This Privacy Policy explains how the operator of Chrona City ("Chrona," "we," "us," or "our") collects, uses, discloses, and protects information when you use chrona.city and related multiplayer, Door, profile, and publishing features (the "Service").
1. Scope
This Policy applies to information handled through the Service. It does not govern third-party websites, creator-hosted content, external Door destinations, or services that have their own privacy notices.
2. Information We Collect
Information you provide
- Account and authentication information: email address, account identifier, authentication session data, and records needed to send and verify one-time sign-in codes. We do not ask you to create a password.
- Profile information: display name, biography, and avatar. Avatar files are normalized by the browser before upload.
- Door and creator content: Door placement and dimensions, cover images or videos, HTTPS destination URLs, uploaded HTML/static projects and their files, project metadata, and Door-scoped publisher-token metadata. Publisher token secrets are shown only when created; the service stores a cryptographic hash and a short hint.
- Communications: information you include when you contact us about support, privacy, safety, or legal issues.
Information collected when you use the Service
- Multiplayer and world activity: room membership, pseudonymous player or account identifiers, display name, character state, in-world position, direction, movement, connection state, timing, and reconnect information. Other players in the same room receive the live state needed to render your presence.
- Connected experiences: if you enter the Central Park Tower experience, the Service may send the player identifier, display name, room, mapped in-world position, character state, latency, and server-node information needed to connect that experience.
- Technical information: IP address, browser and device type, operating system, requested URLs, response status, timestamps, and security or diagnostic events that may be recorded by our hosting, authentication, storage, edge-function, and multiplayer providers.
- Browser storage: local storage and session storage used for authentication sessions, a remembered email draft, guest display name, multiplayer identity and reconnect tokens, settings, feature toggles, locally authored plugins, and interface state.
Address search and location
The San Francisco address locator parses address text or a complete Google Maps URL in your browser and searches a bundled DataSF-derived index. The Service does not request your device's GPS location. Downloading search-index files may still create ordinary web-server request logs.
3. How We Use Information
We use information to:
- provide accounts, profiles, multiplayer rooms, shared Doors, media hosting, project publishing, address search, and other requested features;
- authenticate users, enforce ownership and file limits, protect Door publisher tokens, prevent abuse, and maintain service integrity;
- synchronize public content and multiplayer state across users and devices;
- operate, troubleshoot, secure, analyze, and improve the Service;
- communicate about support, safety, legal requests, and material service or policy updates; and
- comply with law and enforce our Terms of Service.
4. Public Information and User Content
Chrona City is a shared public environment. Please do not upload confidential information or content that you do not want others to access.
- Door records, cover media, external destination URLs, and uploaded static-project source files and assets are publicly readable. A Door record may include its owner's account identifier.
- Avatar files use public URLs. Display names and live in-world presence are visible to other multiplayer participants.
- Public files can be copied, cached, indexed, or retained by others after you remove them. We cannot control copies made outside the Service.
5. How We Disclose Information
We may disclose information in the following circumstances:
- Other users and the public: as described above and as necessary for multiplayer, shared Doors, public profiles, and creator projects.
- Service providers: including Supabase for authentication, database, realtime, storage, and edge functions; cloud hosting and delivery providers; and multiplayer control-plane and game-authority infrastructure. They process information to provide services to us.
- Creator and third-party destinations: when you enter or open a Door project or external site. Those destinations may independently receive technical data and apply their own policies.
- Legal, safety, and integrity: when reasonably necessary to comply with law or valid process, protect users or the public, investigate abuse, enforce agreements, or defend rights and systems.
- Business transfers: in connection with a merger, financing, reorganization, sale of assets, or similar transaction, subject to appropriate protections.
- With your direction or consent.
No sale or targeted advertising
We do not sell personal information for money. We also do not currently share personal information for cross-context behavioral advertising or use it to deliver targeted advertising. The Service does not currently use third-party advertising trackers.
6. Your Choices and Privacy Rights
You can edit profile fields, remove or replace an avatar, and delete Doors you created through available account controls. To request access, correction, deletion of an account or associated information, or another privacy action, contact us using the address below. We may need to verify your identity and may retain information where permitted or required by law.
Depending on where you live, applicable law may provide rights to know, access, correct, delete, or obtain a copy of personal information; to opt out of certain sales, sharing, targeted advertising, or profiling; to limit certain uses of sensitive information; to appeal a decision; and to receive equal service when exercising a right. You may use an authorized agent where applicable. We will not discriminate against you for exercising a legally protected privacy right.
Do Not Track and Global Privacy Control
Because there is no uniform browser "Do Not Track" standard, the Service does not respond to DNT signals. We do not currently sell or share personal information for targeted advertising, so there is no separate advertising opt-out needed at this time. If those practices change, we will provide legally required opt-out methods, including support for recognized browser preference signals where applicable.
7. Retention and Security
We retain information for as long as reasonably necessary to provide and secure the Service, maintain your account and public content, comply with law, resolve disputes, and enforce agreements. Retention depends on the type of information, account and content status, operational needs, legal obligations, and provider backup or logging cycles. Public avatars and project assets may be delivered with cache durations of up to one year. Deleted information may remain temporarily in backups, browser or delivery caches, security records, or cleanup queues.
We use administrative, technical, and organizational safeguards designed to protect information, including scoped access controls, ownership checks, authentication, upload limits, and isolated execution for creator projects. No internet service, storage system, or sandbox is completely secure, and we cannot guarantee absolute security.
8. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action. Users under the age of legal majority should use the Service only with permission from a parent or legal guardian.
9. International Processing
Chrona and its providers may process information in the United States and other countries where they operate. Those countries may have privacy laws that differ from the laws where you live.
10. External Links and Creator Projects
Doors may lead to third-party websites or user-created projects. Chrona does not control their privacy practices. Review the destination's privacy notice before providing information. A project sandbox reduces some browser privileges but does not make third-party content risk-free.
11. Changes to This Policy
We may update this Policy as the Service or law changes. We will post the revised version here and update the date above. If changes are material, we may provide additional notice through the Service or by other reasonable means.
12. Contact Us
For privacy questions or requests, email pengpeng1366@gmail.com. Please use the subject line “Chrona Privacy Request” and do not send passwords, one-time codes, Door publisher tokens, or other secrets.