Beat My Lap — Privacy Policy

Last updated: 18 October 2026

Who we are

Beat My Lap is a racing game made by Ercan Eraslan, who is responsible for the data described here. Contact: ercaneraslan@gmail.com.

The short version

• No ads, no in-game chat. We never ask for your name, e-mail, phone number, photos or location.
• The app gives you an anonymous game profile — a nickname made of fixed words, a friend code, your coin balance and your Daily Track results — so your coins and medals are kept safe. Friends you add with a friend code see your nickname and today's Daily result. You can delete it at any time.
• The game is played in the iPhone app. This website only has its home page, this policy and the help pages: it has no profiles, no statistics and no cookies.
• Anonymous play statistics are off unless you switch them on in the game (Privacy on the title screen).
• Notifications are off unless you turn them on in the app; we only send three kinds: a friend challenged you, a friend beat your time, or a friend sent a reaction to a challenge.
• Everything else the game remembers stays on your device.

Anonymous play statistics (only if you switch them on)

If you turn on Statistics, the game creates a random ID on your device (it is not linked to your name, account, advertising ID or device serial number) and sends, together with that ID:

• that the game was opened, and which mode (Grand Prix, Daily Track or a track you picked);
• the steering type you picked (tilt, buttons or keyboard);
• for each race: when it started and ended, the Daily Track date, whether you finished, quit or restarted, the lap you reached, and how many drifts and turbos you did.

Why: to see which parts of the game are played, too hard or confusing, and to improve it. Legal basis: your consent, which you can withdraw at any time by switching statistics off.

How long: statistics are deleted automatically after 180 days.

Switching off stops all statistics and deletes the random ID from your device. New random ID starts over with a fresh ID. To have statistics already sent deleted, e-mail us the ID shown in the Privacy screen (Copy ID).

Your game profile (the app only)

The first time you open the app, it creates an anonymous game profile on our server. It holds:

• a random account ID made by our database provider (no e-mail, password or phone number);
• for keeping you signed in, our database provider (Supabase) stores with your session the IP address and the app / browser version it last connected from, for as long as your profile exists, and keeps a sign-in log (with the IP address) that is deleted automatically after 30 days;
• a nickname made only of words from fixed lists (such as SwiftKoala or MidnightComet42): one at random at first, then the one you pick in the name machine (nothing is typed), how many times you changed it, and a friend code;
• your coin balance and the history of your coin changes (amount, reason — for example "starting coins" or "Grand Prix 2nd place" — and time), and the days you bought a Forecast;
• your Daily Track results: for each day you finished it, your best time and best lap, the medal, how many times you finished and your streak (Dailies on days in a row), how many Streak Freezes you have and the days one covered. Each result is sent with its race's recording (the "ghost" below) so our server can check it was really driven; the recording is checked and not kept. If a result is refused, we keep the day, the time and the reason for 90 days;
• your friends: the profiles you and other players connected by entering a friend code, and when. Your friends see your nickname and, for today's Daily Track, your best time, medal and streak, and whether that race used gear or bought items — and, in a challenge you send them, your ghost's colour and drift trail (the style you picked) — nothing else. Either of you can remove the friendship at any time; whoever you remove can't add you back (we keep who removed whom for that) unless you add them yourself. You can also get a new friend code (in Privacy, once a day): the old one stops working. To stop people from guessing codes, the number of wrong codes you enter is counted for an hour;
• your challenges: when you challenge a friend, your best Daily race of the day — or your best race on a track you picked, with that track and its weather — is sent to them with its recording (the "ghost": your kart's position on the track, a few times a second — nothing else) and the gear and items it was raced with; for each challenge we keep who sent it to whom, the time, the track and until when it can be beaten, the tries (time, coins paid, result), the coins it earned and the reaction each of you picked (one of four fixed stickers, such as 🤝 GG — no text can be typed);
• if you turn notifications on: your device's notification address (a token Apple gives the app, which only works for sending this app's notifications to this device) and your device's time zone (such as Europe/Istanbul, so nothing arrives between midnight and 8 am your time), and the notifications we queued for you — who challenged you, beat your time or reacted, and when it was sent. Queued notifications are deleted after 30 days.
• your garage: the paints, outfits and gear you bought with coins (and when), and the ones you wear; for each Daily, the gear your best race of the day was driven with;
• your items: the item packs you bought with coins (and when), how many of each you have, and the items your best Daily race of the day used (friends you challenge see them);
• if you buy coins: for each purchase, the App Store's transaction number, the coin pack, the date, whether it was a test purchase, and whether it was refunded. Apple handles the payment: we never see your name, Apple Account or payment details.

The app keeps a sign-in key for this profile in your device's secure storage (the iOS keychain), so your coins are still there if you reinstall the app. The key is part of your iPhone's own (encrypted) backup, so a new iPhone set up from that backup keeps your profile; it is not shared between devices.

Save your progress (Sign in with Apple, optional): if you tap SAVE PROGRESS and sign in with Apple, your profile is linked to your Apple ID so you can get it back on another iPhone or iPad. We ask Apple for nothing but a hidden number that stands for your Apple ID in this game (no name, no e-mail), and keep a sign-in key Apple gives us so that deleting your profile also removes the game from your Apple ID's list. If that Apple ID already has a profile, you can switch to it: what the phone's profile had (coins, purchases, items, friends) joins it and the phone's profile is deleted.

Notifications: turning them off (the switch in Friends) deletes your device's notification address from our server; you can also turn them off in your phone's settings.

Why: to keep your coins, pay the coins your races earn and, as the game grows, to let you and your friends challenge each other. Legal basis: it is needed to provide the game features you use. How long: until you delete it.

Deleting it: in the app, open Privacy on the title screen and tap Delete my game profile: the profile, its coin history, Daily results, friendships, challenges and notification addresses are deleted from our server right away (coins are lost, including bought ones). Records of coin purchases are kept without any link to you, for accounting and so that a purchase can't be paid twice. Uninstalling the app does not delete it from the server — delete it first, or e-mail us your friend code and we will.

What every copy of the game sends

To know which Daily Track it is, the game asks our server for today's date (in UTC). This request contains no ID or game data. Like any internet request it reaches our service providers with your IP address; we don't store it. To protect the statistics service from abuse, the IP address of a device sending statistics is kept only as a one-way hash for about ten minutes.

What stays on your device

Your settings (sound, steering, tips seen, statistics on/off), your Grand Prix choices and the best race of each recent Daily Track and of the tracks you raced from Tracks (its recording) are saved on your device only. Uninstalling the app or clearing its data removes them.

Service providers

• Supabase — hosts the statistics database, the date service and game profiles.
• Apple Push Notification service — delivers notifications to iPhones, if you turn them on.
• Vercel — hosts this website (its home page, this policy and the help pages); like any web host it keeps standard access logs.
• Apple App Store — distributes the app and processes coin purchases under Apple's own privacy policy.

These providers may process data in countries other than yours, under their data-protection terms. We do not sell data, share it for advertising or use it to track you across other apps or websites.

Children

The game is suitable for all ages. The game profile contains no personal information: its nickname is made only of the game's own words (the player can pick a combination, but never types it). Statistics are off by default; they are meant for players aged 13 or over, or younger players with a parent's permission. We do not knowingly collect personal information from children. If you are a parent and believe your child turned statistics on, switch them off in the Privacy screen or contact us and we will delete the data. Coins can be bought with real money only through the App Store, where parents can require approval (Ask to Buy) or turn in-app purchases off in Screen Time.

Your rights

Depending on where you live (for example under the EU GDPR or Turkey's KVKK) you can ask to access, correct or delete data about you, withdraw consent, and complain to your data-protection authority. Because statistics use only a random ID, please include that ID when you write to us so we can find the data.

Changes

If this policy changes, we'll update the date above and, for important changes, tell you in the game.