Privacy policy
Mars Rally Championship has no accounts, collects no emails, sets no advertising trackers, and sells nothing. This page lists exactly what the game keeps on your device, what reaches our servers when you use online features, and the analytics we run. Effective 13 July 2026.
Data that stays on your device
Your pilot profile lives in your browser's local storage, not on our servers: XP, credits, medals, streaks, cosmetics, achievements, settings, personal-best times with their ghost recordings, your pilot call sign, and two random device identifiers the game mints on first run (used to recognize this device — they contain nothing about you). Clearing your browser's site data removes all of it; we cannot restore a cleared profile.
Data you choose to publish
Submitting a time to the global leaderboard sends your chosen call sign, the stage, your time, your ghost recording (car positions over time — no personal data), and this device's random identifier to our database (hosted on Supabase). Leaderboard entries are public by design: anyone can see the call sign and time, and download the ghost to race against. Shared tuning presets work the same way. If you want an entry taken down, reach us through any channel listed on this site and we will remove it.
Online multiplayer
During an online race, your call sign and live car telemetry are relayed to the other pilots in your room through our race server for the duration of the race. Race results submitted to the leaderboard follow the rules above.
Analytics
We use Vercel Web Analytics — a cookieless, privacy-first service — to count page views and a small set of gameplay events (game loaded, stage started or finished, tutorial completed, share button used, error reports with a truncated technical message). These events carry no names, no identifiers from your profile, and no way for us to follow you across sites. Standard server logs at our hosting providers (Vercel, Supabase) may briefly record IP addresses for security and abuse prevention, as with virtually every website.
Third-party services
The game loads its 3D engine and database client from the jsDelivr CDN, is hosted on Vercel, and stores online features in Supabase. Each receives the network requests necessary to serve those functions and nothing more. We embed no social widgets and no ad networks.
Children
The game is suitable for all ages and collects no personal information from anyone, children included. Call signs are free-text — please don't put personal details in one.
Changes
If we add features that touch new data (accounts, wallet linking, notifications), this policy will be updated before they ship, with the effective date above.