Privacy Policy

Effective date: 12 November 2026

In short. DynoRacer is a drag racing game. Your game progress is kept on your device. To keep the game free and working we use Google services: AdMob shows ads, Firebase (with Google Analytics and Crashlytics) tells us how the game is played and why it crashed, and Google Play and the App Store handle purchases. We never see your payment card details and we do not sell your personal data. In the European Economic Area, the UK and Switzerland we ask for your consent before ads are personalised, and on iOS we ask before any tracking.

1. Who we are

This policy covers the DynoRacer game for Android and iOS ("the game") and the website dynoracer.com. The controller of your personal data is Szymon Nytko ("we", "us"). Contact: contact@dynoracer.com.

2. What data is collected

2.1 Data you give us

Player name - the nickname you choose in the game (we suggest one; you can change it). Do not use your real name if you do not want to.
Messages - what you write to us by e-mail (for example a support request), and your e-mail address.

2.2 Game data

Your progress, cars, parts, settings, records and achievements. They are stored on your device.
If you choose to sign in (for cloud saves or online features, when available), your game data is also stored in Google Cloud Firestore and linked to an account identifier from Firebase Authentication (for example Sign in with Google or Sign in with Apple). We do not receive your password.

2.3 Data collected automatically

Device and app information - device model, operating system and version, language, screen size, app version, country or region (derived from your IP address).
Identifiers - the Firebase app instance and installation IDs, the Crashlytics installation identifier and, for ads, the device's advertising identifier (Google Advertising ID on Android; on iOS the IDFA only if you allow tracking).
Usage data - events such as sessions, screens opened, races started and finished, levels reached and purchases made, with their timestamps.
Crash and diagnostic data - when the game crashes or errors: the stack trace, device state (for example free memory and disk, orientation, whether the app was in the foreground) and the time of the crash.
Ad data - collected by Google AdMob: advertising identifier, IP address, device information, ads shown and your interactions with them (views, clicks, rewards earned).

2.4 Purchases

In-app purchases are processed by Google Play or the Apple App Store under their terms. We receive a confirmation of the purchase - the product, an order or transaction identifier, the purchase token or receipt, the price, the currency and the date - which we may check with Google or Apple to make sure the purchase is genuine. We never receive or store your payment card or bank details.

3. Why we use it and on what legal basis

Purpose	Data	Legal basis (GDPR)
Running the game, saving your progress, cloud saves	Game data, player name, account identifier	Performance of a contract (Art. 6(1)(b))
Delivering and restoring purchases, preventing fraud	Purchase data, identifiers	Contract (Art. 6(1)(b)); legal obligations such as tax records (Art. 6(1)(c))
Finding and fixing crashes and bugs	Crash and diagnostic data, device information	Legitimate interest in a working, safe game (Art. 6(1)(f))
Understanding how the game is played and improving it (game balance, difficulty, which features are used)	Usage data, device information, identifiers	Consent where required (Art. 6(1)(a)); otherwise legitimate interest (Art. 6(1)(f))
Showing ads, including rewarded ads you choose to watch; measuring them; limiting how often you see them	Ad data, identifiers	Non-personalised ads: legitimate interest (Art. 6(1)(f)); personalised ads: your consent (Art. 6(1)(a))
Answering your messages	Messages, e-mail address	Legitimate interest (Art. 6(1)(f))

We may also change game settings remotely (Firebase Remote Config), for example prizes and difficulty, without changing the app; this uses your device information and identifiers.

4. Advertising and your choices

EEA, UK and Switzerland: the first time you play, a consent form (Google's User Messaging Platform, based on the IAB Transparency & Consent Framework) lets you accept or refuse personalised ads and related processing. You can change your choice at any time from the game's settings. If you refuse, you may still see non-personalised ads, chosen from context such as the app and your general location.
iOS: the game asks for permission under Apple's App Tracking Transparency before the IDFA can be used. You can change this in Settings > Privacy & Security > Tracking.
Android: you can reset or delete your advertising ID, or opt out of ads personalisation, in your device's settings (Settings > Google > Ads, or Settings > Privacy > Ads).
Watching rewarded ads is always optional.

How Google uses data from apps that use its services: policies.google.com/technologies/partner-sites.

5. Who we share it with

We do not sell your personal data. We share it only with the service providers that run parts of the game for us, and only for the purposes above:

Service	Provider	What it does	Privacy information
Google AdMob	Google Ireland Ltd / Google LLC	Ads	policies.google.com/privacy
Firebase: Google Analytics for Firebase, Crashlytics, Remote Config, Authentication, Cloud Firestore, Cloud Functions	Google LLC	Analytics, crash reports, remote settings, sign-in, cloud saves, purchase checks	firebase.google.com/support/privacy
Google Play	Google Ireland Ltd / Google LLC	Distribution, payments	policies.google.com/privacy
Apple App Store	Apple Inc. / Apple Distribution International	Distribution, payments	apple.com/legal/privacy
Cloudflare	Cloudflare, Inc.	Hosting this website	cloudflare.com/privacypolicy

For personalised advertising Google may act as an independent controller and may work with its certified ad partners, as described in the consent form. We may also disclose data if the law requires it, to protect our rights or users' safety, or to a successor if the game is transferred.

6. International transfers

Google, Apple and Cloudflare may process data in the United States and other countries outside the European Economic Area. Such transfers are covered by the EU-U.S. Data Privacy Framework (in which these companies participate) and/or the European Commission's Standard Contractual Clauses.

7. How long we keep it

Game data on your device: until you delete the game or its data.
Cloud saves and account data: until you delete your account or ask us to delete them.
Analytics event data: up to 14 months, then deleted automatically.
Crash reports: up to 90 days.
Purchase records: as long as tax and accounting law requires (in Poland generally 5 years from the end of the tax year).
E-mails: as long as needed to handle your request, then up to 2 years.

8. Children

The game is made for a general audience and is not directed to children under 13. We do not knowingly collect personal data from children under 13 (or under the age of digital consent in your country, in the EEA between 13 and 16) without a parent's or guardian's consent. If you believe a child has given us personal data, contact us and we will delete it.

9. Your rights

Depending on where you live you have the right to: access your data and get a copy; correct it; delete it; restrict or object to its processing (including processing based on legitimate interest and direct marketing); data portability; and withdraw consent at any time (this does not affect processing before the withdrawal). To use these rights write to contact@dynoracer.com; we answer within one month. You can also lodge a complaint with a data protection authority - in Poland the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or the authority in your country.

California residents (CCPA/CPRA): we do not sell personal information. Ads personalisation may count as "sharing" for cross-context behavioural advertising; you can opt out through your device's ad settings (section 4) or by writing to us. We will not discriminate against you for using your rights. Categories collected: identifiers, internet or device activity, approximate geolocation (from IP), commercial information (purchases).

10. Deleting your data

On your device: uninstalling the game (or clearing its data) deletes your local progress.
Everything else: e-mail contact@dynoracer.com with the subject "Delete my data" and your player name (and, if you signed in, the e-mail of that account). We delete your cloud save and account, and ask Google to delete the analytics and crash data linked to your identifiers, within 30 days. Purchase records we must keep by law are kept as long as section 7 says.

11. Security

Data is sent over encrypted connections (HTTPS/TLS) and stored by our providers with industry-standard protection. No method is perfectly secure, but we take reasonable measures to protect your data.

12. Changes

We may update this policy when the game or the law changes. We will publish the new version here with a new effective date and, for important changes, tell you in the game.

13. Contact

Szymon Nytko - contact@dynoracer.com