What the beta needs, what it stores, and why.

Account and identity data

Plot Luck uses Firebase Authentication for account identity. Current normal accounts use email and password. A Firebase UID is the durable account key used to associate player data with the correct account. Public game identity information can include a chosen Plot Luck Identity and game-facing ownership information.

Private profile information

Profile information such as account email and Signature profile details is separated from publicly readable game identity data where the current beta architecture supports that separation. Private account fields are intended to be accessible only to the authenticated owner through Firestore Security Rules.

Location

The game requests device geolocation because map position, nearby grid cells, Plot interactions, and movement depend on location. Plot Luck may store gameplay-location or recovery information associated with the player UID so a session can recover state across devices or reloads. Location permissions can be controlled through the browser or device.

Gameplay data

Plot ownership, inventory, movement counters, tutorial state, Neons, dig results, item balances, and similar game state may be stored in Firebase so the beta can persist between sessions.

Signature images

If a verified player chooses to upload a Signature image, Plot Luck creates a compressed game-ready image associated with that UID. A player can apply the canonical image to selected owned Plots. Because stamps are rendered on the shared map, a stamped image is intended to be visible to other players when that Plot is displayed.

Local device storage

The browser may use localStorage, sessionStorage, service-worker/PWA state, or similar browser storage for interface preferences, session handoffs, install behavior, and temporary beta state. These mechanisms supplement—not replace—the Firebase account data used for durable player state.

Advertising and third-party services

Plot Luck may use third-party advertising, map, hosting, authentication, and analytics services. Google AdSense code is present while the site is under review. Ad providers may use cookies, device information, or similar technologies according to their own policies and applicable consent requirements. Advertising channels marked “Coming Soon” are not represented as active providers.

Security

Firestore Security Rules are used to restrict writes and sensitive account reads by Firebase UID. Security work is ongoing during beta; newly discovered issues may result in rule or data-structure changes.

Account deletion and privacy requests

To request deletion of a Plot Luck account and its associated user data, use the dedicated Delete Account page or the DELETE ACCOUNT control inside SIGNATURE. When a deletion is processed, account and player data tied to the Firebase UID are deleted or released as appropriate. Minimal security, anti-abuse, transaction-integrity, or request-handling records may be retained when reasonably necessary; deletion-request handling records may be retained for up to 90 days after completion. For other privacy requests, use the route described on the Contact Us page. Never send your password.