1. Who is responsible
Joshua Vanslette is the seller of Stock Car Franchise and the data controller for personal data processed to operate the game. Paddle acts as Merchant of Record and processes payment-related information under its own privacy notice.
2. Information and purposes
- Account information: email address, account ID, authentication credentials and information supplied by a sign-in provider are used to create accounts, authenticate you and protect access.
- Game information: team names, drivers, upgrades, progress and saved careers are linked to your account to provide and restore gameplay.
- Purchase records: transaction and customer identifiers, product, amount, currency and purchase status are used to verify purchases, deliver currency and meet recordkeeping obligations. Your full payment card details are not stored by the game.
- Technical information: IP address, device or browser information and error or security logs may be processed by hosting and authentication services to deliver the game, diagnose failures and prevent abuse.
- Correspondence: information you provide in support or privacy requests is used to respond to those requests and resolve issues.
3. Legal bases
Account, gameplay and purchase processing is necessary to perform the agreement with you. Security, reliability and responding to enquiries rely on legitimate interests, balanced against your rights. Required transaction records are retained to comply with legal obligations. Where consent is required for optional processing, it will be requested separately and can be withdrawn.
4. Who receives information
Information is shared only as needed with service providers for hosting, authentication, storage and support; Paddle for the sale of the product, purchase management, payments, tax compliance and invoicing; professional legal or accounting advisers; and authorities when required by law. If you choose an external sign-in provider, that provider also processes information under its own privacy terms. Personal data is not sold.
5. Retention
Account and saved-game information is kept while your account and game access are active. Purchase records may be retained afterward for tax, accounting, fraud prevention or dispute obligations. Technical logs and correspondence are kept only as long as needed for their purposes. Information that is no longer necessary is deleted or anonymised, subject to applicable retention obligations and backup lifecycles.
6. Security and international processing
Appropriate technical and organisational measures, including encrypted connections and account-based access controls, are used to protect information. No system can guarantee absolute security. Service providers may process data outside your country. Where applicable law requires safeguards for international transfers, adequacy decisions or standard contractual clauses and associated protections will be used.
7. Your rights
Depending on your location, you may request access, correction, deletion, restriction or portability of personal data, object to processing based on legitimate interests, and withdraw consent without affecting prior lawful processing. You may complain to your local data protection authority. For UK/EEA requests, the usual response period is one month, subject to legally permitted extensions.
To make a privacy or account request, email the seller at joshuavanslette@gmail.com. Please include enough detail for us to identify your account, and we will respond within one month unless the law allows longer.
For information handled by Paddle, use the contact and rights-request options in Paddle’s privacy notice.
8. Cookies and device storage
The game uses essential browser storage and, where needed, cookies to maintain sign-in and support checkout and security. The game does not currently add optional analytics or marketing cookies. You can clear or block storage through browser settings, although doing so may sign you out or prevent parts of the service from working. External sign-in and checkout services explain their own storage practices in their notices. Optional tracking will require appropriate notice and consent before it is introduced.
9. Changes
This notice will be updated when data practices change. The effective date appears above, and material changes will be communicated where required.