Effective November 1, 2026 · Operated by Mason Earl
The website game and iPhone app use the same game code hosted at masonearl.com. You can play without an account. The game has no advertising, third-party analytics, or session recording.
Your graphics setting, paint finish, booster preference, stunt record and personal race bests are saved in your browser or the app’s web storage. These preferences are not sent to us, except your paint finish while Live players is on (below). The browser and app have separate storage, so personal bests do not automatically sync between them. Clearing site data or deleting the app removes its local data.
Only when you tap “Share my time” do we receive a random racer credential and a replay of your driving controls. We simulate those controls to verify your result. We store a hashed racer identifier and your best verified time for the month. Your generated racer name and time are publicly visible. We do not request your name, email, contacts, location or advertising identifier. Replays are processed for verification and are not stored by the leaderboard.
Your private racer credential stays in local storage and authorizes deletion. Use Race → Monthly online leaderboard → Delete my online times to remove the entries and reset this identity. Delete your times before clearing local storage; otherwise we cannot associate you with the anonymous entries. Contact hi@masonearl.com if you need help, including the generated racer name.
The board resets monthly. Leaderboard records expire no later than 38 days after submission. For abuse prevention, a keyed hash of the network address is held in a rate-limit counter for up to 11 minutes; the leaderboard does not store the raw address.
Sign in with X is optional. The game requests only tweet.read and users.read. It never posts, follows, or sends messages on your behalf. Share my score opens a draft on X that you publish yourself. After you sign in we keep a signed session cookie and a public player record: handle, display name, avatar URL, join date, and sign-in count. If you post a kickflip score we also keep your best score and date. Those public fields appear on /players and on /p/yourhandle. We do not store your email or X access tokens. Sign out clears the session cookie. Contact hi@masonearl.com to remove a published handle row.
Achievement progress is saved in your browser. If you sign in with X, that local progress is merged into a record keyed by your public handle (which badges you unlocked and when). Those badges also appear on /p/yourhandle. Guest play never sends achievement data. We do not store emails, X tokens or any other profile fields for achievements. Sign out leaves the badges on the handle; clearing site data removes the guest copy on this device. Contact hi@masonearl.com to remove a handle’s achievement record.
While you drive, other players on the same world (Mars or the Moon) see your truck, or your robot when you are on foot, move in real time with a name above it. Your name is a generated guest name, or your X handle if you signed in with X; the game never accepts a name typed by the player. To do this the game sends masonearl.com your world, position, heading, speed, truck or on-foot state and paint finish, about four times a second when someone else is on your world and every two seconds when you are alone, together with a random identifier saved in your browser. We keep only a keyed hash of that identifier with your latest update, which other players stop seeing after 6 seconds and which is deleted within 30 seconds of your last update. Other players never receive your identifier or network address. Updates stop when you turn off Settings → Show other players, switch tabs, leave the game or stay paused for 30 seconds. For abuse prevention, a keyed hash of the network address is held in a rate-limit counter for up to 20 seconds. The small embedded player (for example in a post on X) never shares or shows live players.
Vercel serves the game and API; Upstash stores leaderboard and live-player records. Network requests necessarily disclose your IP address and ordinary browser/device request headers to hosting providers. Their infrastructure may maintain security and operational logs under their own retention policies. We do not use these requests for advertising or cross-app tracking. If you email support, we receive the information you choose to send and retain it while handling your request; you can request deletion.
Online sharing is optional and does not affect free driving or local medals. There are no chat, uploaded profile photos, custom public names, ads or purchases. We do not sell personal data. Questions or deletion requests: hi@masonearl.com.
If this policy changes, its effective date will be updated here. New data collection requires a corresponding product and privacy update.