1. Leaderboard Submission Data (Stored on Our Server)

We collect and store only what's necessary for leaderboard functionality and fraud prevention:

• OEPlay.net Nickname publicly displayed in the leaderboard (Encrypted in storage, displayed publicly on leaderboards)
• OEPlay.net User ID for fraud prevention (Encrypted in storage, displayed in profile view)
• IP Address for fraud and abuse prevention (retained for one hour)
• Score/Best Lap publicly displayed in the leaderboard
• In-Game Vehicle publicly displayed in the leaderboard
• Platform Type publicly displayed in the leaderboard
• Selected Profile Icon publicly displayed in the leaderboard

Why we need this: To maintain fair leaderboards, prevent cheating, and attribute scores properly.
Public visibility: Nickname, vehicle, platform type, profile icon and score/time appear on leaderboards.
Leaderboard Data Retention: Data is stored only if you opt-in by submitting a score and retained until the next leaderboard reset.
IP Address: Hashed during submission and kept for one hour solely for fraud prevention and service abuse detection.

We collect this data only when you voluntarily submit a leaderboard score. By submitting a score, you consent to the processing of this data for leaderboard functionality and fraud prevention.

2. Cloud Save Data (Stored on Our Server)

If you enable cloud saves:

• Your game progress is securely stored on our servers to allow save synchronization and backup.
• Cloud save data is linked to your account or device solely for synchronization purposes.
• This data does not include directly identifiable personal information.
• Cloud save data is deleted if you disable cloud saving, opt out, or delete your account.

Consent: Cloud saves are optional and are only enabled if you choose to use this feature.

3. User Account Data (Stored on Our Server)

When you register for our OEplay.net service:

• Username and password (Passwords are hashed and securely stored, we do not store plaintext passwords)
• Friends list (To allow you and your friends to see and manage your in-game connections)
• Profile data (Nickname, unique user ID, profile icon, and recovery key used for account recovery; stored securely)

Purpose: This data is necessary to provide and maintain your user account.
Retention: Stored until account deletion or automatically deleted after 1 year of inactivity.
IP Address: Hashed for security and abuse prevention; retained for one hour.

3.5 Other Usage Data (Stored on Our Server)

Each time you use our OEPlay.net service, we may collect the following information to provide multiplayer functionality, show friend activity, and prevent abuse:

• IP Address (Hashed for security and abuse prevention; retained for one hour)
• Last login time (Used to show your friends when you were last online and to identify inactive accounts for removal)
• Your multiplayer Room (Stored encrypted to protect session data and allow friends or other users to join your session)

Retention: Stored until account deletion or automatically deleted after 1 year of inactivity.

Analytics Services (Firebase & Google Analytics)

These services help us understand how the app is used and improve it.

We share data with these services only if you consent. Consent may be requested either by us or directly by the third-party service.

If you consent, these services may collect the following information:

• Device information: Model, operating system version, language settings
• Usage patterns: Session length, features used, crash reports
• Approximate location: Derived from network information (not precise GPS)
• Technical identifiers: Randomly generated app instance IDs

You can withdraw or manage your consent at any time in App/Game Settings > Information > Your Consent.

Advertising Services (Google AdMob, Unity Ads, IronSource, Gadsme)

We share data with these partners only if you consent. Consent may be requested either by us or directly by the third-party service.

If you consent, these partners may collect:

• Advertising IDs: Resettable identifiers (AAID on Android, IDFA on iOS)
• Network information: IP address (for security and regional ads)
• Ad engagement: Which ads you view or interact with
• Performance data: Whether ads led to installations or purchases

Manage or withdraw consent at any time in App/Game Settings > Information > Your Consent.

5. User-Generated Content

Mods (via mod.io):

• User-created mods are hosted on mod.io's platform
• We only process mod metadata temporarily (name, version) to display and manage mods in the app
• Report inappropriate content: Use mod.io's built-in reporting tools; we do not access mod.io hosting directly

Local Device Data:

• Screenshots and cached images remain on your device; we never access them
• Cached images auto-delete and can also be manually cleared by you

6. Hosting Environment

Our web services operate on third-party shared hosting. The hosting provider may access data **only for legitimate technical purposes**, including:

• Essential security maintenance
• Technical operations
• Under strict confidentiality agreements

We do not share your data with the hosting provider beyond what is necessary for these purposes.

Your data may be processed outside your home country, including in the United States, when:

• Third-party service providers operate globally
• Our cloud hosting infrastructure spans multiple regions
• You interact with our services across borders

Legal Safeguards We Implement

• EEA/UK transfers: We use Standard Contractual Clauses (SCCs) approved by the European Commission
• US-bound data: We rely on the EU-U.S. Data Privacy Framework (DPF) when providers are DPF-certified
• Additional measures: Encryption in transit (TLS 1.2 or higher) and at rest (AES-256)

You have these options to manage your data:

• Opt-out paths in App/Game: Settings > Information > Your Consent
• Revoke permissions: Via device settings
• Reset advertising ID: Android: Google Settings > Ads, iOS: Privacy > Tracking
• Request full deletion: Contact support@oe-games.com