Privacy policy
Last updated: September 27, 2026.
This policy explains what data Urban Chaos .io (urbanchaos.io) collects and how it is used. For any question or request, contact us at info.codamedia@gmail.com. This address also reaches our Privacy Officer (person in charge of the protection of personal information under Quebec's Law 25). See also our terms of use.
What we collect
- Guest profile: a random player id and a secret token (stored hashed on our server and in your browser's local storage), your nickname and car color.
- Account (optional): if you create one, your username (public, reserved for you), your email address (private, used only to log in and reset your password) and your password, stored only as a salted scrypt hash.
- Purchases: payments are processed by Stripe. We never see or store your card number; we only keep what you bought, the amount and the Stripe transaction id.
- Game results: score, max level, vehicles eaten, duration and date. They are used for the public leaderboards (nickname and score are public).
- Technical data: your IP address is processed in memory for rate limiting and abuse prevention; it is not stored in our database. Our hosting provider may keep standard server logs for security.
Browser storage
The game stores your player id, login token, nickname and car color in your browser's local storage so you stay logged in between visits. It is not used for advertising.
Emails
We only email you when you ask for a password reset. These emails are sent through Resend. We do not send newsletters or share your email.
Advertising and cookies
The game is free and funded by ads. Our ad partners are:
- Google (Google H5 Games Ads / AdSense) — how Google uses data from partner sites, manage ad personalization.
- Monetag — Monetag privacy policy.
These partners may use cookies, similar technologies (including a service worker) or device identifiers to show ads, limit how often you see them, measure them and, where permitted or where you consented, personalize them. Where required by law (e.g. Europe, UK, Quebec), a consent message lets you accept or refuse advertising cookies and change your choice at any time. The game itself only uses your browser's local storage for your profile and settings (see below).
Your rights
- Quebec (Law 25) and Canada: you can ask to access or correct your information, withdraw your consent, or have your data deleted.
- United States (e.g. California, Virginia, Colorado): you can ask to know, access or delete your data, and opt out of the sale or sharing of personal information for targeted advertising through the consent message or your browser's Global Privacy Control.
- European Economic Area, UK and Switzerland: rights of access, rectification, erasure, restriction, objection and portability, and the right to complain to your data protection authority.
You can delete your account and all its data yourself in My account → Delete my account. For any other request, email info.codamedia@gmail.com from the address of your account, or with your nickname for guest profiles. Clearing your browser's storage also detaches you from your guest profile.
Retention
Game results are kept as long as the leaderboards exist. Unused guest profiles may be deleted after 12 months of inactivity.
Hosting
The game and its database are hosted by Render in the United States.
Children
At first launch the game asks your age. Players under 13 can play as guests only: they cannot create an account or make a purchase, and ads shown to them are non-personalized. We do not knowingly collect personal information from children under 13; if you believe a child has provided data, contact us and we will delete it.
Changes
We may update this policy; the date at the top shows the latest version.