Privacy Policy
Who we are
TROLLEY is made by PoutineandHaggisProductions in British Columbia, Canada. We are responsible for the personal information described here. Contact: [email protected].
Playing without an account
Anyone can race as a guest. Guests are not asked for an email, name or date of birth. Your game progress and settings are kept in your own browser (local storage) and are not sent to us, except that a display name and your racing movements are relayed to other players while you race online.
Accounts (13 and over)
Accounts are for players aged 13 and over. With an account we store:
- your email address, used to send sign-in codes;
- your player name, consent record and selected racer;
- racers you own, purchase receipts and refund records;
- optional cloud saves you choose to upload;
- race results, points and leaderboard entries;
- support requests and messages from the TROLLEY team;
- moderation records, such as a ban and its reason, if one applies.
We use this to run your account, deliver what you buy, show rankings, keep online play safe and answer support requests. We do not sell your data. Advertising and analytics are off.
Payments
Stripe processes payments. Stripe collects your card details and billing address and uses the address to work out any sales tax. We receive the payment result, amount, currency and country, never your full card number or CVC.
Who processes data for us
- Supabase (database, Ohio, USA): accounts and everything listed above.
- Render (USA): the online race and payment server.
- Stripe: payments, refunds and tax calculation.
- Google (Gmail): sends sign-in codes and support replies.
- Cloudflare: hosts the website and protects it from attacks.
- GitHub: stores an encrypted nightly backup of the database for 30 days.
- UptimeRobot: checks the site is online; it receives no player data.
Your data may therefore be stored and processed outside your country, including in the United States.
How long we keep it
- Account data: until you close your account.
- Financial records (receipts, refunds): six years after the relevant tax year, or longer under a legal hold.
- Support messages: normally 12 months after the request is resolved.
- Data-export copies: deleted within 30 days.
- Backups: each nightly backup expires after 30 days.
Your choices and rights
You can ask to see, correct or delete your data, or for a copy of it, from Settings → Support & Policies in the game or by email. After a verified closure request we remove cloud saves, your player name and loadout, disable sign-in and revoke ownership; financial records required by law are kept as above. You may also complain to your local privacy regulator; in Canada that is the Office of the Privacy Commissioner.
Cookies and browser storage
We use browser storage only for things the game needs: your sign-in session, game progress and settings. There are no advertising or tracking cookies.
Changes
If we change this policy we will update the date above and, for significant changes, tell signed-in players in the game.