Last updated 24 October 2026.
Vroomle is a daily racing game with no accounts. We collect as little as we can: no email address, no real name, no location and no chat. This notice explains what we keep, why, for how long, and how to delete it.
| What | Why | How long |
|---|---|---|
| A random player id, in a cookie only our server can read | To know your laps and limit you to three a day | Until you delete it, or 12 months after your last visit |
| Your display name and its 4-digit tag | To show you on the leaderboard | As above |
| Your lap times, sector times and device type (phone or computer) | To rank the day and run the leaderboards | As above; afterwards your rows show as "Deleted player" |
| A replay of each lap (your key presses) | To check that fast laps are genuine | 30 days (longer only while a moderator reviews a flagged lap) |
| A small backup of your streak and colours | So your progress survives your browser clearing its storage | Until you delete it, or 12 months after your last visit |
| Reports you make about other players | So moderators can act on them | Until closed, then 90 days |
| A scrambled (keyed hash) form of your IP address, never the address itself | To limit abuse, such as too many new players from one place, and so moderators can spot it | 2 days |
Public leaderboards show only rank, display name, time, sector times and device type. Never your player id or IP address.
Your settings, streak, colours, daily history and ghost laps are kept in your browser's
storage and in a vroomle_progress cookie. The server cookie
vroomle_id holds your player id. These are strictly necessary for the game to
work, so they need no consent.
Vroomle is paid for by banner ads from Google AdSense: one banner at the top of the screen on a phone (hidden while you drive) or one or two at the sides on a computer. Ads only start after you have finished your first run. Google may use cookies and similar storage to show ads, limit how often you see the same one and count clicks. Our game never shares your player id, name or lap times with Google.
In the UK, the EEA and Switzerland, Google's consent message asks before any advertising cookies are used. If you decline, you see non-personalised (or limited) ads that do not use your browsing to choose them. You can change your choice at any time: open Settings and choose Privacy settings. Google handles ad data under its own policy: how Google uses cookies in advertising.
The game runs on Cloudflare, which hosts the site, database and files and keeps short-lived server logs. When you first submit a time, Cloudflare Turnstile checks that you are not a bot; Cloudflare handles that check under its own privacy policy. Google shows the ads and their consent message (see Advertising). Nothing about you is sold, and our own data is never shared for marketing.
We use this data because it is needed to provide the game you chose to play and to keep the daily leaderboard fair (legitimate interests). Advertising cookies are used only with your consent where the law requires it.
Vroomle is meant for players aged 13 and over. We keep privacy high by default: no chat, no free text other than a filtered display name, and no location.
You can delete everything at any time: open Profile and choose Delete my data. That removes your data from this browser and from our server straight away, and your leaderboard rows will show as "Deleted player". Because there are no accounts, we cannot find your data from your name alone, so the button is the quickest way. For any other request (access, correction, objection), contact us at contact@vroomle.io. You can also complain to the Information Commissioner's Office (ico.org.uk).
To report a security problem, see security.txt.
Vroomle is run by Conor O’Neill, trading as Vroomle Dev Team (the data controller under UK GDPR). Contact: contact@vroomle.io.