Privacy policy

Who runs IdleRevs

IdleRevs is made and run by an independent developer. We are the controller of the personal data described here. For any privacy question or request, email contact@idlerevs.com.

What we collect

• Account details. Your email address, username and password. We store the password only as a secure hash, never as plain text. If you sign in with Google, we receive your Google account's email address, name and profile picture.
• Guest garages. When you play without an account, we create a guest account with a random username and no email address.
• Game data. Your cars, parts, tunes, races, lap times, cash, reputation, achievements, perks, event results, club membership and notifications.
• Messages. What you write in public chat, club chat, private messages and club bulletins.
• Feedback. Feedback, bug reports and poll votes you send from the roadmap, including any device or browser details you choose to type in.
• Sign-in and connection data. For each signed-in session we store your IP address, your browser's user agent and when the session started. Our web server also logs requests with IP addresses to keep the service running and secure.
• Referral tag. If you arrive through a link that carries a referral tag, such as a post on a gaming site, we store that tag with your account. It is the only marketing data we keep.

Why we use it

• To run the game you asked for. Your account and game data let you log in, keep your garage, race, and take part in events, leaderboards, clubs and chat. The legal basis is our contract with you, set out in the terms of service.
• To keep IdleRevs safe and fair. We use sign-in and connection data, messages and game data to stop cheating, spam, abuse and attacks, and to enforce chat rules. The legal basis is our legitimate interest in a secure, fair game.
• To improve the game. We read feedback and bug reports, and look at overall play patterns and page view counts to balance the game and see which pages players use. The legal basis is our legitimate interest in making IdleRevs better.
• To contact you about your account. We may email you about your account, such as a password reset or an important change to these documents. We don't send marketing emails.

What other players can see

Other players can see your username, driver level, reputation, achievements, club, leaderboard times and the cars used for them, and the messages you post in public or club chat. Private messages are visible to you and the recipient. Our moderators can see any message when they review a report or enforce chat rules.

Who we share it with

We share data only with the services that run IdleRevs:

• Our hosting provider runs the servers and database the game lives on.
• Cloudflare sits in front of the site to deliver pages and block attacks. All traffic, including your IP address, passes through it. We also use Cloudflare Web Analytics to count page views. It records the page, the referring site, your browser type, your country and how fast the page loaded. It uses no cookies and doesn't track you across other sites. When you create an account, start a guest garage or ask for a password reset, Cloudflare Turnstile checks that you're a person. It looks at signals from your browser and doesn't use them for advertising.
• Resend sends account emails, such as password reset links. It receives your email address and the email's content.
• Google serves the fonts and icons used in the game, so your browser requests them from Google's servers. If you choose to sign in with Google, Google also handles that sign-in.

Some of these companies process data outside the European Economic Area. Where they do, they rely on safeguards such as the European Commission's standard contractual clauses. We may also disclose data if the law requires it.

Cookies and browser storage

We use one essential cookie to keep you signed in. Without it the game can't work, so it doesn't need your consent. We don't use advertising or tracking cookies.

The game also saves a few settings in your browser's local storage, such as the last car you picked and where you placed the chat button. These stay on your device.

How long we keep it

• Account, game data and messages: for as long as your account exists.
• Sign-in sessions: they expire 7 days after your last visit, or 90 days for guest garages.
• Server request logs: only as long as needed for security and fixing problems.
• Backups: daily database backups are kept for 14 days, so deleted data disappears from them within that time.
• Feedback and bug reports: until the issue is resolved or no longer relevant.

When you delete your account, we delete or anonymize your personal data within 30 days. We may keep anonymized records, such as past event results, where removing them would change other players' history.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, or send it to you in a portable format. You can also object to how we use it or ask us to restrict it. To do any of this, email contact@idlerevs.com from the address on your account. We'll answer within 30 days.

If you think we've handled your data wrongly, you can complain to the data protection authority where you live.

Children

IdleRevs is not meant for children under 13. If you're under the age where you can agree to this policy yourself (16 in some countries), ask a parent or guardian before you register. If you believe a child has given us data without permission, email us and we'll delete it.

Changes to this policy

If we change this policy, we'll update the date at the top. For important changes we'll also tell you in the game before they take effect.