Privacy Policy
What Daily Dirt Rally collects, why, who else can see it, and how to get it removed. Written to be read rather than to be skipped.
Last updated: 8 September 2026.
Daily Dirt Rally (“the site”) is operated by Donald Harris as an independent project. This policy explains what the site collects, what is done with it, and the rights you have over it. Questions about anything here go to contact@dailydirtrally.com, which is a monitored address.
1. The short version
- There are no user accounts, so there is no profile to build.
- A leaderboard entry stores the name you type, your race time and the track date. Nothing else.
- If you use the contact form, your name, email address and message are stored so we can reply to you.
- The web server keeps standard access logs, as every web server does.
- The site does not currently serve advertising and sets no advertising or analytics cookies. Section 5 explains what would change if that ever alters.
- We do not sell personal information, and we never have.
2. What is collected, and why
| Data | When | Why | Kept for |
|---|---|---|---|
| Leaderboard name, time, track date | When you finish a race and submit a time | To display the daily leaderboard | Indefinitely, unless you ask for removal |
| Name, email, message | When you use the contact form | To read and answer your message | Until the exchange is resolved, then deleted periodically |
| IP address, browser and OS string, requested URL, timestamp | On every request, in server logs | Security, abuse prevention and diagnosing faults | Rotated in the ordinary course of server operation |
| Multiplayer session identifier | When you join a lobby | So the lobby can find your connection again after a drop | The lifetime of the session |
That is the complete list. There is no analytics platform, no advertising identifier, no fingerprinting, no email list and no cross-site tracking operated by us.
Whatever name you type when submitting a time is shown publicly on the site. Do not use your real name, your email address or anything else you would not want a stranger to read. Names are limited to ten characters and are checked against a profanity filter.
3. Legal basis for processing
For visitors in the UK, EU and EEA, the lawful bases under the UK GDPR and GDPR are:
- Consent for a leaderboard entry — you choose to submit a time and choose the name attached to it — and for the contact form.
- Legitimate interests for server logs, limited to keeping the site available, secure and debuggable.
4. Cookies and local storage
The site uses the minimum storage it can. At the time of writing that means a session identifier used by the multiplayer lobby so your connection can be re-associated with your slot if you drop out mid-race, and browser storage the game engine uses for local settings. Neither is used to track you across other websites.
You can block or delete cookies in your browser settings. Doing so will not stop you driving; it may prevent a mid-race reconnection from restoring your vehicle.
5. Advertising
The site does not currently display advertising. It briefly carried third-party ad scripts during 2026, which were removed. We are describing the position here in full because it may change, and because you are entitled to know before it does rather than after.
If advertising is introduced, the following will apply and this policy will be updated with the date it took effect:
- Where ads may appear. Only on written pages — guides, the FAQ, the changelog, the about page and the home page. Never on the game screen, the lobby, a loading screen, a countdown or a results overlay.
- Third-party vendors. Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this and other websites.
- Google’s advertising cookie. Google’s use of advertising cookies enables it and its partners to serve ads to users based on their visits to this site and other sites on the internet.
- Opting out. You may opt out of personalised advertising by visiting Google Ads Settings. You can opt out of a third-party vendor’s use of cookies for personalised advertising at aboutads.info/choices, or for European visitors at youronlinechoices.eu.
- Consent in Europe. Visitors in the UK, EU and EEA would be asked for consent before any advertising or measurement cookie is set, and would be able to refuse or withdraw that consent without losing access to the game.
- Children. Any advertising would be configured as non-personalised for users identified as children, and no ads would be served on content directed at children.
6. Who your data is shared with
Nobody, other than the infrastructure required to run the site: the hosting provider that operates the server, and the certificate authority that issues its TLS certificate. Your data is not sold, rented, traded or given to advertisers, data brokers or analytics companies.
The site is hosted in the United States. If you are accessing it from elsewhere, your data is processed there.
7. Your rights
Under the GDPR, the UK GDPR and the CCPA/CPRA you have the right to know what is held about you, to have it corrected or deleted, to object to processing, and — under the CCPA — to not be discriminated against for exercising those rights. We do not sell personal information, so there is no sale to opt out of.
Because there are no accounts, exercising these rights is done by email. Send your request to contact@dailydirtrally.com with enough information to identify the record — for a leaderboard entry, the name and the track date. Requests are actioned within 30 days and usually within a few days.
8. Children
Daily Dirt Rally is a general-audience game and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information — for example a real name on the leaderboard — email us and it will be deleted promptly.
9. Security
The site is served exclusively over HTTPS with an automatically renewing certificate. Stored data is limited by design: the less that is collected, the less there is to lose. No system is perfectly secure, and we will not pretend otherwise — but the worst case here is the disclosure of a ten-character alias and a lap time.
10. External links
Pages on this site link to external resources. Those sites have their own privacy policies and we have no control over them.
11. Changes to this policy
Material changes — particularly any introduction of advertising or analytics — will be reflected here with an updated date at the top of the page and noted in the changelog.
12. Contact
Privacy questions, deletion requests and complaints: contact@dailydirtrally.com. UK and EU visitors also have the right to complain to their national data protection authority.