TERMS AND PRIVACY

Cardboarder is a small game about cardboard cars. This sheet says what we keep about you, why, and the rules of the hill. It is written to be read, not skimmed past.

PRIVACY

Racing without signing in

You can build a car and race the hill without telling us anything. Your car, today's times and any run waiting to be posted are kept in your own browser (local storage) and go nowhere else. Nothing is sent to us until you sign in and post a time.

When you sign in

Signing in uses Supabase Auth, with Google or an emailed link. We keep your email address so you can sign in again; with Google we also receive the name on your Google account. Neither is shown to anyone. Your session is kept in your browser's local storage, not in a cookie.

What goes on the noticeboard

• The username you choose, next to your car's name and your times. This is public: the leaderboard is the point.
• Your best run each day, so that anyone can watch it. That is the car and a recording of where it went. Runs that were not your best that day are counted, not kept.
• Cars you put on the shelf (the design and a small photograph). These are private to your account.
• Reports you make about somebody else's run, and any note you add.

Keeping cheats off the hill

Each run and account carries a scrambled note of the connection it came from: a salted hash of the address, not the address itself. It lets the stewards notice one connection wearing twenty names and ask it to leave for a while. It is cleared after 30 days. The stewards can strike out runs, void times and ban accounts; those decisions are written in an audit book we keep.

Who else sees it

The site is hosted by Vercel and the noticeboard lives in a Supabase database; both process the data on our behalf. The lettering comes from Google Fonts, which means your browser asks Google for the font files. There are no advertising networks, no analytics, and no tracking cookies.

Your rights

You can see your last month of races from the ACCOUNT card. To change your username, use the same card. To have your account and everything attached to it removed, or to ask what we hold, write to support@cardboarder.racing from the address you signed in with. We will do it within 30 days. If you are in the UK or EU you also have the right to complain to your data protection authority.

Children

The game is fine for anyone; the noticeboard is not. If you are under 13 (or under 16 where that is the rule), race as much as you like, but please do not sign in or post times.

TERMS

The rules of the hill

• Race fairly. Tampered replays, doctored times or any other way of putting a run on the board that the car did not earn will be struck out, and the stewards may ban the account or the connection.
• Keep it clean. Usernames, car names, decals and notes must not be rude, hateful or made to look like somebody else. The stewards have the final say and do not have to explain themselves.
• One person, one account. Do not make accounts for other people or share yours.
• Do not hammer the noticeboard. Automated posting, scraping or anything that gets in the way of other racers is not allowed.

Your cars and runs

What you build is yours. By posting a time you let us show your username, your car and your best run of the day to anyone who looks at the board or watches the replay, for as long as the board is up.

The board

The hill changes every day and yesterday's board is closed. We may correct, strike out or clear entries, rebuild the course, or take the whole thing down for a while. We try not to lose anything, but a soapbox club run by volunteers makes no promises: the game and the noticeboard are provided as they are, without warranty, and we are not liable for any loss arising from using them, to the extent the law allows.

Changes

If this sheet changes in a way that matters, the date at the top changes with it and the race day clipboard will say so. Carrying on posting times after that means you accept the new sheet.

These terms are governed by the law of England and Wales.