Yellow Car: privacy

Effective 23 October 2026. Українською · Deutsch

Yellow Car is a game for family and friends: yellow cars drive to each other along real roads. This is what the game needs, where it lives and how to delete it.

What we store

• Sign in with Apple: only the stable identifier Apple gives our app. No e-mail from Apple.
• Sign in by e-mail: the address we send the code to, and nothing else is ever sent there. The code itself is not stored, only its fingerprint, and it expires after 10 minutes.
• Your name, as you entered it or as Apple shared it at first sign-in.
• Your city and its coordinates, where your cars start. Friends see the city name only.
• Friends: people who accepted each other's invites. There is no search for strangers.
• Cars and trips: route, schedule, mileage, what happened on the way.
• The trunk: notes and photos you send to a friend, visible to you and that friend once the car arrives. A lost car's trunk is deleted with it.
• “Yellow car!”: when you pressed the button (to the millisecond, to know who was first), whom you gave a punch, and points for the week. Only your friends see the points. For a real car on the street, the photo you take: your phone checks that it shows a yellow car, and only the friend you punch sees it.
• A push token to tell you when a car arrives or comes home.
• Car purchases: the App Store transaction number, which car and when, so one purchase gives one car. Only Apple sees the payment and your card.
• Reports: if you report a note or a photo, we keep the report and get that note or photo by e-mail to look into it within a day.
• Your phone's language (Ukrainian, German or English), so notifications and the sign-in e-mail come in it.

No ads, no analytics, no tracking. We don't sell data or share it beyond the services below that make the game work.

Where it is kept

• Cloudflare (D1 database and R2 storage in Western Europe): everything listed above.
• Apple: Sign in with Apple and push delivery (APNs).
• Cloudflare Email Service: delivers the sign-in code to your address.
• OpenStreetMap routing (Valhalla by FOSSGIS, OSRM): only the coordinates of two cities, to compute a route. No names or identifiers.

Deleting

In the app: the “You” tab → Delete account. Profile, cars, trips, trunks, items, photos, friendships, blocks, purchases, reports and the “Yellow car!” rounds you won are deleted immediately and for good, along with the photos on our server. Friends' cars that were heading to you or from you go back home to their owners. Signing out is in the same place.

Settings and blocking

Under “You” you switch three kinds of notifications (punch, “Yellow car nearby”, events on the road) and the klaxon on or off. The server stores only those switches. Someone you block stops being your friend and can't become one again through an invite while the block lasts; they are not told. Only you can see your list of blocked people.

Your rights

You can ask what we hold about you, correct or delete it, restrict processing, or complain to a data protection authority. The legal basis is performing the agreement: the game can't work without this data.

Contact

Denys Vasyliuk, MOONAGE studio · hi@moonage.me