In short: you can play without an account. If you make one, we keep your email address, racer name and game progress so you can play on any device. In the iOS and Android apps, Google AdMob shows ads, and you choose whether they may be personalised. We don't sell your data. You can delete your account from inside the game at any time.
Who we are
Soapcube Racing ("we", "us") makes the Soapcube Racing game (the "Game"), on iOS, Android and the web. Soapcube Racing is the data controller for the personal data described here, and is based in Italy.
Questions or requests about your data: privacy@soapcuberacing.world
What we collect, and why
Playing without an account
Your settings, best times, career progress and controls layout are saved on your device only. We don't receive them. If you play online as a guest, the game server gets a random guest name and your car's look for as long as you're connected.
If you create an account
| Data | Why |
|---|---|
| Email address and password (the password is stored only as a secure hash) | To sign you in, confirm your address, and let you reset your password |
| Racer name (made from your email, and you can change it) | Shown to other players in online races |
| Best times, career progress, unlocked cars, account creation date | To keep your progress and show it on every device |
| Purchases you make, and what they unlock | To give you what you bought, on every device |
Legal basis: performing our agreement with you, which means providing the account and the game you asked for (GDPR Art. 6(1)(b)).
Online races
While you race online, the game server handles your racer name, your car's look, your car's position on the track, and your results, and passes them to the other players in your race. Your IP address is used to keep the connection working and to block abuse (for example, too many sign-in attempts). Races aren't stored after they end, and IP addresses are held in memory only, not saved. Legal basis: performing our agreement with you, and our legitimate interest in keeping the service secure (Art. 6(1)(b) and (f)).
Emails
We only email you for your account: the welcome email with your confirmation code, password reset codes, and security notices such as "your password was changed". We don't send marketing emails.
Ads (iOS and Android apps)
The apps show a full-screen ad after some races, from Google AdMob. To show and measure ads, Google may collect your device's advertising identifier, your IP address, and information about your device and how you interact with ads.
- Your choice. If you are in the EEA, the UK or Switzerland, the app asks for your consent the first time you open it, using Google's consent form. Without consent, you may still see ads, but they are not personalised. You can change your choice at any time in Options → Ad privacy choices.
- iPhone. iOS asks whether the app may track you. If you say no, your advertising identifier isn't shared.
- Legal basis: your consent for personalised ads (Art. 6(1)(a)). Google acts as an independent controller for its own processing; see how Google uses information from apps that use its services.
The web version of the Game has no ads.
Purchases
Payments are handled entirely by Apple (App Store) or Google (Google Play). We never see your card or payment details. RevenueCat tells us what you bought (the product, the date, and a store transaction ID) so we can link it to your account.
Who processes data for us
We use these providers to run the Game. They only process data on our instructions:
- Supabase: accounts and saved progress (database and sign-in)
- Render: the multiplayer game server (Frankfurt, EU)
- Resend: sends the account emails
- RevenueCat: in-app purchase records
- Google AdMob: ads in the apps (see above)
- Apple and Google: app distribution and payments
Some of these providers may process data outside the European Economic Area, for example in the United States. When they do, the transfer is protected by the European Commission's Standard Contractual Clauses or an adequacy decision (such as the EU–US Data Privacy Framework).
We don't sell your personal data, and we don't share it for any other purpose.
How long we keep it
- Account data: until you delete your account. It is then removed straight away.
- Purchase records: as long as the law requires us to keep them (for tax and accounting, usually up to 10 years in Italy).
- Online race data and IP addresses: only while you're connected.
- Data on your device: until you delete the app or clear its data.
Your rights
Under the GDPR you can ask us to access, correct, delete or export your data, and you can object to or restrict how we use it. Where we rely on your consent, you can withdraw it at any time.
- Delete your account: in the game, go to Account → Delete account. This removes your account and online progress for good.
- Change your racer name or password: in Account.
- Ad choices: in Options → Ad privacy choices (in the apps).
- Anything else: email privacy@soapcuberacing.world. We reply within one month.
You can also complain to a data protection authority. In Italy that is the Garante per la protezione dei dati personali.
Children
The Game isn't directed at children under 13, and we don't knowingly collect their data. In the EU, players younger than the age of digital consent in their country (14 in Italy) need a parent's permission to create an account. If you believe a child has given us personal data without that permission, contact us and we will delete it.
Security
Connections to our servers are encrypted (HTTPS/TLS), and passwords are stored only as secure hashes. Access to the data is limited to what is needed to run the Game.
Changes to this policy
If we change this policy, we'll update the date at the top. If the changes are important, we'll also tell you in the Game.