Privacy and family play

Who runs USURPR

USURPR is operated by Richard Davies, trading as USURPR. Contact usurprapp@gmail.com about your personal information.

For young rulers

Choose a nickname instead of your full name. Other players can see your ruler’s nickname, title, rankings and territory activity, including past reigns. Do not include your school, address or contact details in your nickname.

If you are under 13, you cannot register in the first public release. Parent-managed profiles are planned for a later release. Do not use your own email address or Google account to join. Your parent manages your child profile and can pause it.

Your play link is private. Share it only with your parent or guardian. The game does not ask for your address, school, photograph or exact date of birth.

Independent accounts

The registration flow being prepared is for people aged 13 or over using Google or a verified email account through Firebase Authentication. It records an age group, 13–17 or 18 or over, rather than a date of birth. Accounts in the younger group cannot manage child profiles.

Firebase handles sign-in credentials and email verification. The game uses your verified account identifier to connect you to your ruler and progress. Your email address and Google account details are not shown as your public ruler identity.

Planned parent-managed access

This route is not open for public registration. The following describes the prepared controls, not a service available to new families yet.

Child rulers do not have their own Firebase account or email address. A parent or guardian signs in using their own account and explicitly approves each child profile under this notice. The game records that approval and its time.

A child play link allows access to one profile for up to seven days. The browser keeps its play credential in session storage; the server stores a hash. Pausing the profile revokes its existing links. Creating a link does not give access to the parent’s account controls.

Pausing is not deletion. It stops access and keeps the ruler’s progress. Resuming a profile does not reactivate revoked links.

On a shared device, opening a child link signs the parent out of this game. Keep the device’s Google account and saved passwords under your control too.

What the game records

The game database holds account identifiers, age groups, ruler nicknames and titles, account status, parental approvals, avatar choices, credits, territory ownership, transactions, votes, discovery stamps and relevant profile changes. Records include timestamps needed for progress, reign history, duplicate-request protection and account administration.

Ruler nicknames and territory activity, including the times of past reigns, appear in the game’s public views. Independent adult accounts may also display their chosen ruler title and game avatar. Titles and avatars for child profiles and accounts aged 13–17 are withheld from public territory responses. Public player rankings include independent adult rulers only. An avatar is a selection of illustrated features, not an uploaded photograph.

Hosting and browser storage

Cloudflare hosts the main game and its database. Google’s Firebase Authentication provides independent account sign-in and processes authentication data in the United States, as explained in its privacy documentation. These services receive the connection and account information needed to deliver their functions. Starting-leader artwork is served by the main game, without a separate image-host connection. Terrain imagery is requested from NASA’s GIBS service, which receives connection information such as your IP address when your browser loads those tiles. At close zoom, street-map tiles are loaded directly from OpenStreetMap, which also receives your IP address and the site origin. Only the map area currently in view is requested; no player names, account records or game progress are sent to the map provider.

Firebase maintains sign-in state in the browser. Child play credentials use session storage. The browser also stores avatar drafts and favourite territories in local storage and caches terrain imagery in Cache Storage. You can remove these device-held copies using your browser’s site-data controls; clearing them does not delete your account or server-held progress. Signing out or closing a browser session is not an account-deletion request. Google Analytics is not enabled in the game. Game credits cannot be purchased.

Your privacy rights

You can ask for access to your personal information, correction, deletion or restriction of its use. Depending on the applicable law and processing basis, you may also have rights to portability and to object to processing. Contact us using the address below. You can also raise a complaint with the UK Information Commissioner’s Office or another relevant supervisory authority.

Google describes its authentication processing and retention in the Firebase privacy information. The EU setting for the game database does not mean all provider processing stays in the EU.

Questions, corrections and deletion requests

Contact usurprapp@gmail.com with questions or to request access, correction or deletion of account information. Do not send your password or a private child play link.

The account page provides Download my data. Where the required account-deletion service is available, it also provides Delete account, which asks you to confirm your identity. Deletion removes your sign-in and pseudonymises your game account and any managed child profiles, revokes play links and releases your territories without a refund. Past takeovers and Assembly results remain under “Former ruler”. If deletion is interrupted, play stays paused while you or the organiser finish it. Copies in backups and with the sign-in provider are not removed immediately. Applicable processing grounds, retention periods and provider and transfer information must still be finalised before public registration opens. This page does not yet represent a completed launch privacy notice.