Privacy Policy

Red Card Run LLC (1103 W Union Bench Drive, Mapleton, UT 84664, USA) is the data controller for personal data processed through the Service. Contact: support@redcardrun.com.

• A randomly-generated device token and a lightweight device fingerprint (to identify your attempts and limit abuse).
• A hashed IP address — we do not store your raw IP.
• Your chosen leaderboard display name.
• Your email address, only if you provide it (used to send you optional attempt reminders).
• Referral data: your referral code, and which referrals led to a play, so we can credit attempts.
• Gameplay records: attempt and run data such as survival times and zones reached.
• If you opt in to browser notifications, a push subscription identifier from your browser.

To run the game fairly: identify your device, enforce free-attempt limits, operate the referral program, rank verified survival times, deter fraud and cheating, and — if you opt in — send notifications when you earn an attempt or your free attempts refresh. Our legal bases include performance of a contract (running the Service you use), our legitimate interests (fair play and fraud prevention), and your consent (notifications and certain advertising).

Red Card Run is free and supported by advertising, which may include ad placements shown within the game (e.g. on the pitch and in the stands) and on our pages. Some advertising may be provided by third-party ad partners that use cookies or similar technologies to measure and serve ads. Where required by law, we will ask for your consent before using non-essential advertising technologies, and you will be able to withdraw it. We will name our advertising partners here once they are integrated.

Notifications (browser push and/or email) are optional. You choose whether to enable them, and you can turn them off at any time in your browser settings or via the unsubscribe link in our emails.

• Supabase — database hosting for accounts, scores, referrals, and the leaderboard.
• Vercel — application hosting and delivery.
• Email and advertising providers — listed here once integrated.

We do not sell your personal data.

We use browser local storage to keep your device token, referral code, and progress. Essential storage is used to operate the game. Any advertising or analytics cookies, if used, are described in the Advertising section above and are subject to consent where required.

We keep gameplay and referral records for as long as needed to operate the game, deter abuse, and resolve disputes, then delete or anonymize them.

Depending on where you live (e.g., under GDPR or CCPA/CPRA), you may have the right to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise these rights, email support@redcardrun.com.

The Service is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy; material changes will be posted here with a new “last updated” date.