PROTOTYPE DATA NOTICE · 21 OCTOBER 2026
Your drive.
Your data.
This is a development starter, with no advertising, analytics or real-world location collection. Android stores progression, purchases, records and settings locally on your device. The browser edition stores its own separate profile using IndexedDB under this website origin. Removing app data, clearing site data or using temporary/private browsing can remove your save. There is no cloud backup or synchronization.
Optional online rooms
Pressing Create room or Join sends your fictional in-game position, direction, speed, selected car and cosmetic choices to the room service, where up to three other players can see them. The server assigns a temporary driver name; there is no chat, real name or account. A random session token stays in memory and is not included in other players' snapshots. Room codes are invitations: share them only with people you want to join.
Inactive drivers disappear after about 20 seconds. Rooms expire after about two minutes without updates; expired records are purged on later joins. Hashed network identifiers enforce short-lived abuse quotas, with expiry around the next day. Hosting providers process connection metadata and may retain logs or database recovery history under their separate terms. Leave the room to stop updates; closing the game also stops them. Coins, purchases, solo event results and local saves are not uploaded.
Optional Roadbook social account
The companion Roadbook is separate from playing and from your local game save. When you choose Sign in with ChatGPT, the hosting platform supplies a stable site-specific user identifier. CarRis uses that identifier internally to authorize your records. It does not import your email or platform full name into your profile. You choose a nickname, unique handle, badge and optional bio. Signed-in members can find your exact handle and see your nickname and badge; there is no public member directory. A bio is visible only to you unless you opt to share it with accepted friends.
Posts, optional game cards, comments and likes are stored in the hosted database and shown to you and accepted friends. Game statistics are player-reported and never synchronize or change your game save. Friend requests, friendships, blocks and private report categories are stored to provide those controls. Removing a friendship removes access through the service; it cannot recall someone else's screenshots or copies. Blocking works in both directions. Reports hide a post for the reporter, and three distinct reports quarantine it for other readers pending operator review. Reports are not a continuously staffed emergency or support service.
Posts and profile details stay until you delete them or an operator removes them. You can edit your profile, delete posts and comments, remove connections, unblock people, or delete your Roadbook account in Privacy & controls. Account deletion removes the profile, posts, associated comments/reactions, connections, blocks, related report records, connected-game grants and approved pending pairing requests from active storage. One-way hashed abuse counters remain briefly to prevent deletion from resetting daily limits; counters become eligible for cleanup after their UTC day plus two days. Any subsequent validated quota-bearing write automatically purges expired counters for all members, including inactive or deleted accounts. If the whole service is dormant, they remain until its next such write or the operator runs the documented cleanup; no daily scheduled cleanup is configured for Roadbook. Provider logs and recovery copies follow provider retention, so deletion is not a promise to erase all backups instantly.
Roadbook inside the game
The in-game phone shows the same real friends-only feed, composer, friend connections and privacy controls as the website. Opening it pauses driving controls. The browser game uses this website's existing sign-in through same-origin requests. Posts are never published automatically. Game cards include only the car and game statistics you choose; they do not contain a wallet balance or physical location.
Android connects only after you start a request in the game, open the secure approval page, sign in and explicitly approve its matching eight-digit code. The public request identifier in that page's URL contains no polling secret or account token. Requests expire after 10 minutes. A connected game can read and manage your Roadbook profile, friends, posts, replies and privacy controls, including account deletion after explicit confirmation. This grants no ChatGPT conversations, contact-book, email or driving-wallet access.
The game's scoped token is held only in memory and expires within 24 hours; closing or restarting the game requires connecting again. The database retains only a hash of that token plus your internal site identifier, device name, creation time and expiry. Up to five game connections are retained. Review or revoke them on Connected games; deleting Roadbook also revokes them. Expired pairing requests and game grants are removed on a later connection request or operator cleanup. Anonymous pairing limit counters use one-way hashed network identifiers and become eligible for cleanup after two days. If the service is dormant, expired rows remain until that next request or maintenance; no scheduled daily cleanup is configured.
Draft post text in the game's phone stays only in that running game session; drafts are not uploaded before publishing. The website does not save draft post text. Hosting providers process normal connection metadata under their own policies. This early community supports bounded text and original car cards; arbitrary photo uploads and private messages are unavailable. Do not share sensitive details or other people's private information. Read the community agreement.
Feedback drafts
On a hosted preview without a configured feedback service, choosing Save feedback draft stores your category and message in this browser’s local storage. Export draft downloads a JSON file to your device; it sends nothing. Use Clear on the feedback form to remove the browser draft. Drafts are not saved automatically as you type.
Connected feedback
The local development server and an operator-configured feedback service receive category, message, source, version and your consent. The optional backend email field is unused by this website. Reports become eligible for deletion after 30 days; deletion runs on subsequent submissions and a daily scheduled purge when deployed, so scheduled expiry may take up to one additional day. Keyed, hashed network addresses limit spam; quota records are retained for two days. Raw network addresses are not saved in the feedback database, but your hosting provider may process connection metadata. Provider backups or recovery history follow separate provider retention settings.
Only submit information you agree to share with the project operator. Do not include passwords, exact location, health information or other sensitive data. There is no public endpoint to read reports. Operator access is through the service owner’s database account.
Before operating a public service
This sample is not a finished public privacy policy. Before operating a broad public collection service, the operator must publish their name, contact and deletion-request channel, explain applicable rights, hosting regions and provider logs, assess rules for children and cross-border data, and set up moderation and access controls. Until those collection details are ready, keep feedback submission in local draft mode. The public browser game does not require an account or feedback submission. Browser drafts can be cleared here; exported files must be removed from your device separately.
Open source and third parties
The frontend ships with original game captures, vector artwork and system fonts, with no remote font or tracking requests. The game engine and content download from this host. Website runtime licenses accompany the open-source distribution. Hosting infrastructure processes connection metadata under its own terms; the game does not add analytics or advertising. APK and source downloads may be served by a separate release provider, whose terms apply. Review the repository’s licensing notices and release checklist before publication.