Privacy Policy

1. Introduction

Welcome to Cities Collective ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services for sharing Cities: Skylines 2 save files and related content.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

• Email address (required for account creation)
• Username (chosen by you)
• Password (encrypted and stored securely) - for accounts created directly with us which use an email address and password to log in
• IP address (for security and fraud prevention)
• Name and avatar (when using Google or GitHub OAuth login)
• Google ID or GitHub ID (when using OAuth login)
• Optional profile information (social media links, bio)

2.2 Content You Upload

When you use our services, we collect:

• Cities: Skylines 2 save files (.cok files) - up to 3GB per file
• City screenshots and images (processed into multiple sizes for optimization)
• Optional OpenStreetMap (.osm) files for custom map data
• Metadata extracted from save files (city name, population, money, XP, etc.)
• Comments and interactions with other users' content
• Likes, favorites, and social interactions

2.3 Usage Information

• Device information (browser type, version, operating system, screen resolution)
• Pages visited and time spent on the site
• Referral sources
• User interactions (clicks, scrolls, form submissions)

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our website and services
• Process and display your uploaded cities and content
• Enable community features (likes, comments, favorites)
• Communicate with you about your account and our services
• Improve our website and user experience
• Prevent fraud and ensure platform security
• Comply with legal obligations

4. Data Storage and Security

We implement appropriate security measures to protect your information:

• Passwords are encrypted using industry-standard bcrypt hashing
• OAuth tokens are stored securely and encrypted
• Save files (.cok), images, and OSM files are stored securely using Cloudflare R2
• Images are automatically processed into optimized formats (WebP) and multiple sizes for better performance
• Our website uses SSL encryption for secure data transmission
• Database access is restricted and monitored
• File uploads are validated for file type, size, and format compliance

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your information.

5. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties, except:

• Content you choose to make public (city uploads, comments, usernames)
• When required by law or to protect our rights
• With trusted service providers who assist in operating our website
• In the event of a business transfer or merger

6. Third-Party Services

Our website uses the following third-party services:

• Cloudflare R2: File storage for save files, images, and OSM files
• NextAuth.js: Authentication service supporting email/password, Google OAuth, and GitHub OAuth
• Google OAuth: For Google account login (subject to Google's privacy policy)
• GitHub OAuth: For GitHub account login (subject to GitHub's privacy policy)

These services have their own privacy policies and terms of service. When you use OAuth login, we receive basic profile information (name, email, avatar) from the respective service.

7. Your Rights

You have the right to:

• Access and update your personal information
• Delete your account and associated data
• Download your uploaded content
• Withdraw consent for data processing
• Request correction of inaccurate information

To exercise these rights, please contact us using the information provided below.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Necessary cookies: Maintain your login session, remember your preferences (theme, etc.), provide bot protection (Cloudflare Turnstile), basic functionality
• Accept All cookies: Everything above plus website usage statistics (Cloudflare Insights), Hall of Fame view tracking, home page view tracking, session tracking, performance monitoring, and user behavior analytics

We provide a cookie consent banner that allows you to choose between accepting only necessary cookies or all cookies. You can change your cookie preferences at any time by clearing your browser data and refreshing the page.

You can also control cookie settings through your browser preferences, though this may affect the functionality of our website.

9. Data Retention

We retain your information for as long as necessary to provide our services or as required by law:

• Account information: Until you delete your account
• Uploaded save files (.cok): Until you remove them or delete your account
• Uploaded images: Until you remove them or delete your account
• Uploaded OSM files: Until you remove them or delete your account
• OAuth tokens: Until you disconnect your account or delete your account
• Usage logs: Up to 12 months for security and analytics

10. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "last updated" date. You are advised to review this privacy policy periodically for any changes.

12. Contact Information

If you have any questions about this privacy policy or our practices, please contact us:

• Website: citiescollective.space
• Email: [email protected]