Privacy
Last updated: October 2026
1. Controller
Kevin Schmidt, c/o Grosch Postflex #1022, Emsdettener Str. 10, 48268 Greven, Germany
Email: hello@rubbersmoke.com
2. Overview
Rubber & Smoke is a free browser game. I only process the data needed for the website, the game, multiplayer rooms and the optional login. There are no analytics, tracking or advertising tools, and no data is shared for advertising purposes.
3. Hosting of the website and the game (Vercel)
The website and the game are hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, Vercel processes technically necessary data (IP address, time, requested URL, browser identifier) in server logs to deliver the site and protect it against abuse. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working service). Vercel is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses are in place as well.
4. Fonts
My font (Rajdhani) is served from my own server. No connection to Google or any other font provider is made.
5. Language and settings
Without logging in, the game stores your settings (graphics, controls, name, paint colour etc.) only locally in your browser (localStorage). This data does not leave your device unless you join a room (see 7). When you pick a language on the website or in the game, I store your choice ("en" or "de") in a cookie named rs-lang for one year so the website and the game show the same language. You can delete all of this at any time in your browser settings. Legal basis: § 25(2) no. 2 TDDDG (storing a setting you asked for).
6. Login with Twitch
You can optionally log in with your Twitch account (Twitch Interactive, Inc., 350 Bush Street, San Francisco, CA 94104, USA). Twitch then provides me with your Twitch user ID, display name, profile picture and email address, as well as access tokens for the login. I also store the paint and LED colour you choose in the game. Your display name is shown in the game as your driver name. I do not use your email address for newsletters or advertising.
Legal basis: Art. 6(1)(b) GDPR (providing your account). For the login I set a strictly necessary session cookie; logging in is not possible without it (§ 25(2) no. 2 TDDDG). Twitch's own privacy policy applies to its processing.
Account data is stored in a database by Neon Inc., USA (via Vercel), located in Frankfurt am Main, Germany. It is kept as long as your account exists. To delete your account, just send me an email.
7. Multiplayer rooms (room server)
When you create or join a room, the game connects to my room server operated by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France (server located in Strasbourg, France). I process your IP address (for the connection), your driver name, your car colours, your car's state (position, speed etc.), your ping and, for logged-in players, your account ID (via a short-lived signed ticket). Other players in the room see your name, colours, car and ping. Round scores are calculated by the server from the car states to prevent manipulation.
This data is only held in memory while the room exists. Exception: the results of finished rounds of logged-in players (see section 8). Legal basis: Art. 6(1)(b) GDPR (providing the multiplayer mode).
8. XP, statistics and leaderboard
If you are logged in and finish a round in a room with at least two players, the room server sends your result to my website, which stores it with your account: map, time, number of players, your place and points, the XP you earned and driving statistics of that round (e.g. longest drift, best combo, bonuses, chains lost, drift time and distance). From this I calculate your level, your profile statistics and the leaderboard. Guests are not recorded.
Your level is shown to other players next to your name in the game. Your profile (display name, Twitch profile picture, level and statistics) and your leaderboard placements are public, in the game and on rubbersmoke.com (e.g. rubbersmoke.com/u/yourname). This data is stored with your account (Neon, see section 6) and deleted together with it. Legal basis: Art. 6(1)(b) GDPR (providing levels, statistics and leaderboards as part of the game).
9. Twitch channel points (optional, for streamers)
If you turn on channel points in the game, you grant the game the additional Twitch permission to manage channel point rewards. While the game is running, your browser receives your Twitch access token from my website and talks to Twitch directly: it creates, changes, hides and deletes the game's rewards in your channel and receives redemptions live. A redemption contains the viewer's display name and, for colored smoke, the text they typed. This is only shown in your game (and, for an oil spill you trigger as host, sent to the players in your room via the room server); I do not store it. Legal basis: Art. 6(1)(b) GDPR for you as a streamer, Art. 6(1)(f) GDPR for your viewers (showing who triggered an effect, as on Twitch itself). You can turn it off at any time in the game; the rewards are then deleted from your channel.
10. External links
Links to Twitch, YouTube and Instagram only open when you click them; no data is sent to these services beforehand.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Just write to hello@rubbersmoke.com.
You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
12. Changes
If the game changes, I will update this policy. The version published here applies.