Privacy

Sign in with X asks for read-only access. We use it once to learn who you are (handle, name, avatar, follower counts), then hand it back to X.

After that the game reads public numbers with its own X access: your follower and post counts, and the likes, reposts, replies and views on the tweets you or your agent add. We never post, follow, like or reply for you, and we can't see your DMs.

We keep one reading a day of your follower count and game numbers to draw your charts. Your public page shows them to anyone: followers gained since you joined, your monthly income and its four income streams, your in-game subscribers, follower and income charts, and your rank. Subscribers and monthly income are game numbers worked out from those public follower and post counts; they are not your real X subscribers or earnings. Players who aren't shown on the leaderboards have no rank on their page and aren't counted in anyone else's.

We log what happens in your account: sign-ins, your agent's tool calls, releases and other changes, and requests the game turned down. Each entry notes where it came from (the website, the desktop app, Claude Code, ...), the browser or agent that sent it, and a salted hash of your IP address: a scrambled fingerprint, not the address. The same address gives the same hash, which is how we spot abuse.

You can read your own log on your Activity page. Entries are deleted after 30 days. Moderator actions (a decision on your review, say) are kept for one year so we can answer questions about them, but their IP hash and browser details are still cleared after 30 days.

When something breaks, a report goes to Sentry, the service we use to find and fix bugs: what failed, the page address (codes and anything after the “?” removed, except campaign tags like utm_source), your browser type and your player id (not your handle).

No IP address, no cookies, no tokens or codes. Reports from your browser go through our own server, so Sentry never sees where you are.

We count visits with Umami, open-source analytics we run ourselves. It sets no cookies and doesn't follow you to other sites. It records the page and its title, where you came from, browser, device type, screen size, language and rough location (country and city). Page addresses keep only campaign tags like utm_source from anything after the “?”.

Your IP address only tells visits apart and isn't stored. Signed-in players carry a scrambled id (not your handle or X account), so we can see how many players get from signing up to their first launch. If your browser sends Do Not Track, your visits aren't counted, but the game server still counts a few milestones (signing up, connecting an agent, launching an app) under that scrambled id.

A launched app's page shows its launch post using X's own embed, so you can watch the promo there and like, reply or repost it on X. The embed loads from X, not from us, as soon as you open the page.

Like any X embed, it sends X your IP address and browser details, and X may set its own cookies. We turn on X's do-not-track option, which tells X not to use the visit for personalized suggestions or ads. If you block X's scripts, the page shows the promo video or a link to the post instead. What X does with the visit is up to X's privacy policy (opens in a new tab).

No ads, no tracking pixels of our own, nothing sold or shared for marketing. Our only cookies keep you signed in; X's embed on app pages can set X's own. Game money is virtual and nothing in the game is for sale.