Privacy policy
Immoville is a real-estate game. You can play it fully without an account; then your city stays on your device. This policy explains what happens when you do create an account, play with friends or see ads.
Who is responsible
The controller is 2Run, Rollekens 83, 2400 Mol, Belgium, company number BE 1038.480.317. For anything about privacy: immoville@2run.be. We have not appointed a data protection officer because our processing does not require one; your question goes straight to the controller.
Which data, why and for how long
We only process what the purpose needs. You choose your player name yourself; preferably do not use your real name.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Account and sign-in | E-mail address; when signing in with Apple or Google, also the account ID of that service (no name or profile picture); sign-in time | Contract | Until you delete your account |
| Saving and continuing on another device | Your city, progress and game settings | Contract | Until you delete your account |
| Friends, league, clubs and market | Player name, colour, friend code, weekly score, summary of your properties, invites, clubs and co-ownership, reports of names and whether your name is hidden (with reason and date) | Contract | Until you delete your account |
| Crash reports | Crash and error reports only: technical error data, device model, OS and app version — no name, e-mail, IP address or device name, no performance measurements and no session tracking | Legitimate interest | 90 days |
| Anonymous statistics | Screens visited and buttons used, language, device type — no user or device ID and no cookies | Consent | 13 months |
| Ads in the free version | Advertising ID, IP address, device and ad data (processed by Google AdMob) | Consent | Under Google’s policy |
| Ad-free play (purchase) | Anonymous purchase ID and receipt from Apple or Google | Contract | As long as the purchase is valid |
| Real listings and security | IP address and time in server logs when the app fetches listings | Legitimate interest | 30 days |
| Support requests | Your e-mail address and message | Legitimate interest | 2 years after closing |
If you sign in with Apple or Google, we keep only the account ID and the e-mail address. The name and profile picture Google sends are not kept but deleted automatically; with Apple we do not ask for a name. Crash reports are collected with GlitchTip on our own server, based on legitimate interest: only reports of crashes and errors, without performance measurements (performance traces) and without session tracking.
Notifications are local notifications: they are scheduled on your device and nothing is sent to us. The map is based on OpenStreetMap data bundled with the app; no map data is requested while you play If you enter your own situation (net income, household, savings) in a new game, it stays on your device: it is not included in iCloud or server saves, the league, or what friends see. Only the chosen profile type is synced.
Consent and your choices
On first launch the intro asks separately whether we may collect anonymous statistics (Umami, on our own server), with two equally large buttons: ‘Allow’ and ‘Don’t allow’. Statistics stay off until you turn them on yourself. Players who used the app before this version do not get them automatically either: they stay off until you turn them on in Settings.
That choice is separate from your consent for personalised ads, which you give or refuse in Google’s consent form, and on iOS separate from App Tracking Transparency. Refusing is always as easy as accepting and does not affect the game.
You can change or withdraw your choice at any time in Settings → Privacy. Withdrawal applies from then on.
Who receives your data
We never sell personal data. We work with these providers, who process only on our instructions (processors) or, where stated, act as controllers themselves:
- Supabase — accounts, saved games and multiplayer; servers in Frankfurt (EU).
- Hetzner Online (Germany) — our own servers for crash reports, statistics, the listings feed and e-mail.
- Cloudflare — secures and speeds up the connection to our feed server and to our servers for statistics, crash reports and the website (legal pages and admin panel).
- Apple and Google — Sign in with Apple, Google sign-in, App Store, Google Play, Game Center and iCloud. Apple is itself responsible for Game Center and iCloud under its own privacy policy.
- Google AdMob — shows the ads in the free version; Google is itself responsible for personalised ads. More: how Google uses data.
- RevenueCat — manages the ad-free purchase with an anonymous ID.
Transfers outside the EU
Your game data is stored in the EU. Some providers (Supabase, Cloudflare, Google, Apple, RevenueCat) are US companies or have support outside the EU. Any transfer then relies on the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) for certified companies, or on the European Commission’s standard contractual clauses.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent.
- Delete it yourself in the app: Settings → Account → Delete account. This erases your account and all related data on our servers; your city on your device stays as a guest game. Without the app: e-mail immoville@2run.be from your account’s address with the subject “Delete my account”; we delete it within 30 days and confirm by e-mail.
- Change your player name in the app.
- Access and portability: in the app, Settings → Account → Download my data gives you a JSON copy of all data we keep about you on the server. You can also e-mail immoville@2run.be from your account’s address; that is how we verify your identity. We reply to such requests and any other question within one month, free of charge.
Not satisfied? You can lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be.
Children
You can create an account from age 13. Younger than 13? Play without an account, or ask a parent for permission. If we find that a child under 13 has an account without that permission, we delete it. The game has no paid loot boxes and no chat.
Security
All connections are encrypted (TLS). The database uses row-level security: each player can only read and change their own data, plus what friends deliberately share. Secret keys are never in the app. If something does go wrong with personal data, we notify the Data Protection Authority within 72 hours and, if the risk is high, you as well.
Automated decisions
We make no decisions about you that are solely automated and have legal effects. Only personalised ads — if you consent — involve profiling by Google. A player name can be hidden automatically after reports from three different players; how that works and how to respond is explained in the terms of use (section 4).
Changes
If we change this policy materially, we announce it in the app beforehand. The date at the top shows the current version.
Version 5 (13 October 2026): the game is now called Immoville; the contact address for privacy questions is immoville@2run.be; this page now lives at immoville.2run.be. The processing itself has not changed.