Privacy policy
Servo Sprint is a free browser game made and run by Alex Uamai in Coquitlam, BC, Canada. This page says what the game stores, where, for how long, and how to have it deleted. Questions or requests: alex@auamai.dev.
- No account email, no password, no real name. You pick a player name, and it is shown on the leaderboard.
- Your save lives in your browser. The server keeps your name, scores and Garage only when you play online.
- The game sets no cookies and has no analytics of its own. The host, Cloudflare, counts page views without cookies.
- The site may show ads from Google. Rewarded ads are always optional.
On your device
The game keeps these in your browser's local storage:
- your player name, best score, games played, gears, Toolbox and Garage (robots, paint, plate design), and your save code or sign-in token if you saved your name;
- your settings (sound, controls, ghost racer and similar) and progress such as missions, streak, Daily best, rank and the Crews you joined;
- your own ghosts: a replay of your best run on today's Daily and your four most recent courses;
- a short summary (name, best, rank, streak) used for the game's teaser card.
It also notes in session storage when it last reloaded after a graphics crash, so it doesn't reload in a loop. Sign out (Settings) removes your save, progress and ghosts from the device and keeps only device settings such as sound and controls. Clearing the site's data in your browser removes everything.
On the game server
The game's server (api.auamai.dev, on Cloudflare) stores the following when you play online:
- Scores: your player name, each score with its run length, mode (free, Daily, challenge or Crew), date, the robot and plate design you ran with, and whether the run used a Spare Servo. Your name and scores are public on the leaderboards.
- Ghosts: when you share a challenge, set a new Crew best or set a new personal best (with Ghost racer on), that run's track is uploaded: where your robot was each tenth of a second, plus the score and course. The track is stored without your name, but the board and Crews can offer it to others as your ghost. Ghosts are deleted after 60 days. Turning off Settings > Ghost racer stops uploads.
- If you save your name: a one-way hash of your backup code (never the code itself); for a passkey, its public key, ID and connection type (your face or fingerprint never leaves your device); sign-in sessions, stored only as hashes and expiring after 400 days; and your synced stats, Garage items and robots.
- Progress and rewards: badges with the date earned, your shift streak, gifts and reward items, and, if you joined from someone's challenge link or Crew, who invited you.
- Crews: the Crew's code, title and creator, and each member's name, best score, run count and robot. A Crew is deleted 30 days after it ends.
Scores, names and saved profiles have no fixed expiry: they stay while the game runs, or until you ask for them to be deleted.
IP addresses
The game server does not store your IP address. It uses it in two limited ways:
- Rate limits: a one-way hash of the address and the current minute, used to count requests. Old counts are cleared on the next request and at least once a day.
- Fair rewards: so friends on the same device or network don't count toward invite and badge rewards, a hash of the address mixed with a secret that changes every day. The hashes are cleared after that day (UTC) and the secret is deleted.
Cloudflare hosts the site and the server, so it handles your IP address and request details to deliver and protect them; see the Cloudflare privacy policy. The 3D engine (three.js) loads from the jsDelivr CDN, which also sees your IP address; see the jsDelivr privacy policy.
Cookies and analytics
- The game sets no cookies, and it sends no cookies to its server.
- The game has no analytics, tracking pixels or page-view pings of its own.
- Cloudflare Web Analytics is on for servosprint.xyz. It counts page views and measures page speed without cookies, and Cloudflare says it does not track individuals across sites. It is not loaded for visitors who reach Cloudflare through its data centres in the EU, the EEA, the UK or Switzerland.
- Error reports: if the game hits an error, it sends the error message, the file and line, the build number and coarse context (game screen, graphics quality, touch or not). No name, code or token, and web addresses are trimmed of their query strings. Reports are not saved to a database.
Ads
servosprint.xyz may show ads through Google AdSense and Google's H5 Games Ads. When it does, Google and its partners may use cookies or device identifiers to serve and measure ads, including personalized ads. How Google uses this information: How Google uses information from sites or apps that use our services.
- Players in the EEA, the UK and Switzerland are asked for consent through a Google-certified consent management platform (CMP) before personalized ads are shown.
- Rewarded ads (watch an ad for a bonus, such as extra gears) are always optional. You never need to watch an ad to play, and ads never change scores, ghosts or the leaderboard.
Children
Servo Sprint is not directed at children under 13. The game doesn't ask for age, real name, email or location. If you believe a child under 13 has saved a name or scores, email me and I'll delete them.
Deleting your data
Email alex@auamai.dev with your player name and what you want removed. I can delete your name and everything stored with it: scores, ghosts linked to your best runs, saved profile, passkeys, sessions, badges, rewards and Crew entries. I may ask you to confirm the name is yours, for example by signing in with its passkey or backup code. You can also ask what is stored under your name.
Changes
When this policy changes, the date at the top changes with it. The same information is in the Privacy section of the player manual.