Privacy Policy

TinyTown (playtinytown.com) is a community-run Motor Town server. This policy explains what information we collect when you visit the website, sign in, play on the game server, or interact with our Discord bot, and what we do with that information.

TinyTown is operated by community volunteers. We are not affiliated with the Motor Town developers, Valve / Steam, Discord, Google, or any other third-party service named in this policy.

Account information (when you sign in)

We use Discord OAuth to sign you in. When you authorize the sign-in we receive your Discord user ID, username, avatar, and email address. We store these so we can identify you across sessions and contact you about your account where necessary.

Steam ID and in-game identity

When you connect to the game server, the server records your Steam ID, your Steam display name, and may link it to your website account. We use this to attribute in-game activity (deliveries, hauls, calls responded to, leaderboard entries, etc.) to a single profile.

Gameplay and server data

While you are connected to the game server we collect operational data exposed by the Motor Town server API, including: connection and disconnection times, in-game position and vehicle, deliveries and freight runs, earnings, vehicles owned, housing ownership, and chat messages sent in-game. This data is used to power features like the live map, CAD (computer-aided dispatch), leaderboards, achievements, and moderation tools.

Content you submit

We store content you create on the site or via the bot, including: 911 calls, BOLOs, CAD notes, tickets, gigs, group and company pages, wiki articles and revisions, newsroom (TNN) posts and comments, applications, and chat messages. Submitted content is associated with your account.

Technical information

Like virtually every website, our hosting provider and reverse proxy (Cloudflare and Caddy) automatically receive standard request metadata — your IP address, user agent, referrer, and the URL you requested — for the purpose of routing traffic, blocking abuse, and producing aggregate logs. This information may be retained in server logs for a short period.

Moderation records

If a moderator takes action on your account or content (warning, mute, kick, ban, restriction), we record that action, the reason, and who performed it.

• To sign you in and maintain your session.
• To display in-game activity on the site (map, leaderboards, profiles, achievements).
• To operate community features such as CAD, calls, gigs, freight, deeds, the wiki, TNN, groups, and companies.
• To run moderation: enforcing the community rules, investigating reports, and applying sanctions.
• To communicate with you about your account, applications, or reports — usually via Discord.
• To understand aggregate site usage so we can prioritize features and fix problems (see Site analytics).
• To protect the site from abuse, fraud, scraping, and attacks.

We do not sell your personal information. We do not show third-party ads on TinyTown.

We use cookies and similar browser storage for the following purposes:

• Authentication. A session cookie issued after you sign in, used to keep you signed in on subsequent visits.
• Security. Cookies used by our reverse proxy and Cloudflare to detect abuse and bots.
• Preferences. Local storage used to remember UI preferences (for example, which background image is showing).

We do not use third-party advertising cookies, third-party analytics cookies, or cross-site tracking pixels. Our own analytics (described in the next section) runs server-side and does not require a tracking cookie.

You can block or clear cookies in your browser at any time. If you block our authentication cookie you will not be able to sign in.

TinyTown uses its own in-house analytics engine to understand how the site is being used in aggregate. We do not use Google Analytics or any other third-party analytics product. All analytics data is collected, stored, and processed on our own infrastructure and is never sold or sent to advertisers.

Our analytics records the kind of information you would expect for a basic usage report: the URL that was requested, the time of the request, the referring URL (where you came from), a coarse classification of your device and browser derived from your user agent, and an approximate location derived from your IP address. Where you are signed in, the request is associated with your account so we can build per-user features such as your own activity history; where you are signed out, the request is not associated with any identity beyond the technical fields above.

We use this data to monitor site performance and reliability, find pages that are broken or slow, prioritize features the community actually uses, and detect abuse. Aggregate analytics are kept for as long as they remain useful; raw request-level rows are retained for a short window and then either deleted or rolled up.

If you would prefer your visits not be recorded, you can block requests to our analytics endpoint in your browser, or enable a tracking-protection feature such as the one built into most modern browsers — our analytics is a first-party endpoint so blocking it will not affect the rest of the site.

TinyTown relies on the following third parties to operate. Each of them processes some of your data subject to their own privacy policy:

• Discord — sign-in (OAuth), the community Discord server, and the TinyTown bot. (policy)
• Steam / Valve — Steam IDs and display names exposed by the Motor Town game server. (policy)
• Motor Town server — game-server activity polled via the official server API.
• Cloudflare — DNS, CDN, DDoS protection, and bot mitigation for the website. (policy)
• OVHcloud — the underlying server hosting the website, database, poller, and game server. (policy)
• Google Fonts — fonts served by Next.js's self-hosting layer, so they do not directly contact Google from your browser.

Analytics is handled by our own in-house system, not by a third party — see the previous section.

Some of the data we collect is intentionally public because it is part of the community experience: your display name and avatar, content you post (wiki articles, TNN posts, comments, group pages, etc.), publicly listed gameplay activity (leaderboards, recent deliveries, achievements), and 911 calls and CAD activity, which are publicly viewable so the community can follow ongoing roleplay.

Beyond what is intentionally public, we do not sell, rent, or share your personal data with third parties for their own purposes. We may share data:

• With the third-party processors named above, as required for them to provide their service.
• When required by law, valid legal process, or to protect the safety of users or the public.
• With moderation staff, who can see account details, moderation history, and submitted content as needed to enforce the rules.

We keep account and content data for as long as your account exists. If you ask us to delete your account we will remove personally identifying fields (email, display name, avatar) and detach your account from posted content where it is reasonable to do so; content that is part of the public community record (rule decisions, news posts, wiki edits) may be retained with your identity removed.

Server access logs and analytics data are retained for shorter periods set by the respective providers.

Depending on where you live, you may have rights under laws like the EU GDPR or the California CCPA to access, correct, export, or delete the personal data we hold about you, and to object to certain processing.

To exercise any of these rights — including deleting your account — contact us using the details in the Contact section. We will respond within a reasonable time. You can also adjust most preferences yourself on your account page, and block analytics in your browser as described above.

We use industry-standard measures to protect your data, including HTTPS in transit, access controls on the database and admin tooling, and multi-factor authentication for staff accounts. No online service can guarantee perfect security; please use a strong, unique password on Discord and enable Discord's two-factor authentication.

TinyTown is not directed at children under 13, and the Discord Terms of Service require all users to be at least 13 years old (or older in some regions). If we learn we have collected information from a child under 13 we will delete it.

We may update this policy from time to time as the site changes. When we do we will update the “Last updated” date at the top. Continued use of the site after a change indicates acceptance of the revised policy.

Questions or privacy requests? Reach out to the TinyTown staff team on our community Discord, or contact the site operator directly at [email protected].