Last updated 8 October 2026
Privacy
FourCities uses no cookies and keeps no profile of you. We count visits and clicks in aggregate to learn whether people find the game and start playing. This page explains exactly what that means.
Who we are
FourCities is a browser game made by an independent developer. For anything about your data, write to privacy@fourcities.app.
What this website collects
When you visit fourcities.app, your browser sends us:
- the page you viewed and the site you came from;
- which Play button you clicked, if any;
- your browser, operating system, device type and screen size.
Your IP address and browser details are used when an event is received to compute an anonymous hash, which lets us count unique visitors for a day. The salt behind the hash changes daily, so visits on different days can't be linked. We don't store your IP address, and we don't send names, email addresses or anything you type.
Nothing is stored on your device for this: no cookies, no local storage, no fingerprinting script. If your browser sends a Do Not Track signal, nothing is sent at all.
Why, and on what basis
We want to know how many people visit, where they come from and how many go on to play, so we can improve the game and the site. This is our legitimate interest (Article 6(1)(f) GDPR). Because the data is aggregate and can't be tied to you, we believe it doesn't override your interests. You can object at any time by enabling Do Not Track or blocking the requests in your browser, or by writing to us.
Who processes it
- PostHog counts the events for us as a data processor, under a data processing agreement. The data is stored in PostHog's EU region (Frankfurt, Germany).
- Cloudflare serves the website and the game. Like any web host, it handles your IP address to deliver pages and protect against abuse.
- Google Fonts serves the fonts this site uses, which means your browser connects to Google to load them.
How long we keep it
Analytics events are kept for up to 12 months, then deleted.
The game
The game at play.fourcities.app counts play in the same cookieless way: the page view, when a match starts (solo, tutorial, loaded or online, with its length, rival difficulty and starting cash), tutorial steps reached, your first line and first train, every 25 game-years reached, and when a match ends or is left, with the game year and final rank. It never sends your player name, room codes, server addresses or map seeds.
The game also keeps your saved games, settings and, in online matches, a seat token in your own browser. That is needed for the game to work, never leaves your device except as described below, and you can clear it with your browser's site data settings.
In an online match, the name you enter and your moves go to the game server so the other players can see them. The server keeps them in memory only for the match and drops a room 30 minutes after everyone has left.
Your rights
You have the right to access, correct, erase or restrict data about you, and to object to its use. Because we don't store identifiers, we usually can't find data belonging to a particular person, but write to us and we'll help as far as we can. You can also complain to your local data protection authority.
Changes
If we change what we collect, we'll update this page first.