Privacy policy
Last updated 7 November 2026
Short version: we keep what we need to run your account and the game, keep it safe, and see how the game is played. We don't sell your data, don't show ads, and don't use third-party trackers. You can delete your account and its data at any time.
What we collect
| What | Why | How long |
|---|---|---|
| Your account: username, email address, password (stored only as a one-way hash, which nobody can read back) | To let you sign in on any device, confirm your email, and reset a forgotten password | Until you delete your account |
| When you confirmed you are 18 or older and agreed to the terms, and whether you want news by email | To show you agreed, and to email you news only if you asked for it | Until you delete your account |
| Your progress: in-game cash, items, rank, stats, crew, character's look | To keep your game between visits | Until you delete your account |
| Chat messages and reports of other players | To keep chat safe and act on reports | Chat: 14 days. Reports: until handled |
| Sign-ins: time, IP address, browser and device (user agent) | Security: stopping account theft, cheating, bans and abuse | 90 days |
| Play sessions: when you played, for how long, IP address, browser and device | Fair play, and counting how the game is used (for example, players per day) | 1 year |
Guests (playing without an account) get a random guest number. Their progress and play sessions are kept the same way.
Cookies and storage in your browser
- One sign-in cookie, only when you sign in. It can't be read by the page or by other sites. No advertising or tracking cookies.
- Your browser's local storage keeps your settings, single-player progress and, for guests, the guest key that lets you come back as the same guest.
Who else handles it
- Cloudflare delivers the game's pages, so it sees your IP address to send them to you.
- Our game server's hosting provider runs the server and its database.
- Our email provider sends the codes for confirming your email and resetting your password (and news, if you asked for it).
They process data only to provide these services to us. We never sell your data or share it for advertising.
Emails
We email you your sign-up and password codes. News and offers come only if you ticked the box. You can turn them off any time in the game under Profile, Online.
Your rights
- Delete your account: in the game, Profile, Online, Delete my account. Your account, progress, sign-ins and play sessions are deleted at once. Copies in our backups disappear within 14 days.
- See, correct or export your data, or ask a question: email privacy@mappunk.com.
- Depending on where you live (for example the EU or UK under the GDPR, India under the DPDP Act, California under the CCPA), you may have further rights, including complaining to your data-protection authority.
Age
MapPunk is for people aged 18 and over. It has violence and adult themes. If we learn that an account belongs to someone younger, we delete it.
Changes
If this policy changes, the new version goes on this page with a new date. For a big change, we'll tell players in the game.