Privacy policy
This policy explains how we handle personal data in the game Death Laps (in the browser, on Android, on iOS and on the other platforms it is released on), on the online game servers and on the deathlaps.com website. If anything is unclear, get in touch.
In short
- You need no account to play offline. To play online, an email is enough, or not even that, in anonymous mode.
- We do not sell your data. The game's ads are not personalized.
- On the website, the Meta Pixel turns on only if you accept.
- Children aged 12 or under see no ads and send no usage statistics.
- You can delete your account from within the game, at any time.
Who is responsible
Death Laps belongs to POLICODE GAMES, a brand of POLICODE LTDA, the controller of your personal data (“we”). For anything about your data, including as the channel to our data protection officer, write to [email protected].
What data we handle and why
On the website
- Closed Beta list. If you sign up, we keep your email, the page's language, the country estimated from your IP, where you came from (the link or website that brought you) and the date, to let you know when access opens and when the game launches. Legal basis: your consent. Your IP is not stored: only a scrambled version (a hash), for 10 minutes, to limit abuse.
- Protection from robots. Cloudflare Turnstile looks at signals from your browser when you use the form, to tell whether you are a person. Legal basis: our legitimate interest in protecting the website.
-
Measurement and ads (Meta Pixel). Only with your consent: Meta receives your IP address, your
browser, the pages you visit and the visit and sign-up events, and sets the
_fbpand_fbccookies. It is used to measure and show Death Laps ads on Facebook and Instagram. - Trailer (YouTube). Only if you open the trailer: YouTube's player loads in the page, in its privacy-enhanced mode (youtube-nocookie.com), and Google receives your IP address and browser data and, once the video plays, may store data in your browser. Unless you open the trailer, nothing is loaded from YouTube.
- Preferences. Your language, whether the video is paused, whether you have signed up and your cookie choice are kept only in your browser.
In the game, with or without an account
- Progress on your device. Your progress, settings, language, offline driver name, year of birth, age group, parental controls and a random installation identifier are kept on your device. Your year of birth never leaves it: only your age group is used elsewhere, to fit the game to you (see Children and teenagers).
- Usage statistics (PostHog). The platform, the game version and events such as finished races (league, place and prize), store visits, purchase steps and rewarded videos, tied to the random installation identifier, with no name or email. Your IP address reaches the service when the events are sent. They help us balance the game and find problems. Legal basis: our legitimate interest. You can turn them off in Settings → Account & Purchases → Privacy → Anonymous usage statistics, and they are never sent by children aged 12 or under.
- Rewarded videos (Google). AdMob on phones and Google H5 Games Ads in the browser. The ads are not personalized, but Google processes your IP address, device data and identifiers (such as the Android advertising ID) to show the ad, cap its frequency, measure it and prevent fraud. Where the law requires it (such as in Europe and the United Kingdom), Google asks for your consent, which you can review in Settings → Account & Purchases → Ad privacy options. Children aged 12 or under and anyone who bought the Lifetime Sponsorship see no ads.
In your online account
- Sign-in. Your email (if you create an account), the account identifier, whether it is anonymous and sign-in records (date, IP address and device or browser). The sign-in code is sent to your email.
- Profile. Your driver name (or “Piloto” and a number, for anonymous accounts), online money, Skulls, the selected car and stats (races, wins, podiums, eliminations and prizes), plus the session that keeps the account active on one device at a time.
- Online garage and inventory. Cars, paints, upgrades, weapons, items, purchased products and the history of money and Skull transactions.
- Races. The room, the track, the results (driver name, car, place, eliminations and prize), your rating in each season's ranking and the replay of each race (the commands and the cars' positions, with no names).
- Cloud copy of the offline game. With an email account, your offline progress is copied to the account so you can continue on another device (without the device's settings or your year of birth).
- Chat. Messages are delivered instantly to whoever is in the lobby or room and kept only in the server's memory (the last 30). They are never saved to the database or to logs.
We use this data to provide online play: signing in, syncing progress, setting up races and rankings and preventing cheating. Legal basis: performing our contract with you (these services are the game you asked for) and, for security and fighting cheating, our legitimate interest.
When you buy
On phones, payment is made through the App Store (Apple) or Google Play; in the browser, through RevenueCat with Stripe, which receives your payment details and your email. We never receive your card details: we receive the product, the date, the price, the transaction codes and whether it was refunded. We use this data to deliver and restore what you bought, handle refunds and prevent fraud. Legal basis: performing the contract and complying with legal obligations (such as tax and consumer protection rules).
When you contact us
Your email, what you write and what you send, to answer your request. Legal basis: our legitimate interest in helping you or, for requests about your data, complying with a legal obligation.
International transfers
Some of these providers store or process data outside Brazil, mainly in the United States. We only do so with the safeguards the law provides, such as standard contractual clauses (Brazil's General Data Protection Law, article 33, and the European General Data Protection Regulation, chapter V).
How long we keep it
- Account and online game data: as long as the account exists. When you delete the account, they are erased.
- Replays: 14 days.
- Race results and season rankings: they stay in the game's history, so that other people's standings do not change; after the account is deleted, they are no longer tied to it, but may still show the driver name used in the race.
- Purchase records: for as long as legal obligations require (usually 5 years) and to prevent fraud; after the account is deleted, no longer tied to it.
- Chat: not kept.
- Usage statistics: while they help improve the game, always without a name or email.
- Closed Beta list: until the game launches, or until you ask to leave it.
- Website: your cookie choice lasts 6 months; Meta's cookies last up to 90 days.
- Server technical records (logs): up to 30 days.
- Database backups: replaced within 90 days.
- Requests and conversations with us: for as long as needed to resolve them and to show that we answered.
- Data on your device: until you erase it, by uninstalling the app or clearing the site's data in the browser.
Children and teenagers
The first time the game is opened, we ask for the year of birth, which stays on the device, to fit the game to the player's age: children aged 12 or under see no ads and send no usage statistics, and anyone under 18 can only make real-money purchases after an adults-only check. In Settings → Account & Purchases → Parental controls, an adult can turn off purchases and rewarded videos.
Children should only create an online account with a parent's or guardian's permission and supervision. If you are a parent or guardian and believe a child has given us data without your permission, write to [email protected] and we will delete it.
Your rights
Under Brazil's General Data Protection Law (LGPD), the European General Data Protection Regulation (GDPR) and other privacy laws, you may, as the case may be:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or out-of-date data;
- ask for unnecessary or unlawfully processed data to be anonymized, blocked or deleted;
- receive your data in a format that lets you take it to another service (portability);
- know who we share your data with;
- withdraw your consent and ask for the data processed on that basis to be deleted;
- object to processing based on legitimate interest, or ask for it to be restricted;
- delete your account.
You can do a lot yourself in the game: turn off statistics, review your ad consent and delete your account. For everything else, write to [email protected], ideally from your account's email (so we can confirm it is you). We answer within 15 days. You may also complain to Brazil's National Data Protection Authority (ANPD) or, in Europe, to your country's data protection authority.
California and other US states: you have the right to know what data we process, to ask for it to be deleted or corrected, and not to be discriminated against for exercising these rights. We do not sell personal data; the website's Meta Pixel may count as “sharing” for targeted advertising, which is why it only turns on if you accept (Do Not Sell or Share My Personal Information). We honor the Global Privacy Control signal.
Security
Data travels encrypted (HTTPS), access to our systems is restricted to our team, signing in uses codes sent by email (there are no passwords to leak) and the server checks every move. No system is completely secure: if an incident could bring you relevant risk or harm, we will notify you and the authorities, as the law requires.
Changes to this policy
We may update this policy when the game, our providers or the law change. The date at the top shows the version in force, and important changes will be announced in the game or on the website before they take effect.
Contact
POLICODE LTDA (POLICODE GAMES) — [email protected].