Privacy Policy

Effective November 12, 2026

This policy explains what personal information NOS Rumble and its website collect, why, who it's shared with and the choices you have. "We" means the creator of NOS Rumble, who is responsible for this information. The short version: the game itself doesn't track you; your progress stays on your device unless you choose an account; the marketing website uses analytics and marketing cookies only if you agree; and we never sell your personal information.

1. Information we collect

When you play (no account). Your driver, settings, XP, records, ghost laps, saves, crash diagnostics and any dev notes you write are stored on your own device (browser local storage and IndexedDB). They aren't sent to us. If you play inside a third-party app that hosts the game (for example the Claude app), that host may keep a private copy of your saves and notes for you under its own terms.

Online multiplayer. When you create or join a room, your driver name, avatar choices, car type, position and race events are sent to the other players in that room through relay servers so the race works. Public relays may be operated by third parties (for example the public MQTT brokers run by EMQX and HiveMQ) and anyone with your room code can see this data. Don't use your real full name or any personal information as your driver name.

Accounts (optional, 13+). If you create an account we collect your email address, the username and display details you choose, and the game data you choose to sync (such as XP, badges, records and leaderboard scores). Accounts are stored with our database provider.

Launch news sign-up (website). Your email address, your first name if you give it, your consent, the date and which form you used. If you ask to beta test, also that request, the main device you chose and that you agreed to the beta notes; we use these only to choose and send beta invites (by email, with the beta password).

Contact and privacy requests. What you send us, such as your email address and message.

Beta access. If you enter the beta password, a small cookie remembers that you're signed in. We also count failed password attempts per network address for a short time to stop guessing.

Automatically, by our host. Like every website, our hosting provider receives technical data such as your IP address, browser type, the pages and files requested and the time, in server logs used for security and to deliver the site.

Analytics and marketing cookies (website only, with your consent). If you choose "Accept" (or turn these categories on in Cookie settings), our marketing website may use analytics tools to understand visits (for example pages viewed, time on page, approximate location from IP, device type, and which campaign brought you) and advertising tools to measure our campaigns and show NOS Rumble ads to people who visited (retargeting). These tools may set cookies or similar identifiers and receive your IP address and browsing activity on our site. We list the providers in our Cookie Policy before we turn them on. We don't use analytics or advertising trackers inside the game, on the play page or in Learn mode.

We don't ask for, and you shouldn't send us, sensitive information (such as health, precise location, government ID or payment details). NOS Rumble has no payments.

2. How we use it, and our legal bases

• To run the game and its features (saves, multiplayer, accounts, leaderboards): to provide the service you asked for (contract) and our legitimate interest in a working game.
• To send launch news and big updates: your consent, which you can withdraw at any time with the unsubscribe link or by contacting us.
• To keep the game and website secure (the beta gate, rate limits, logs, preventing cheating and abuse): our legitimate interests and legal obligations.
• Analytics and advertising on the website: your consent only.
• To answer you and handle privacy requests: our legitimate interests and legal obligations.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

3. Who we share it with

We never sell your personal information for money. We share it only with:

• Service providers who work for us: website hosting, forms, sign-in and account storage (Netlify), and Google Workspace (Gmail), which we use to send account, invite and launch emails from our nosrumble.com address. They may only use it to provide their service to us.
• Other players, for the information you choose to show in multiplayer and leaderboards.
• Online relay operators, who carry room traffic as described above.
• Analytics and advertising partners, only if you consent on the website. Under some US state laws, letting advertising partners use cookie data for cross-context behavioural advertising can count as "sharing" or a "sale" even without money changing hands. We only allow this with your consent, you can turn it off at any time in Cookie settings, and we honour the Global Privacy Control (GPC) browser signal as an opt-out.
• Authorities or others when the law requires it, to protect rights, safety and security, or as part of a sale or reorganisation of NOS Rumble (the buyer would have to respect this policy).

4. How long we keep it

• Device data stays on your device until you clear it or uninstall.
• Launch-news contacts: until you unsubscribe, or 12 months after the full launch at the latest unless you're still subscribed and engaged.
• Accounts: until you delete your account or ask us to; we may keep a record of a deletion request.
• Server logs and password-attempt counters: kept by our host for a limited time (typically up to 30 days) and the attempt counter for 15 minutes.
• Analytics and advertising data: up to 14 months, or less where the provider allows.
• Privacy requests: up to 24 months, to show we handled them.

5. Your rights and choices

Depending on where you live (for example the EU, the UK, California and other US states), you may have the right to: access your information; correct it; delete it; get a copy in a portable format; object to or restrict how we use it; withdraw consent at any time; opt out of the "sale" or "sharing" of personal information and of targeted advertising; and not be treated differently for using these rights. We don't use sensitive personal information to infer characteristics about you.

• Cookies: use Cookie settings at the bottom of any website page, your browser settings, or a GPC signal.
• Emails: use the unsubscribe link in any email.
• Game data: clear it in your browser, or use Settings → Backup in the game.
• Everything else: contact us (below). We'll confirm your request, may need to verify it's you, and will reply within 30 days (45 days where US state law allows). You can use an authorised agent where the law allows. If we refuse a request you can appeal by replying to our answer.

If you're in the EU or UK you can also complain to your local data protection authority.

6. Children

NOS Rumble's Learn mode is designed for children aged 4 to 10. We've designed NOS Rumble so that children can play without giving us any personal information: no account, sign-up or name is needed, progress stays on the device, and there are no analytics or advertising trackers in the game or the play page. Accounts, online multiplayer and the launch-news sign-up are only for people aged 13 or older (or the higher age where you live), or a parent acting for a child. We don't knowingly collect personal information from children under 13 without verifiable parental consent. If you're a parent and believe your child has given us personal information, contact us and we'll delete it. Parents can also review, delete or refuse further collection of their child's information by contacting us.

7. International transfers

Our service providers may process information in the United States and other countries. Where the law requires, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-US Data Privacy Framework.

8. Security

We use reasonable measures to protect information, including encrypted connections (HTTPS), a server-side password gate for the beta and access controls at our providers. No system is perfectly secure, so please use a unique password for any account.

9. Changes

We'll update this policy when our practices change, including before we turn on any new analytics or advertising tool. We'll change the date above and, for significant changes, tell you on the website or in the game.

10. Contact

Use our contact form and choose "Privacy request" for anything about your data.