Beta Site — this application is still under review and actively being updated
Legal

Privacy Policy

Effective date: August 2, 2026

This Privacy Policy is maintained by Lakes Global LLC (“Lakes Global,” “we,” “us,” or “our”), doing business as the City of Loon Harbor, to answer common security and privacy questions about the City of Loon Harbor application and website (the “Service”). This page describes our current data-handling practices; it is not an independent certification, audit report, or legal guarantee.

1. What this policy covers

This Policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices you have. It applies to information collected through the Service. Some parts of the Service rely on third-party providers; those providers have their own privacy practices, and this Policy does not control them.

2. Information we collect

We collect the following categories of information:

  • Account information: email address, authentication provider identity, and any profile details you choose to add (such as a citizen name or portrait image).
  • Game-state information: simulated municipal records you create, including district of residence, household members, businesses, bids, invoices, and account balances.
  • Payment information: our payment processor, Paddle, handles payment card details and billing history. We do not store complete payment card numbers on our servers.
  • Communications: support emails and any messages you send to City Hall through the Service.
  • Technical data: browser type, device type, IP address, and cookies or similar identifiers used for authentication and basic analytics.

3. How we use information

We use the information we collect to:

  • provide, operate, and maintain the Service and your citizen record;
  • process payments and manage subscriptions through Paddle;
  • send in-game mail, notices, and transactional emails related to your account;
  • respond to support requests and exercise our rights under the Terms of Service;
  • improve the Service and detect fraud, abuse, or security issues.

4. Authentication and access

Accounts are authenticated through email and password or Google OAuth. We rely on Lovable Cloud backend services for session management and row-level access controls. You are responsible for keeping your login credentials secure. We recommend using a strong, unique password and enabling any additional protections your authentication provider offers.

5. Platform and hosting context

The Service is built and hosted on the Lovable platform, which provides the application framework, database, authentication, and storage services we use. Lovable platform capabilities help us operate the Service, but they are not a certification of our security or privacy practices. We are responsible for how we configure and use those services, and you are responsible for the security of your account credentials and devices.

6. Subprocessors and integrations

We use the following categories of service providers to operate the Service. This list may change over time.

  • Payment processing: Paddle.com is our online reseller and Merchant of Record.
  • Authentication: Google OAuth, provided by Google.
  • Hosting, database, and storage: Lovable Cloud backend services.
  • Email delivery: transactional email services used to send in-game notices and account messages.

7. Cookies and analytics

We use cookies and similar technologies to keep you signed in and to understand how the Service is used. You can control cookies through your browser settings. Disabling cookies may limit your ability to sign in or use certain features.

8. Data retention and deletion

We keep your account information and game-state data for as long as your account is active. If your account is inactive for an extended period, we may deactivate it and eventually delete the associated data in accordance with our operational procedures. You can request deletion of your account and personal data by contacting us using the information below.

9. Your privacy rights and requests

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information. To exercise these rights, email us at helpdesk@LakesGlobalLLC.onmicrosoft.com with the subject line “Privacy Request.” We will respond within the time required by applicable law.

10. Security and incident contact

We take reasonable steps to protect the information we hold, including access controls, encrypted connections, and routine monitoring. No online service can guarantee complete security. If you discover a vulnerability or believe your account has been compromised, please contact us immediately at helpdesk@LakesGlobalLLC.onmicrosoft.com.

11. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us so we can delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy and revise the effective date at the top of this page. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact us

Company name: Lakes Global LLC
Email: helpdesk@LakesGlobalLLC.onmicrosoft.com