Privacy Policy

This Privacy Policy describes how OmniTick Economy Simulator ("the Application", "we", "us", or "our"), operated by the OmniTick Project, collects, uses, stores, and protects your information when you access and play our educational simulation at https://economy-simulator.omnitick.online.

1. Overview & Core Principles

OmniTick Economy Simulator is an educational macroeconomic simulation game. We believe in minimal data collection:

• You can play fully in Guest Mode without creating an account or providing any personal information.
• If you choose to sign in with Google, we collect only the essential identity claims required to authenticate you and associate your cloud-saved settlement files with your account.
• We do not sell personal data, do not display commercial advertising, and do not employ third-party behavioral ad trackers.

2. Google Identity Services Authentication

When you voluntarily choose to sign in using the official "Sign in with Google" button, authentication is conducted securely via Google Identity Services (GIS).

We receive and verify a signed JSON Web Token (JWT) directly from Google. From this token, we extract and process:

• Google Unique Subject Identifier (sub): A unique, permanent string identifying your Google account. This is the primary foreign key used to isolate and associate your saved games.
• Email Address: Used to identify your account and display your active profile in the application header.
• Display Name: Your public Google profile name, displayed in the game interface.
• Profile Picture URL: A link to your public Google avatar image, displayed in the settlement management bar.

3. Cloud Storage & Cloudflare D1 Database

Authenticated game progress is persisted on Cloudflare's serverless edge infrastructure using Cloudflare D1 (a distributed relational SQLite database). The following data is stored:

• User Profile Record: Your internal user ID, verified Google Subject ID, email address, display name, and avatar URL.
• Active Session Digests: Cryptographic SHA-256 hashes of your active session tokens, along with creation and expiration timestamps. Plaintext session tokens are never stored in the database.
• Settlement Metadata: Game title, settlement seed, road network style, simulation month index, Living Conditions Score (LCS), population count, and treasury balance.
• Simulation State Snapshots: Serialized economic state (household demographic tiers, enterprise inventories and cash reserves, municipal tax ledgers, and building coordinates) retained per save revision for optimistic concurrency protection.

4. Cookies & Session Management

We use a single first-party cookie for session authentication:

• Cookie Name: omnitick_session
• Purpose: Authenticates HTTP API requests between your browser and our Cloudflare Worker backend.
• Security Flags: Configured strictly with HttpOnly (prevents client-side JavaScript access/XSS), Secure (transmitted solely over encrypted HTTPS), and SameSite=Lax (defends against Cross-Site Request Forgery).
• Scope: Host-only. The cookie is scoped strictly to economy-simulator.omnitick.online and is not broadcast across other OmniTick domains.
• Lifespan: Valid for up to 30 days, or until you explicitly click "Sign Out" in the application menu.

We do not use tracking cookies, analytics cookies, or third-party marketing cookies.

5. Guest Mode Data Practices

If you play without signing in, you are in Guest Mode:

• All simulation calculations, city layouts, and building placements execute in transient browser memory.
• No data is transmitted to or stored in Cloudflare D1.
• No authentication cookies are generated or stored on your device.
• Closing or hard-refreshing your browser tab completely discards guest progress.

6. Analytics & Performance Logging

Third-Party Analytics: OmniTick Economy Simulator does not embed Google Analytics (GA4), Meta Pixels, or external behavioral tracking scripts.

Infrastructure Telemetry: Like all websites hosted on Cloudflare Workers, incoming network requests generate standard ephemeral infrastructure logs (such as connecting IP address, requested HTTP path, HTTP status code, and user-agent string). These logs are processed by Cloudflare, Inc. solely for DDoS mitigation, rate limiting (120 requests/minute per IP window), and operational security.

7. Data Sharing & Service Providers

We never sell, rent, or trade your personal information. We disclose data solely to the following trusted infrastructure service providers necessary to operate the game:

• Cloudflare, Inc. (San Francisco, CA, USA): Edge network hosting, serverless computing (Cloudflare Workers), and database persistence (Cloudflare D1).
• Google LLC (Mountain View, CA, USA): Identity token issuance and cryptographic public key verification via Google Identity Services.

8. Data Retention, Deletion & User Rights

• In-Game Save Deletion: You can delete any individual settlement directly in the "Load Game" menu at any time. Clicking "Delete" permanently and immediately removes the game record and its snapshot revisions from Cloudflare D1.
• Session Revocation: Clicking "Sign Out" immediately revokes your active session on the server and expires your browser cookie.
• Account & Full Data Deletion: You have the right to request full deletion of your user account and all associated game saves. To submit a deletion request or inquire about your data, contact the operator at the address below. Requests are verified and processed within 30 days.

9. Contact & Operator Identity

OmniTick Economy Simulator is maintained by the OmniTick Project. For privacy inquiries, data deletion requests, or questions regarding this policy, please contact:

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory requirements. Any modifications will be posted directly to this URL with an updated effective date. Continued use of the simulation after any update signifies your acceptance of the revised policy.