can keep the town safe.
• Basic, cookieless product analytics (for example, “plot claimed”), with no advertising identifiers and no cross-site tracking.

Why we use it (lawful basis)

• To run the game you asked for (contract): your plot, saving progress, circles, purchases.
• Consent: cookieless analytics. You can withdraw consent anytime.
• Legitimate interests and legal duties: safety moderation, fraud prevention, accounting records for payments.

Children

You must be 16 or older to play. Players under 18 have free-text chat switched off and can only use preset phrases and emotes. We do not collect more data from younger players than the game needs. If you believe someone under 16 is using Hometown, contact us and we will delete the account.

Who we share with

• Supabase (database, login, realtime) and Vercel (hosting), as our processors under contract.
• Paystack, only when you choose to make a purchase.
• PostHog (analytics), cookieless and without IP storage.
• Sponsors never receive your personal data. They only see totals such as how many players viewed or tapped their building.

Some processors store data outside Nigeria. Where that happens, we rely on the safeguards allowed by the NDPA, such as contractual protections.

How long we keep it

We keep your game data while your account is active. Guest accounts that have not been used for 12 months may be removed. Payment records are kept for as long as tax law requires, with your account link removed once you delete your account.

Your rights

• Access and portability: download everything from your account page.
• Correction: change your name or look in the game.
• Erasure: delete your account from your account page. It is immediate.
• Objection and withdrawal of consent: contact us at any time.
• You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

Contact

Email privacy@yourdomain.ng. We aim to reply within 7 days and to handle rights requests within 30 days.