Privacy
Last updated 13 October 2026
In short: you can play without an account, and then the game keeps everything in your browser. With an account, we keep your email, your racer name and what you do in the game, so it's there on every device. We don't sell anything about you, and there are no ads or tracking cookies yet. You can delete your account at any time from the title page.
Who runs Paperacers
Paperacers is made and run by Bede Walthew, in France, who is responsible for your data (the "controller", in the words of the GDPR). Write to [email protected] about anything on this page.
Playing without an account
Your tracks, best runs, racer name, car and sound setting are saved in your browser's storage (localStorage) and never sent to us, except as listed here:
- Online races: your racer name, car and moves go through our server to the other players. Lobbies and races are only held in the server's memory and are gone once they end.
- Marketplace and daily challenge: when you finish a lap on a published track, the server checks your run and adds one to the track's play count. Your daily challenge score is not sent anywhere unless you share it yourself.
With an account
Signing in needs an email address, confirmed with a code we email you. Your account then keeps:
| What | Why | How long |
|---|---|---|
| Your email | To sign you in, and to answer you if you write to us | Until you delete your account |
| Your racer name | Shown to other players and on the leaderboard | Until you delete your account |
| Sign-in sessions (a coded form of each device's token, and when it was last used) | To keep you signed in | 180 days without use, or until you sign out |
| Sign-in codes (a coded form) | To check the code you type | 10 minutes, or until used |
| Your library: your tracks, best runs and car | So every device you sign in on has them | Until you delete them or your account |
| Daily challenge attempts (moves, score, timing) | The leaderboard and your streak | Until you delete your account |
| Published tracks, which published tracks you've finished, your likes, dislikes and reports | The Marketplace | Until you delete your account; published tracks stay, credited to "a deleted racer" |
We use this data to provide the game you signed up for (the legal basis is the contract between us: these pages and the terms), and to keep it fair and working (our legitimate interest).
Keeping the game running
- IP addresses: our server uses your IP address to limit how often anyone can ask for sign-in codes, create lobbies or send error reports. It's held in memory for minutes, never written to our database.
- Error reports: when something breaks, the game sends a report of the error (what failed, the page, the browser) to Sentry, through our own server. We switched off everything that could identify you: no IP address, no account, no cookies, and email addresses are removed from the text.
- Visit counts: Cloudflare Web Analytics counts page views without cookies and without identifying you.
- Backups: the database is backed up daily and weekly. A deleted account is gone from the game at once, and from the backups once they expire, within about a month.
Who helps run it
These companies process data for us, only to provide their service:
- Railway hosts the game server and its database, in the Netherlands.
- Cloudflare delivers the site and its traffic, forwards email sent to [email protected], and provides the visit counts.
- Resend sends the sign-in emails.
- Sentry receives the error reports, in Germany.
Cloudflare and Resend are based in the United States. Where data leaves the European Union, it's protected by the EU's standard contractual clauses or the EU-US Data Privacy Framework.
Cookies and storage
Paperacers sets no cookies. It uses your browser's storage only to keep your game (tracks, best runs, name, car, sound) and, if you sign in, your session, which is what the game needs to work, so it doesn't ask for consent. If we add ads, they'll come with a consent choice and this page will say so first.
Your rights
Under the GDPR you can ask to see, correct, export or delete your data, or object to how it's used.
- Delete your account: on the title page, signed in, choose delete account and type your racer name. It's immediate.
- Change your racer name: type a new one on the title page.
- Anything else: write to [email protected]. We'll answer within a month.
If you're not happy with our answer, you can complain to the CNIL (cnil.fr), France's data protection authority, or to the authority where you live.
Children
Anyone can play without an account. Accounts are for players aged 13 and over, or older where the law of their country says so (15 in France). If you think a child under that age has an account, write to us and we'll delete it.
Changes
When this page changes, the date at the top changes too. If a change matters for players with an account, we'll email them before it applies.