AP Karting
Privacy Policy
This policy explains what personal data the AP Karting game (the “Game”) and the website apkarting.com (the “Site”) process, why, for how long, and what rights you have. It applies to every edition of the Game — Windows, macOS, iPhone and iPad, including test builds — and to every store it is distributed through.
In short
- The Game has no ads, no analytics and no tracking, and sells nothing inside the Game.
- Your driver profile, settings, results and circuits stay on your device. We do not receive them.
- Online races run through Epic Online Services. Players in a race see your driver name and appearance, and a direct connection can show them your IP address.
- The Site sets no cookies and loads nothing from other companies. What you send through its forms is delivered to our private Telegram chat.
- You can ask for a copy of your data, or for its deletion, at any time.
1. Who we are
The Game and the Site are provided by the operator named below (“we”, “us”). We decide why and how the personal data described here is processed, which makes us its controller.
- Operator
- Aleksandr Prokhorovich (AP Product Lab)
- Country of registration
- Georgia
- Address for notices
- Georgia, Tbilisi, Gldani district, massif Gldani, micro/district III, building 80
- support@apkarting.com
- Contact form
- apkarting.com/en/contact/
For questions about this policy or to use your rights, write to us through the contact form (topic “Personal data”) or at support@apkarting.com.
2. The Site
2.1 Visiting the Site
Our web server records technical data about each request: IP address, date and time, the page requested, the referring page, the browser’s user-agent string and the response status. We use these logs only to keep the Site working and secure, for example to detect and block abuse, and delete them after 14 days. The Site runs on a server rented from a hosting provider, which processes this data on our behalf.
2.2 Cookies and local storage
The Site does not use cookies, analytics, advertising pixels, social media plugins, or fonts and scripts loaded from other companies’ servers. When you pick a language, your browser remembers the choice in its local storage so the Site opens in that language next time. The value stays on your device, is never sent to us, and can be cleared in your browser settings.
2.3 Beta test applications
When you apply for the beta test we receive your name or nickname, your email address and the platforms you want to play on. If you choose to give them, we also receive your device, how you drive and your steering-wheel model, your karting experience, what you want to test, your Telegram username, your city and country, and your comment. We record whether you asked for news by email, the language of the page and the time you sent the form.
We use this to choose testers, to invite you to test builds and to write to you about the beta test; and, only if you ticked the box, to tell you about the release and other news of the Game. You can withdraw your consent at any time, and ask us to remove your application, by writing to us.
2.4 The contact form
When you write to us we receive your name, email address, the topic and your message, together with the language of the page and the time you sent it. We use them to reply and to keep a record of the conversation.
2.5 How the forms reach us
Our server passes each form straight to a private Telegram chat that only we can read, using the Telegram Bot API; it does not store the form. The one exception is when Telegram cannot be reached: then the form waits on our server, readable only by the service that sends it, until it is delivered, and for no longer than 7 days. Telegram stores the messages in our chat under its own privacy policy.
To protect the forms against automated abuse, our server keeps your IP address in memory for up to 10 minutes to limit how many forms can be sent from one address. We reply to you by email, or on Telegram if you gave us your username.
3. The Game
3.1 Data kept on your device
The Game stores on your device your driver profile (the name shown on the timing board, your height and weight, your suit and kart colours), your settings (language, graphics, controls and steering-wheel bindings), your race results, and the circuits you draw or download, including copies of photos you place under a circuit plan. This data is not sent to us. Your device or platform may include it in backups under its own terms. Deleting the Game’s saved data or uninstalling the Game removes it.
3.2 Online play
Online races use Epic Online Services (“EOS”), provided by Epic Games, Inc. When the Game starts, it signs in to EOS with an identifier created for the Game on your device, so you do not need an account; an edition distributed through a platform with its own sign-in (such as Steam) may use that sign-in instead. EOS gives the Game a product user ID. To list, host, find and join races, EOS and the devices you race with process this ID, your IP address and network information such as the type of your router’s address translation, your platform and the Game’s version, and the details of the race. Epic processes this data under its privacy policy.
What other players receive. A race you host is listed with your driver name, the circuit and the number of drivers, and can be joined with its room code. During a race, the other participants’ devices receive your driver name, platform, kart colours, suit and a body proportion derived from your height, as well as your controls and your kart’s position. Your weight goes only to the device hosting the race, which needs it to simulate your kart, and is shown to nobody. A circuit you drew, with its name, is sent to everyone in a race held on it.
IP addresses. Devices in a race connect directly where their networks allow it. A direct connection shows the other device your public IP address; where no direct connection is possible, traffic passes through Epic’s relay servers. In a race on a local network, the Game announces the race to other devices on that network, and they connect by their local addresses.
We do not run game servers and do not receive race data. The Game has no text or voice chat, and the Epic overlay is switched off.
3.3 What the Game does not do
The Game shows no advertising, sends no analytics or usage data to us, does not track you across other companies’ apps or websites, has no in-game purchases, and does not sell or share personal data.
3.4 Crash reports and diagnostics
The Game does not send crash reports to us; after a crash it may write a log on your device. Stores and operating systems may collect diagnostic data and share it with us, mostly in aggregate and, where you allowed it on your device, as individual crash reports — for example Apple’s “Share with App Developers” setting or the health reports of the Microsoft Store. We use such reports only to fix problems.
3.5 Device features
On iPhone the Game reads the motion sensors to steer by tilting the phone; the readings are used on the device during a race and are neither stored nor sent. Steering wheels, pedals and gamepads are read on the device. If the Game asks for access to your local network, it is to find and host races on that network. Photos you choose as a circuit underlay are read from the folder you pick and stay on your device. Links on the Game’s credits page open in your browser, where the linked sites’ own policies apply.
4. Stores and platforms
You obtain the Game from a store, whose own terms and privacy policy cover your purchase, download and account. We never receive your payment details. Depending on the store, we receive the following:
- Microsoft Store (Windows). Sales and acquisition reports, ratings and reviews, and health reports such as crash and hang counts, mostly aggregated. Microsoft Privacy Statement.
- Apple App Store and TestFlight (iPhone, iPad, Mac). Sales reports and app analytics, with analytics and crash reports coming only from people who agreed to share them with developers. If you join a TestFlight beta, Apple shares with us the name and email address you were invited with, your device model and system version, crash logs, the feedback and screenshots you send through TestFlight, and usage such as installs and sessions. Apple Privacy Policy.
- Steam, if the Game is released there. Sales reports, and your Steam ID when the Game signs in to online play with your Steam session. Steam Privacy Policy.
A test build may also be delivered through a private download link or a store’s private test; the invitation tells you which.
5. Purposes, legal bases and retention
We process personal data under the Law of Georgia on Personal Data Protection and, where it applies to you, the EU or UK General Data Protection Regulation (GDPR) or a similar law. The table names each ground by its GDPR article.
| Purpose | Legal basis | How long we keep it |
|---|---|---|
| Operating and securing the Site (server logs, rate limit) | Our legitimate interest in a working, secure website (Art. 6(1)(f)) | 14 days; addresses in memory for 10 minutes |
| Beta test applications and invitations | Your consent (Art. 6(1)(a)) | Until the beta test ends and 12 months after it, or until you withdraw consent |
| News about the Game by email | Your consent (Art. 6(1)(a)) | Until you unsubscribe |
| Answering messages | Our legitimate interest in replying (Art. 6(1)(f)); for requests about your data, our legal obligation (Art. 6(1)(c)) | 24 months after the conversation ends |
| Online play | Providing the features you use (Art. 6(1)(b)); our legitimate interest in fair, secure races (Art. 6(1)(f)) | We keep none of it; Epic retains EOS data under its policy |
| Store reports and crash reports | Our legitimate interest in understanding sales and fixing problems (Art. 6(1)(f)) | Up to 24 months after we download them |
We keep data longer only where the law requires it or where it is needed to establish, exercise or defend legal claims.
6. Who receives data
- our hosting provider, which runs the Site’s server on our behalf;
- Telegram, which carries and stores the forms in our chat;
- our email provider, when we write to you or you write to us;
- Epic Games, which provides online play, and the players you race with, as described in section 3.2;
- the store you obtain the Game from, as described in section 4;
- authorities, courts or advisers, when the law requires it or to protect our rights.
We do not sell personal data and do not share it for advertising.
7. International transfers
We are based in Tbilisi, Georgia, and read and handle what you send us there. Telegram, Epic Games, Apple, Microsoft, Valve and our providers may process data outside your country, including in the United States. Where the GDPR, the UK GDPR or the Law of Georgia on Personal Data Protection applies, we rely on the transfer grounds these laws provide, such as adequacy decisions — for example the EU–US Data Privacy Framework for certified companies — and the standard contractual clauses these companies offer. You can ask us for more information about these safeguards.
8. Your rights
Depending on where you live, you have the right to:
- know whether we process your data and get a copy of it;
- have inaccurate data corrected;
- have your data deleted;
- restrict processing, or object to processing based on our legitimate interests;
- receive data you gave us in a machine-readable format;
- withdraw consent at any time, without affecting what was done before;
- lodge a complaint with a data protection authority: the Personal Data Protection Service of Georgia, or the authority where you live or work.
To use these rights, write to us through the contact form or at support@apkarting.com. We answer within one month and may ask you to confirm that you control the email address the request is about. For data held by Epic, Telegram or a store, you can also contact them directly; to remove the Game’s online identifier from a device, delete the Game’s saved data or uninstall the Game.
Residents of California and other US states: we do not sell or share personal information and do not use it for purposes that would require you to opt out. You may ask to know, correct or delete the personal information we hold, and we will not treat you differently for doing so.
9. Children
The Game is made for a general audience. The Site’s forms and the beta test are only for people aged 16 or over. Online play is not directed at children under 13, and where a higher age of digital consent applies, a younger player should play online only with the permission of a parent or guardian. We do not knowingly collect personal data from children through the forms; if you believe a child has sent us data, tell us and we will delete it.
10. Security
The Site is served only over an encrypted connection; access to the server and to the chat that receives the forms is limited to us; and we collect as little as the forms need. No method of transmission or storage is completely secure, but if a breach affects your data we will inform you and the authorities where the law requires it.
11. Changes to this policy
We may update this policy as the Game and the Site change. The date at the top shows when the current version took effect. If a change is significant, we will say so on the Site or in the Game and, where we have your email address and the change affects you, by email.
How you may use the Game and the Site is set out in the Terms of Use.