Privacy Policy
Garage Rush · Last updated: 29 October 2026
1. Controller
Jens Joseph
Heidestraße 51, 44866 Bochum
Email: garagerush@jensjoseph.com
2. Data we process
- Account: email address, driver name, encrypted password (or sign-in with an email code), registration and sign-in times, technical session data (IP address, device type) to secure your sign-in.
- Game progress: progress, vehicles, tuning, credits, diamonds, cosmetic items and settings, so you can keep playing on any device.
- Online features: your driver name, player ID, league placement, best results, favourite car and badges are visible to other players on leaderboards and profiles; we store friendships so you can compare with each other.
- Purchases: Apple or Google process in-app payments. Through our service provider RevenueCat we only receive the product, transaction number and time in order to credit diamonds. We never receive payment details.
3. Purposes and legal bases
Providing the game, your account and cloud saves (Art. 6(1)(b) GDPR), processing purchases (Art. 6(1)(b) and (c)), security and abuse prevention (Art. 6(1)(f)). Optional reward videos (Art. 6(1)(a) GDPR – your consent where required – or Art. 6(1)(f)): you only see ads when you start a video yourself.
3a. Advertising (Google AdMob)
For the optional reward videos and occasional full-screen ads after a race (at most about every 3–5 minutes, not for VIP members) we use Google AdMob (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). When an ad loads, Google processes device and usage data (e.g. IP address, advertising ID, device type, interaction with the ad) to serve and measure ads and to prevent fraud. Users in the EU, EEA, Switzerland and the UK are asked first through Google's consent dialog; without consent to personalised ads, Google only shows non-personalised ads. On iPhone the advertising ID is only used if you allow app tracking. You can change your choice at any time in the game (Settings → Ads) or in the iOS settings; on Android you can reset or delete the advertising ID in the Android settings (Google → Ads). To confirm a reward we send Google your player ID (no email address). Data may be transferred to the USA (EU-US Data Privacy Framework / Standard Contractual Clauses). More: policies.google.com/technologies/ads.
3b. Notice for users in the USA
Under some US state laws (e.g. CCPA/CPRA in California), sharing device and usage data with Google AdMob for personalised ads may count as a "sale" or "sharing" of personal information. We do not sell your data for money. You can opt out of personalised ads at any time ("Do Not Sell or Share My Personal Information"): in the game under Settings → Ads, through Google's privacy dialog, or by emailing us. You also have the right to access, correct and delete your data; we will not discriminate against you for exercising these rights.
4. Service providers
- Server and database hosting (Vibecode).
- RevenueCat Inc. (USA) for purchase processing; transfers based on the EU Standard Contractual Clauses.
- Sign-in codes are sent by email through the Vibecode email service.
- Apple (App Store) or Google (Play Store) for download and payment.
- Google Ireland Ltd. (AdMob) for the optional reward videos.
5. Retention
We keep your data as long as your account exists. If you delete your account (in the game: Settings → Account → Delete), your account, progress and collection are deleted immediately. We keep purchase records only where the law requires it.
6. Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a data protection authority. Contact us at garagerush@jensjoseph.com.
7. Children
Garage Rush is not directed at children under 13. Minors need their parents' consent for purchases.