Privacy Policy

1. Data Controller

Your data is processed by MediaRubic, which operates RaceKeys. For any question, request or notice: merhaba@mediarubic.com

2. Playing Without an Account (Guest)

You can play RaceKeys without creating an account. When you play as a guest, none of your personal data is sent to our servers.

Your scores, records and preferences (nickname, chosen racer) are stored only in your own browser's local storage. We cannot access this data; clearing your browser data deletes it.

3. Data We Process When You Create an Account

If you optionally create an account, we process: your email address, username, display name and password. Your password is stored as an irreversible hash (argon2) — no one, including us, can see its plain form.

Your game results (score, gameplay metrics, date) are saved to your account and used to build your profile, personal records, leaderboards and league standing.

To ensure fair play, we re-compute and verify submitted scores against real gameplay data on the server side.

4. Technical Data and Cookies

For security and abuse prevention (spam, automation, rate-limiting), your IP address is processed temporarily. We do not use your IP for advertising or profiling.

We use only a strictly necessary session cookie to keep you signed in. Sign-in does not work without it. We currently use no third-party advertising or analytics cookies.

If we add advertising (e.g. Google AdSense) or analytics in the future, we will inform you before enabling them and request your explicit consent where required.

5. Data Sharing

We do not sell your personal data or share it with third parties for marketing.

Your data may be shared, limited to what is necessary, only with authorized authorities under a legal obligation, or with our hosting infrastructure provider that runs the service.

6. Retention

Your account data is retained while your account is active. To delete your account, just email merhaba@mediarubic.com; we will delete your data within a reasonable time. Security logs (e.g. IP) are kept only briefly.

7. Your Rights

Under Turkey's KVKK (Law No. 6698), the GDPR and related regulations, you have the right to access, rectify, erase your data, or object to its processing.

To exercise these rights, contact merhaba@mediarubic.com.

8. Security

We take appropriate technical measures to protect your data: all traffic is encrypted over HTTPS, passwords are hashed with argon2, sessions are managed with secure cookies, and scores are verified for cheat detection.

9. Children's Privacy

RaceKeys is not directed at children under 13, and we do not knowingly collect personal data from this age group.

10. Changes

We may update this policy from time to time. The current version is always published on this page; the date at the top is updated for material changes.