← Back to RyRacer

Privacy Policy

Effective date: May 15, 2026

Data We Collect

  • Race session tokens, car selection, track mode, source type, creation time, expiry time, and used status.
  • Leaderboard scores, 3-character initials, race duration, combo statistics, car id, created time, challenge id, and seasonal leaderboard placement.
  • Short-lived gameplay replay telemetry for score review and share pages.
  • Pack order ids, pack secrets, Bitcoin address, requested sat amount, payment status, transaction id, tier, and remaining race count.
  • Strike checkout ids, quote ids, payment status, amount, currency, timestamps, and webhook event ids.
  • Wager beta data, including wallet public keys, match ids, stake tier, race results, legal acknowledgments, Ark/Boltz/Lightning settlement metadata, payout/refund transaction metadata, session pointers, and signed wallet challenges.
  • Analytics consent choice stored in your browser and Vercel Analytics events only after consent.
  • Technical request data processed by the hosting provider, including IP address, user agent, timestamps, URL paths, and error logs.

Processors

RyRacer uses Vercel for hosting and analytics, Upstash Redis for application storage, Strike for Lightning invoices, mempool.space and Blockstream-compatible APIs for Bitcoin transaction verification, Arkade/Ark services for wallet and wager settlement flows, and Boltz for swap-related wager infrastructure.

Retention

  • Race session records expire after 1 hour unless a score is submitted.
  • Replay telemetry expires after up to 30 days.
  • Pack orders and browser pack cookies expire after 90 days.
  • Strike checkout records are retained for 30 days; webhook deduplication records are retained for 14 days.
  • Leaderboard scores remain until you submit a deletion request or operational cleanup removes orphaned entries.
  • Wager beta match, legal acknowledgment, payout, refund, and settlement records are retained as needed to settle, audit, investigate abuse, satisfy accounting/tax obligations, screen sanctions issues, and dispute match outcomes.

Your Rights

You can export or delete token-linked race, pack, and wager data through the privacy API. Submit a POST request to /api/privacy/export with your session token or pack resume token to export data. Submit a POST request to /api/privacy/deletewith the same token and {"confirm":"DELETE"} to delete it. Pack deletion forfeits any remaining race entitlement tied to that pack.

Wager exports include technically linked match records, session pointers, legal acknowledgment metadata, payout/refund metadata, Ark/Boltz/Lightning metadata, and wallet challenge presence where linkable. Wager deletion removes linkable session pointers and active wallet challenges where possible, but settlement, legal acknowledgment, payout, refund, fraud, accounting, and dispute records may be retained with a retention exception returned in the deletion response.

For manual requests, security reports, or jurisdiction-specific access, deletion, correction, portability, or opt-out requests, contact binmucker@proton.me.

Legal Basis And Region

We process payment and session data to perform the game transaction, security and abuse data for legitimate interests in fraud prevention, analytics only with consent, and records required for legal compliance where applicable. Data is primarily processed in infrastructure regions provided by Vercel, Upstash, and the listed payment or Bitcoin infrastructure providers, and may be processed in the United States or other regions where those providers operate.

Children

RyRacer is not intended for children under 13. Do not use RyRacer if you are under 13, and do not use paid or wager features unless you are legally permitted to do so in your jurisdiction.

No Sale Of Personal Information

RyRacer does not sell personal information. Analytics is consent-gated and can be declined without blocking gameplay.

Contact

Privacy contact: binmucker@proton.me. Site: https://ryracer.com.