Privacy Policy

Account data: email address and display name (via Firebase Authentication, email/password or Google sign-in).

Steam data (if you link your Steam account): your Steam ID, public display name, and avatar image URL, retrieved via the Steam Web API.

Payment data: if you subscribe to a paid tier, Stripe processes and stores your payment card details directly — we never see or store your full card number. We store your Stripe customer ID and subscription status to know which tier you're on.

Race and server data: session results, lap times, car/track selections, and server configuration you create, stored in Firestore and BigQuery so leaderboards and history work.

Technical/log data: IP addresses and request logs are captured automatically by Google Cloud Platform as part of standard infrastructure operation (not for tracking or advertising purposes).

We do not use third-party analytics, advertising, or tracking scripts (no Google Analytics, no ad pixels, no session-replay tools) as of the last-updated date above.

We do not sell your personal data to third parties.

- Account data: to authenticate you and associate your servers/results with your account.

- Steam data: to display your racing identity consistently across servers and leaderboards, if you choose to link it.

- Payment data: to bill paid subscriptions and manage upgrades/downgrades/cancellations.

- Race and server data: this is the core function of the Service — recording and displaying your race results and leaderboards.

- Technical/log data: security, abuse prevention, and debugging infrastructure issues.

- Stripe (payment processing) — receives what's needed to bill you; governed by Stripe's own privacy policy.

- Valve/Steam — receives your Steam ID when you initiate account linking, per Steam's own OpenID sign-in flow; we don't share additional data with Valve beyond what the Steam login flow itself requires.

- Google Cloud Platform — our infrastructure provider (Firebase Auth, Firestore, BigQuery, Cloud Functions, Compute Engine). Data is stored and processed on Google Cloud infrastructure, not shared with Google for advertising purposes.

We do not share your data with any other third parties.

Account and race/session data is retained for as long as your account is active. If you delete your account, we will delete your personal data (email, Steam link, display name) within a reasonable period, except where retention is required for legal/tax record-keeping (e.g. payment records).

Aggregated or anonymized race statistics (that no longer identify you personally) may be retained indefinitely for leaderboard/historical purposes.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data (for example, under GDPR in the EU/UK or CCPA in California). To exercise these rights, email hello@slytrunk.com and we will respond within a reasonable timeframe.

You can unlink your Steam account or delete your account at any time from your Profile page.

The Service uses browser local storage (not third-party tracking cookies) for two purposes: keeping you signed in (Firebase Authentication) and remembering that you've seen the cookie/privacy notice. These are strictly necessary for the Service to function and are not used for advertising or cross-site tracking.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date on this page.

Questions about this Privacy Policy, or a data access/deletion request? Email hello@slytrunk.com.