SpeedOn your device
Your lap records, ghosts, driver name and settings are saved in your browser's storage so the game works offline.
On our server
To run the leaderboard we keep your driver name, your best lap on each track (the recorded steering inputs, which we replay to verify the time), and a random session cookie. We only store a hash of the cookie. We also note which day's result we last showed you, so your other devices don't show it again.
If you sign in, we also keep your email address and, for Google sign-in, the account ID Google gives us for you. Sign-in codes are stored only as a hash, expire after 10 minutes, and their records are removed after a day.
If you play inside Discord, signing in keeps your Discord user ID and, if Discord has verified it, your email address. Your Discord name is only suggested as your driver name. We also keep which Discord servers and channels you opened Speedle in (their IDs) and when, and which results we posted to those channels.
If you add friends, we keep who is friends with whom and any requests waiting for an answer. When you create an invite link, we store its random code, your driver ID, when it expires, and whether it has been redeemed. A link stops working once it has been used or after seven days. We delete it when its driver is deleted.
If we moderate a driver (resetting a name, removing laps, suspending or deleting a driver), we keep a record of what was done, when, by which administrator and why, with the driver's name and tag at the time. We keep it even after the driver is deleted, but never with your email address.
Request counts are recorded to keep the service healthy. They never include your name, email, IP address or cookie. To count daily players, each request carries a salted code derived from your driver that changes every day and can't be linked back to you.
What is public
Your driver name, lap times, replays and daily streak are public on the leaderboards, and anyone can race your ghost. Your email address is never shown. Your friends list is visible only to you.
Inside a Discord Activity, your name, tag and times show on its session and server boards. In each channel Speedle was opened in that day, Speedle's bot keeps one message with the server's top five on the daily (names, tags, times, medals and the longest streak). It updates as drivers set new bests, including laps raced on the website, and becomes the final result when the daily closes. Other channels Speedle was opened in get the result when the daily closes, and the Post results button posts the session's standings there.
Without an account
Without an account you race as a guest, under a name we generate with a number tag, like Swift Otter#0391. If you haven't signed in, the session cookie is your only identity. It lasts a year from your last visit. If it is cleared or lost, that driver cannot be recovered.
Who else processes data
Cloudflare hosts the game and its database. Google handles sign-in when you choose Continue with Google. Discord handles sign-in and runs the Activity when you play inside Discord. Resend delivers sign-in emails. There are no ads and no tracking.
Deleting your data
Signed in, open Profile and choose Delete account. That permanently removes your email address, your sign-ins, your friends, your invite links and every lap you've posted, including laps you raced as a guest before creating the account. Signing in to an account you already have removes the laps your device posted as a guest, so none are left behind. Inside Discord, open Profile in the Activity and choose Delete account: that also removes your Discord sign-in and the record of the servers and channels you played in. Results already posted in a Discord channel stay there as messages, which that server manages. For anything else, email privacy@playspeedle.com.