Privacy policy
Last updated [DATE IN FORCE] · draft of 6 October 2026
Draft, not yet in force. This page is being reviewed and will change before Prace opens to the public.
Prace is a jigsaw racing game. This policy says what we keep about you, why, who else handles it, and how you can see, change or delete it. We've tried to write it so you can actually read it.
The short version. We keep what the game needs to work: your email to sign you in, your name and picture so friends and opponents know who you are, the pictures you upload, and your races. We don't show ads, we don't sell your data, and we don't track you across other apps or websites. Location data in your photos is removed on your device before the photo is sent, and again on our server. You can delete your account, and almost everything with it, from inside the game at any time.
1. Who we are
Prace is run by [COMPANY NAME], [COMPANY ADDRESS] ("we", "us"). We decide what happens to your data, which makes us its "controller" under European and UK law.
For anything about your privacy, email privacy@playprace.com. We reply within 30 days, usually much sooner.
2. What we collect
When you sign in
- Your email address, to sign you in (with Google or a code by email), to let friends find you, and to check that a deletion request really comes from you.
- Your name. If you sign in with Google, we start with the name on your Google account; you can change it in the game at any time. We don't take anything else from your Google account, not even its picture.
What you add
- Your profile picture and colour, if you choose one. We shrink the picture to a small square and keep only the pixels.
- Pictures you upload to race on. Before a picture leaves your device, the game removes its location and camera details (EXIF data); our server removes them again in case anything got through.
- Friends, groups and blocks: who you're friends with, which groups you're in, who you've blocked, and group pictures you set.
- Chat messages you send to friends and in groups. Chat in a race's waiting room isn't stored: it's gone when the room closes, unless someone reports a message. Then that message and the few around it, with the names of who wrote them, are kept so a moderator can review them.
- Reports you make about a picture or a message, and why.
- Moderation decisions about your account, such as a picture taken down, a warning, or a ban from uploading or chat.
What the game records as you play
- Races and puzzles: who played, the puzzle, finish times, pieces placed, pauses, and weekly, daily and group puzzle results and prizes. If a time looks faster than a person could manage, we mark it for review.
- Your balance of uploads, make-up days, power tokens and streak savers, how you got each one, and your Prace Plus subscription.
When you pay
On the web, payments are handled by Stripe; your card details go to Stripe, never to us. In the phone apps, Apple or Google handle the payment. We receive a record of what you bought and when, not your card.
Collected automatically
- Technical logs: our hosting provider and sign-in provider keep request and sign-in logs, which include your IP address, for security and to stop abuse.
- How the game is used: a short record of things that happen in the game, such as opening it, signing up, starting or skipping the tutorial, finishing a race, opening an invite link, looking at the store and buying something, with a few details about each (for example the piece count, whether you won, or which pack you bought). We also note when you last opened the game signed in, and how you first found it (an invite link, a search, another website, or straight in). We use this, inside Prace only, to see which parts of the game work and where people get stuck. It's kept on our own servers: no analytics company, no cookies, no advertising id, and no IP address. If you play as a guest, it isn't linked to you: each visit gets a random number that isn't saved on your device, so we can't tell one visit of yours from the next.
- Crash reports: if the game hits an error, on our server or in your browser, we get a report so we can fix it: the error itself, what the game was doing just before it (screens opened, buttons pressed, requests made), your browser and device type, which version of the game you had, and your account id if you're signed in. Reports never include your email, your IP address, your chat messages or your pictures.
3. How we use it, and why we're allowed to
| What we do | Legal basis (EU and UK) |
|---|---|
| Run the game: your account, races, records, friends, groups, chat, uploads, prizes and purchases | To perform our contract with you (the terms of use) |
| Keep the game fair and safe: spot cheating, review reported pictures, stop abuse, keep logs | Our legitimate interest in a fair, safe game, and yours |
| Fix bugs from crash reports | Our legitimate interest in a game that works |
| Understand how the game is used, to improve it (the usage record above) | Our legitimate interest in improving the game. You can object: email us |
| Keep purchase records | Legal obligation (tax and accounting law) |
| Report illegal content where the law requires it | Legal obligation |
We don't use your data for advertising, we don't sell it or share it for advertising, and we don't make automated decisions about you that have legal or similarly significant effects. Marking a suspiciously fast time keeps it out of records until a person looks at it; it doesn't close your account. A picture reported by three different people is hidden until a moderator looks at it, and an uploaded picture that the automatic check finds likely to break the community rules is refused; every other moderation decision is made by a person.
4. Who else handles it
These companies process data for us, only to provide their service, under contracts that require them to protect it:
- Supabase: sign-in (your email, name from Google, sign-in logs).
- Replit, and the cloud provider it runs on: hosting the game, its database and uploaded pictures.
- Google: if you choose "Continue with Google".
- Stripe: web payments.
- Google Cloud Vision: every picture you upload is checked automatically for content that breaks the community rules before anyone else can see it. Google gets the picture only, with its location and camera data already removed, not who you are.
- Sentry: crash reports (the error, your browser and device type, and your account id).
- Apple, Google Play and RevenueCat: purchases in the phone apps, once they're available.
We may also share data if the law requires it, to protect someone's safety, or as part of selling or merging the business (in which case this policy keeps applying to your data).
5. What other players can see
- Anyone you race, or who sees a weekly or daily table: your name, picture or colour, whether you have Prace Plus, and your times and places.
- Friends: also your records against them, your streaks, and the chat you have with them.
- People in your groups: the group's chat and puzzle results.
- Pictures you upload are shown only to the people in the races and group puzzles you use them in, and to our moderators. A picture taken down by a moderator is shown to nobody but you.
- Your email is shown to nobody but you; friends need to know it already to find you.
Blocking someone hides your pictures from each other and keeps you out of each other's rooms.
6. How long we keep it
We keep your data while you have an account. When you delete it:
- Deleted straight away: your name, email, profile picture and colour, your uploaded pictures, your chat messages, friends, invites, blocks and group memberships, your weekly, daily and group results, and your sign-in.
- Kept without anything that identifies you: races against other players (they're part of your opponents' records too, and show you as "Deleted player"); picture reports you made, without what you wrote, until they've been reviewed; open reports about you, until they've been reviewed; moderation decisions about your account; if you were banned from uploading or chatting, a one-way scrambled (hashed) copy of your email address, so the ban still applies if you sign up again with it; the record of how the game was used, with your account taken off it; and purchase records, for 7 years, as tax law requires.
Some things are deleted sooner: room chat when the room closes (unless reported); friend and group chat a year after it's sent; reports a year after they're resolved; races saved for later after 30 days; the record of how the game is used after 13 months; crash reports within 90 days. Our providers keep their logs for their own set periods, and backups are overwritten within 30 days.
How to delete your account, step by step: Delete your Prace account.
7. Your rights
Wherever you live, you can ask us to:
- See the data we hold about you, and get a copy in a format you can take elsewhere;
- Correct it (most of it you can change yourself in the game);
- Delete it (you can delete your account yourself in the game);
- Object to or restrict what we do with it.
Email privacy@playprace.com from the address on your account. We'll answer within 30 days (or tell you why we need longer, as the law allows), and we won't treat you differently for asking.
EU and UK players
You have the rights above under the GDPR and UK GDPR, and you can complain to your local data protection authority (in the UK, the Information Commissioner's Office). We'd like the chance to sort it out first. Our representative in the EU is [EU REPRESENTATIVE NAME AND ADDRESS], and in the UK [UK REPRESENTATIVE NAME AND ADDRESS]; you can contact them instead of us about anything in this policy.
California players
Under the CCPA, as amended by the CPRA, you can know what personal information we collect, use and disclose; delete it; correct it; and opt out of its sale or sharing. We don't sell your personal information or share it for cross-context behavioural advertising, and we haven't in the last 12 months. We don't use sensitive personal information except to provide the game. The categories we collect are identifiers (email, account id, IP address), the content you create (pictures, chat), commercial information (purchases) and game activity, from the sources and for the purposes above. You can use an authorised agent to make a request.
8. Children
Prace is for people aged 13 and over, or older where the law sets a higher age for using online services without a parent's consent (up to 16 in some EU countries). Prace isn't made for children and we don't knowingly collect personal data from anyone younger. If you think a child under that age has an account, email privacy@playprace.com and we'll delete it.
9. Storage in your browser
The game saves a few things on your device so it works: your sign-in, your settings, guest profiles and races against the computer, and a race in progress so a reload doesn't lose it. If you add Prace to your home screen, it also keeps a copy of the game itself, so races against the computers work without a connection. It uses your browser's local storage for this; nobody but the game reads it. We use no advertising or analytics cookies, and nothing that identifies your device is stored for analytics. For as long as a tab is open it remembers how you arrived (an invite link, say), so signing in still knows; it's gone when you close the tab. Signing out removes your sign-in; clearing your browser's site data removes the rest.
10. Security
Everything between your device and our server is encrypted (HTTPS). Our server checks every request for an uploaded picture, so only the people it was shared with can fetch it. Access to our database is limited to the people who run Prace. No system is perfectly secure; if a breach puts your data at risk, we'll tell you and the authorities as the law requires.
11. International transfers
Our servers and providers are in the United States. When we move data from the EU or UK there, we rely on our providers' Standard Contractual Clauses (and the UK addendum) or their certification under the EU–US Data Privacy Framework.
12. Changes to this policy
When we change this policy, we'll update the date at the top. If a change matters, for example we start collecting something new, we'll tell you in the game before it takes effect.