Privacy Policy

Last updated: 28 July 2026

This privacy policy applies to the game Cozy Drift and to this website. It explains which data is processed, for what purpose, who receives it and which rights you have.

Cozy Drift is designed to collect as little data as possible. Playing requires no sign-up: no email address, no password and no real name are collected. For the leaderboard, the app creates an anonymous player account.

1. Controller

Name

Richard von Rüden

Address

Erich-Kästner-Weg 16
14532 Stahnsdorf
Germany

Email

mail@cozydrift.com

2. Player account and leaderboard

The first time the app connects to the network, it automatically creates an anonymous player account. This account consists of a random identifier and an access token. The token is stored exclusively on your device and is not shared with third parties.

You choose a driver name, either from a suggestion made by the app or entered freely. This name is publicly visible to other players because it appears on the leaderboard. Please do not use a name that identifies you if you do not want to be identifiable.

For each track played, the following is stored:

• lap time in milliseconds
• track identifier
• timestamp of the run
• the chosen driver name

Purpose: displaying the leaderboard as part of the game. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

3. Ghost runs

If your time on a track ranks among the top 20, your lap is shared as a so-called ghost run. This is a recording of the vehicle position inside the game world (twelve points per second, roughly 8 KB per file) that others can race against.

This is explicitly not location data. Only coordinates within the game world are stored. The app never accesses your device location.

The file is stored with the server provider and is publicly retrievable. There is at most one file per player and track. If you drop out of the top 20, the file is deleted on the next run.

Legal basis: Art. 6(1)(b) GDPR.

4. Game Center (iOS only)

The app signs you in to Apple Game Center. In doing so, it reads Apple's player identifier (teamPlayerID) and your Game Center alias. The identifier links your anonymous player account to your Apple ID so that your driver name and times carry over to a new or second device.

Lap times are additionally submitted to Apple's leaderboards (in hundredths of a second). Apple is the controller for processing within Game Center; Apple's privacy policy applies in that respect.

5. Advertising via Google AdMob (iOS only, free version)

A full-screen ad is shown after every second race, delivered through Google AdMob. Google processes device data and your device's advertising identifier. Google determines which data is processed in detail; the list of participating advertising partners is shown to you in the consent dialogue.

Before the first ad is displayed, the app asks for your consent via Google's User Messaging Platform. On iOS, Apple's App Tracking Transparency prompt is shown in addition.

If you do not give consent, only non-personalised ads are shown. You can change your decision at any time with effect for the future, under Options → Ad privacy settings.

Legal basis: Art. 6(1)(a) GDPR (consent).

The Steam version never contains advertising.

6. The “Remove ads” purchase

The in-app purchase “Remove ads” disables advertising permanently and switches the advertising SDK off entirely. It is handled through Apple's App Store (StoreKit). The app receives no payment data, only the confirmation that the purchase exists. Restoring a purchase asks Apple the same question again.

Legal basis: Art. 6(1)(b) GDPR.

7. Data that never leaves your device

The following is stored locally on your device only:

• your settings
• your personal best times
• the ghost runs of your own laps
• the layout of the on-screen controls
• the access token of your player account

This data is not transmitted except as described in sections 2 to 5. Deleting the app removes it.

8. What the app does not access

Cozy Drift does not access:

• your location
• your contacts
• your photos
• your microphone or camera

There is no sign-up with an email address. Data is shared only with the recipients named in this policy.

9. Recipients

• Supabase — operation of the server infrastructure for the player account, leaderboard and ghost runs. The project is hosted in the European Union.
• Apple — Game Center, leaderboards and processing of the in-app purchase.
• Google — delivery of advertising via AdMob and management of your consent.

No further disclosure takes place. In particular, data is not sold.

10. What this website stores

This site sets no cookies and loads nothing from other servers — no fonts, no scripts, no trackers, no analytics.

One thing is remembered locally: if you switch the background music on, your browser stores that choice and the position in the track in local storage, so the music does not restart on every page. It stays on your device, is never transmitted, and clearing your browser data removes it.

The hosting provider records standard server log data (IP address, time, page requested) for security and troubleshooting; this is deleted after a short period. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.

11. The contact form

If you write to me through the form on the support page, the name, email address and message you enter are sent to my mailbox by email. Your IP address, the time of the request and your browser's user agent are included so that abuse of the form can be traced.

This data is used solely to answer your enquiry. It is not passed on to anyone else and is deleted once the exchange is finished and no legal retention period applies. Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns the game, otherwise legitimate interest in answering enquiries, Art. 6(1)(f) GDPR.

The mailbox is hosted by Hetzner Online GmbH, Gunzenhausen, Germany. You are of course free to write to mail@cozydrift.com directly instead of using the form.

12. Retention

Driver name and lap times are stored for as long as the corresponding entry is part of the leaderboard, or until you request deletion. A ghost run is deleted automatically once you are no longer among the top 20 on that track. Locally stored data remains on your device until you uninstall the app.

13. Deleting your player account

You can delete your account in the game itself: Options → Delete my online data. This removes your leaderboard entries, your ghost runs and the account itself.

Alternatively, send an informal message to mail@cozydrift.com stating the driver name you used — that is all that is needed to find your entries.

Independently of this, you can remove all locally stored data by deleting the app from your device.

14. Your rights

You have the following rights:

• access to the data processed (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)
• withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to mail@cozydrift.com is sufficient to exercise your rights.

15. Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority here is the Commissioner for Data Protection and the Right to Access Information of Brandenburg, Germany (LDA Brandenburg).

16. Children

The game asks for nothing personal. If you are a parent and a name in a leaderboard identifies your child, tell me and it will be removed without further questions.

17. Changes to this privacy policy

Further development of the game or changes in legal requirements may make it necessary to update this policy. The date at the top says when it last changed.