Privacy Policy

Who we are

InsideLife is a free strategy game set in Lagos, played at insidelife.app and in the InsideLife app. InsideLife ("we", "us") decides how the information on this page is used, and is responsible for it under the Nigeria Data Protection Act 2023.

Questions, or anything you want to ask us to do with your data: email [email protected], or use Help → Contact in the game.

What we collect

• Your account: your username, your password (kept only as a scrambled hash, so nobody at InsideLife can read it), your confirmation that you are 18 or older, and your email address if you give one.
• Your play: what you do in the game, such as your cabal and its place on the map, your buildings, fights, clan, items, level, the choices you make for your character, and when you play.
• What you post: your profile picture and status line, chat and private messages, pictures and voice notes you send, ads you place in the game, reports you make, and suggestions and bug reports. A bug report also carries the screen you were on, the app version and a short device line such as "iPhone · iOS 18.6 · Safari".
• Payments: when you buy something with real money, you pay on Paystack's own page. We never see or keep your card number or PIN. We keep the payment reference, the amount, what you bought, whether it went through, and the email address you gave for the receipt.
• Prizes: to pay you a real-cash prize (from a gift box or an invite prize), your bank, your account number and the name your bank gives for that account.
• Your device and network: your IP address when you connect; a scrambled record (a hash) of the network and browser you signed up on and claimed prizes on, which can't be turned back into your address; a random number your browser keeps so we can count daily visits; and, only if you turn on notifications, the push address your browser gives us.

We don't ask for your real name (except the name your bank gives for a prize), your home address, your contacts or your phone's location. Pictures you send have their location data and other hidden details removed before we store them.

Why we use it

• To run the game and your account: signing you in, saving your progress, showing your messages, delivering what you buy and paying prizes you win. We need this to give you the game you signed up for.
• To keep the game fair and safe: stopping cheating, extra accounts, prize fraud, spam and abuse, and dealing with reports. This is our legitimate interest, and the interest of every other player.
• To email you: password reset codes when you ask for one, and emails when we drop a prize in the game. You can turn prize emails off in the game (Me → Emails about prize drops) or with the unsubscribe link in any of them.
• To send notifications, only if you allowed them on your device. You can turn them off in your browser or phone settings at any time.
• To understand and improve the game, from counts such as visits a day and how many players saw an ad.
• To meet the law: keeping payment and prize records, and answering lawful requests from the authorities.

We don't sell your data. There are no advertising trackers or outside analytics in InsideLife. Brands that advertise inside the game see how many times their ad was seen, never who saw it.

What other players see

• Your username, profile picture, level, cabal on the map, clan, status line, and what you post in group chats.
• Private messages are seen by the people in that conversation. InsideLife's admins can see messages, pictures and voice notes when they need to, such as to deal with a report, keep players safe or meet the law.
• Your email, bank details, IP address and payment details are never shown to other players.

Who we share it with

Only the companies that help us run InsideLife, each for its own job:

• DigitalOcean hosts our servers, database and the pictures and voice notes players send.
• Cloudflare delivers the site and protects it from attacks, so it handles your connection.
• Paystack takes card payments, checks bank account names, and sends prize money.
• Brevo sends our emails.
• Radio stations: the radio in the game's clubs plays straight from the station, so the station sees your IP address while it plays.
• Your browser's push service (from Apple, Google or Mozilla) delivers notifications, if you turned them on.

We also share information when the law requires it, or when it's needed to protect someone's safety. If InsideLife is ever sold or merged, your information would pass to the new owner under this policy.

Where it's stored

Our servers are in London, United Kingdom, so your information leaves Nigeria. The UK's data protection law gives it protection at least as strong as Nigeria's, and our providers are bound by contract to protect it.

How long we keep it

• Your account and game: while your account is open.
• When you ask us to delete your account, we delete it or make it anonymous within 30 days, except for what the law makes us keep or what we need to stop fraud: payment and prize records (kept as long as tax and financial law requires), the scrambled device and network records, and bank accounts already used for a prize.
• Reports and what was reported: as long as we need them to deal with the report and any repeat.
• Server logs: only for a short time, to keep the game running and secure.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

• tell you what we hold about you and give you a copy, in a form you can take elsewhere;
• correct anything that is wrong;
• delete your account and your information;
• stop or limit using it, or object to how we use it;
• withdraw any consent you gave, such as for notifications.

Email [email protected] from the email address on your account, or tell us your username. We may ask you to prove the account is yours, for example by messaging InsideLife HQ from it in the game. We'll answer within 30 days.

One decision is made automatically: a real-cash prize is cancelled if the bank account was already used for another player's prize. You'll get a message from InsideLife HQ saying why, and you can reply to it to have a person look again.

If you're not happy with how we handle your data, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

18 and older only

InsideLife is for adults. Everyone confirms they are 18 or older when they sign up. If we learn that a player is under 18, we close the account and delete their information.

Cookies and storage on your device

• One cookie, ln_session, keeps you signed in for up to 30 days. It's needed for the game to work.
• Your browser also keeps your game settings (such as sound and music off, and tips you've seen), the random number for counting visits, and the game's files so it opens fast.
• We use no advertising or tracking cookies. Paystack's payment page sets its own cookies under Paystack's privacy policy.

Keeping it safe

Every connection is encrypted (HTTPS), passwords are stored only as Argon2 hashes, and only InsideLife's admins can see bank details. No system is perfect: if a breach is likely to put you at risk, we'll tell you and the Nigeria Data Protection Commission as the law requires.

Changes to this policy

When this policy changes, we update it here and change the date at the bottom. If a change is big, we'll tell you in the game first.