Privacy
What VanillaCity keeps about you, and why.
What we keep
- Your login: your citizen's name and a password. We never keep the password itself, only a scrypt hash that can check it but can't be turned back into it.
- Your citizen: how they look, what they own, coins and VanillaBucks, apartment, pets, mail, friends, business, and where they were when they last left.
- Chat and reports: chat is kept for 30 days so staff can look into reports. A report keeps the reported citizen's last messages.
- Your internet address: used only to slow down people making huge numbers of accounts or password guesses. It's never shown in town.
We don't ask for your email address, real name, age (beyond confirming you're 13 or older) or where you live, and nobody in town should either.
Signing in
Signing in gives your browser a random token in a cookie, which keeps you signed in for 30 days or until you sign out. We store only a hash of it. The Windows and Android apps keep the same kind of token. That's the only cookie we use. There's no advertising or tracking, in the game or on this website.
Why we use it
- To run the game: your account, your citizen and everything they own.
- To keep the town safe: chat for reports, internet addresses to stop abuse.
- To obey the law, if we're required to.
We don't use it for advertising, marketing profiles or automated decisions.
Who we share it with
VanillaCity is hosted in West Palm Beach, Florida. We don't sell your information or share it for advertising. We pass it on only to the services that host the game, and to others when the law requires it or someone's safety is at risk. Other citizens see only what your citizen shows in town: how they look, what they say in chat and what they do.
How long we keep it
| What | How long |
|---|---|
| Account and citizen | Until you ask us to delete it |
| Chat | 30 days |
| Sign-in session | 30 days, or until you sign out |
| Reports | The reported citizen's last messages, kept with the report |
| Police record (tickets, cells, bans) | Stays with the citizen |
| Internet addresses | Only as long as needed to slow down abuse |
If you ask us to delete your citizen, we delete the account and everything attached to it. We may keep the minimum needed to keep a ban in place, so banned players can't simply start over.
Keeping it safe
Passwords and session tokens are stored only as hashes, and we keep only what the game needs. If a breach affects you, we'll tell you as the law requires.
Children
VanillaCity is for ages 13 and up, and we don't knowingly collect information from younger children. Sign-up relies on players telling us their age. If we learn an account belongs to someone under 13, we delete it. Parents, see Parents and Guardians.
Your rights where you live
California
California residents can ask what personal information we hold, and have it deleted or corrected, or limit how it's used, without being treated differently for asking. In the past 12 months we collected your citizen's name, a hash of your password, a sign-in token and internet address (identifiers); what your citizen has, does and owns (game activity); and chat and reports (what you create).
We don't sell personal information or share it for advertising, including for anyone under 16, and we don't collect sensitive information like precise location, government ID or financial details. A parent or guardian can make a request for a minor. Ask on TeamVanilla's Discord. To protect your account, we may need you to sign in to confirm it's yours.
Europe and the UK
If you live in the EEA or UK, you can access, correct or delete your data, restrict or object to how it's used, and get a copy to take elsewhere. If we rely on your consent, you can withdraw it at any time. We use your information because we need it to run your account and the game, and because we have a legitimate interest in keeping the town safe. Our servers are in the United States, so your information is sent there. You can complain to your local data protection authority (in the UK, the Information Commissioner's Office). Some countries set the age to agree to online services at 14, 15 or 16. If that's your age, a parent or guardian must agree before you play.
Who we are
VanillaCity is made and run by TeamVanilla. We decide what's collected and why. Questions or requests? Message the staff on TeamVanilla's Discord.
If we change this page in a way that matters, we'll update the date below.
Last updated: 16 October 2026.