Last changed October 13, 2026.
Authorized Loitering is a game run by One Man's Junk Games. This page says what the game keeps about you, why, and how to have it removed. It is short because the game keeps very little.
What is kept
- Your email address, so you can log in and reset your password. It is never shown to other players and never sold or shared for advertising.
- Your password, stored only as a one-way hash. Nobody, staff included, can read it.
- What you do in the game: the certificates you earn and when, where you are in the building, how you left each room, what you carry and what you have left behind, hints you have bought, and the alias and ID photo you choose.
- When you were last active, so the building can say who is in it.
- A record of your log-in session: a session cookie, and with it the internet address and browser you logged in from. This is what keeps you logged in and lets you see where your account is open.
- If you were invited by email, the address the invitation was sent to, with the code.
- If you set up two-step sign-in or a passkey, what is needed to check it.
The game does not ask for your name, your age, your location or a payment method, and does not keep them.
What other players can see
Your applicant number, your alias if you file one, your ID photo, your rank and your certificates, including on the Registry and on your profile. Things you leave in the building for others may carry your number. In your settings you can ask to leave no trace, which stops your number being shown on things you leave behind.
Nobody but staff ever sees your email address.
Cookies and tracking
The game sets the cookies it needs to keep you logged in and to protect its forms, and remembers a few choices, such as whether sound is on, in your browser. There is no advertising, no analytics and no tracking across other sites.
Who else handles it
- Cloudflare carries traffic between you and the game, and sees your internet address as any network does.
- Google Fonts supplies the typefaces, so your browser asks Google for them when a page loads.
- Resend delivers the Bureau's two letters: an invitation, if somebody at the Bureau invited you, and the email that resets a password when you ask for one. It is given your email address to do so.
The game itself, and everything it keeps, is on a server run by One Man's Junk Games in New York, in the United States.
How long it is kept
For as long as you have an account. Backups are kept on a rolling schedule and are overwritten as they age.
Having it removed, or seeing it
Write to [email protected] from the email address on your account and ask for your account to be deleted, or for a copy of what is kept. Deletion removes your account, your certificates and everything else listed above. It is done by a person, usually within a few days and always within 30, and cannot be undone.
Age
The game is for people aged 13 and over. If you are younger, please do not register. An account found to belong to somebody younger is deleted.
Changes
If the game starts keeping something it does not keep today, this page will say so before it does, and the date at the top will change.