Privacy policy
Last updated: 27 October 2026
In short: you can play Hot Racers without giving us any personal data. If you choose to join the mailing list, we keep your email address and the few details you give us, only to send you news about the free game. We never sell or rent your data, there are no ads, and you can unsubscribe or have your data deleted at any time.
Who we are
Hot Racers is a free, non-commercial fan game made by Kwabena Sapong in Ghana, who is responsible for (the "controller" of) the data described here. Contact: kwabenasapong@gmail.com.
What we collect and why
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Mailing list (only if you sign up): email address; optional nickname, country and in-game player ID; the topics you picked; that you confirmed you're 16 or older; when and where (website or game) you consented | To send you emails about new tracks and cars, events and challenges, and game news, as you chose | Your consent (confirmed by double opt-in) | Until you unsubscribe or ask us to delete it. Unconfirmed sign-ups are not added to the list |
| Game progress: nickname, settings, cars, times, ghosts | So the game remembers you | Needed to provide the game | Stored on your device, plus the encrypted cloud backup below if it is on. Use Reset in Settings or clear site data to delete the copy on your device |
| Cloud backup of game progress (on by default, can be turned off in Settings › Profile and recovery): your game progress, encrypted on your device with a key made from your recovery code | So you can move your progress to another device or get it back with your recovery code | Needed to provide the feature you use | Until you delete it (Settings › Profile and recovery › Delete cloud backup) or ask us to. When you restore another code on a device, the backup under that device's old code is deleted. We can't read it: it is stored under a one-way hash and only your recovery code can unlock it |
| Online features: nickname, a random device key (we store only a one-way hash of it), friend code, lap times and ghost replays you submit, live race data | Online races, friends, world leaderboards and the weekly challenge | Needed to provide the features you use | Leaderboard entries until you remove them (in the game) or ask us to. Race data is not stored |
| Anonymous counts: per-day totals of players, races, online matches and sign-ups | To see whether the game is used and plan updates | Legitimate interest | Kept as totals. They contain no identifiers. You can turn them off in the game's Settings |
| Website analytics (Cloudflare Web Analytics, if enabled): page views, referrer, browser type and country, measured without cookies or fingerprinting | To understand which pages are useful | Legitimate interest | Aggregated by Cloudflare |
| Server logs kept by our hosts (IP address, browser, time) | Security and keeping the service running. Your IP address is also used, briefly and in memory, to rate-limit sign-ups | Legitimate interest | Short periods set by the hosts |
We don't use advertising or tracking cookies, and we don't build profiles of players.
Who processes data for us
- Brevo (Sendinblue SAS, France) stores the mailing list and sends the emails, as our processor under a data processing agreement. Brevo may record whether emails are opened or links clicked. See Brevo's privacy policy.
- Cloudflare runs the online backend (multiplayer, leaderboards, encrypted progress backups, sign-up handling) and, if enabled, the cookie-free Web Analytics. See Cloudflare's privacy policy.
- Netlify hosts this website. See Netlify's privacy policy.
These providers may process data outside your country, including in the EU and the USA, with the safeguards the law requires (for example standard contractual clauses). We never sell, rent or trade your personal data, and we don't share it with anyone else unless the law requires it.
What we email about
Only Hot Racers, which is and stays free: new tracks and cars, events and challenges, and game news, limited to the topics you picked. No ads for other products, nothing to buy.
Age
The mailing list is only for people aged 16 or older. The sign-up form doesn't send anything unless you confirm your age. If you believe someone younger has signed up, email us and we'll delete it. The game itself needs no personal data at any age.
Your rights
You can ask to access the data we hold about you, correct it, delete it, restrict or object to its use, get a copy to take elsewhere, and withdraw your consent at any time (this doesn't affect emails already sent). These rights come from the EU and UK General Data Protection Regulation (GDPR) and Ghana's Data Protection Act, 2012 (Act 843), and similar laws elsewhere.
- Unsubscribe: use the link at the bottom of any email.
- Delete your mailing-list data: unsubscribe or delete my data (we email you a confirmation link).
- Anything else: email kwabenasapong@gmail.com. We reply within 30 days.
You can also complain to a data protection authority: in Ghana the Data Protection Commission, in the EU or UK your local supervisory authority.
Security
Data travels over HTTPS. Access to the mailing list is limited to the game's maintainer, and the email service key is kept as an encrypted server secret. No system is perfectly secure, but we keep what we collect to the minimum.
Changes
If this policy changes in a way that matters, we'll update the date above and, for mailing-list members, mention it in the next email.