Privacy policy

The short version

The game runs on your computer. It has no accounts, collects no analytics or crash reports, shows no advertising and sends nothing about you to us. The website stores what you type into the contact form and what a purchase needs. Everything is described below.

The website: contact, beta and affiliate

When you send the form on the contact page we store your name, email, phone if given, your message, which boxes you ticked and the time. We keep it in our database (Neon, [region]) and send a copy to our inbox and a receipt to you through the email service Resend.

We use it to reply to you, to pick and contact the beta group and to run the affiliate programme. The legal basis is your consent, given with the checkbox in the form. We delete it when the matter is closed, at the latest [12 months] after you sent it, unless you have an ongoing affiliate relationship with us.

The website: buying a licence

Payment is handled by Stripe. Stripe receives your card details; we never see them. From Stripe we receive your email address, a customer and subscription id, the amount, the time and the payment status. We store this with your licence key so we can deliver the key, extend it while the subscription is paid, answer support questions and meet the Swedish Bookkeeping Act. The legal basis is our contract with you and a legal obligation. Accounting records are kept for seven years.

The key is sent to your email address through Resend. The page that shows the key can be reached again from the link in the email.

The website: cookies and statistics

If you arrive through an affiliate link we set a cookie, veja_ref, with the affiliate's code for 30 days. It is used only to pay commission on a purchase. No other cookies are set.

Visitor statistics: [Vercel Analytics, cookie-free and without storing IP addresses, if enabled]. The website is hosted on Vercel, whose servers see your IP address in their operational logs.

The website: downloading the game

When you download the game from the website we count the download: platform (Mac or Windows), the game version, the page language and the affiliate code if the veja_ref cookie is present. No IP address and no other personal data is stored. The file itself is served from GitHub, which sees your IP address under GitHub's privacy policy.

The game: what it keeps on your computer

Everything the game remembers is in its data folder on your computer, shown on the Settings > Privacy page in the game:

• Settings: language, car, paint, gearbox, weather, the course, your lesson results and progress, and the display and control choices.
• Replays: the newest thirty drives, each as the car's position and movements, the controls, the head turns and free look (and the headset's direction in VR), and the lesson's events with their times. A replay has no video, no sound and no name.
• Your own cars, the menu music's place in its list, and a renderer override if you set one.

Where you look while driving is used by the lessons to judge mirror checks. It is kept in memory for the last minute and is not saved or sent, apart from the head turns that are part of a replay.

Nothing in this folder leaves your computer. Deleting the folder removes everything the game knows about you.

The game: sharing or watching a drive (spectator mode)

A learner can share a drive with a code, and an instructor who enters the code watches it live in their own copy of the game and can talk with push-to-talk. This works as follows:

• Meeting point. The two games find each other through two public message brokers, broker.emqx.io (EMQ) and broker.hivemq.com (HiveMQ), over TLS. Each game publishes its connection details (which include its network addresses, as the WebRTC standard requires) to a topic named by a value derived from the code, encrypted with a key also derived from the code (AES-GCM). The brokers see a random-looking topic name and sealed bytes, and nothing about the drive. The brokers are run by their companies under their own terms.
• Finding your public address. Each game asks Google's public STUN servers (stun.l.google.com, stun1.l.google.com) what its public address is. Those servers see your network address and nothing else.
• The drive. The drive data (the car's position and movements, controls, head turns, the lesson's events, the car, paint and weather) and the voice, while push-to-talk is held, go directly between the two computers over WebRTC data channels, encrypted (DTLS), through no server of ours. Each side's computer therefore knows the other's network address for the length of the session, as in any direct call.
• Afterwards. The watching game keeps nothing. The driver's game saves the drive as a replay on the driver's computer, as it does for any drive. Voice is never recorded.
• Consent. The driver sees every join request and can refuse it, and can stop sharing at any time. The code is shown only to the driver, who chooses whom to give it to.

The game: local weather

If you choose local weather, the game asks ipwho.is for the approximate place of your network address (city, country and coordinates to two decimals) and then api.open-meteo.com for the weather at those coordinates. Both services see your network address, under their own terms. The game shows the place name on the weather line for this run and saves none of it. Any other weather choice sends nothing.

The game: licence activation

When you activate a licence key the game makes one HTTPS call to our licence server with the key and an identifier for the computer, so the licence can be limited to one computer at a time. The game checks the key against the server when it starts and works up to 7 days without a connection. The game sends us nothing else. The licence server is run by Webble (license.webble.se). [Confirm against the licence service before launch.]

The game: Steam

If you download the game through Steam, Steam handles your download and your account under Steam's own terms. We receive download figures from Steam, not your identity. The spoken narration is played from sound clips included in the game; nothing is sent to a speech service while you play.

Your rights

Under the GDPR you may ask what personal data we hold about you, have it corrected or deleted, object to processing, ask for restriction and receive a copy of your data. You may also complain to the Swedish Authority for Privacy Protection (IMY). The game sends us nothing, so about you as a player we hold only what you gave us on the website. Write to the contact address above.

Children

The game is for learner drivers from the age of sixteen. The game collects no personal data. If you are under 16 and write to us through the website we need a guardian's approval to keep the details.

Changes

We update this policy when something changes, with the date at the top. A companion app is planned after launch; before it is released the policy is updated with what it sends.