Privacy policy

Lift & Coast Karting · effective 12 October 2026

Lift & Coast Karting ("the game") is made by Deviate (deviate.nl). This policy explains what the game does with your data. The short version: there are no accounts, no ads, no tracking and no analytics. We only process what is needed to let you race against other people.

What stays on your phone

Your settings, nickname, personal best times, chosen engineer, blocked players and remaining AA batteries are stored on your device only. Deleting the app deletes them.

What we process when you race online

• An install ID: a random code created by the app. It is not linked to your name, phone number, Apple ID or Google account. Other players only ever see a shortened, scrambled version of it.
• Your nickname (optional), the kart you pick, and your kart's position, speed and lap times while you race. Other players in the same race see your nickname and kart.
• Race nights: the room name, its settings and the season standings (nicknames, points, races, wins) are stored on our server until the host starts a new season or asks us to delete the room.
• Reports: if a player reports a nickname, we store the reported nickname, the scrambled IDs of both players and the time, to review it.
• Technical logs: like any website, our server records IP addresses and request times in its logs for security and troubleshooting. These logs are deleted after a short period.

Purchases

Payments are handled entirely by Apple or Google; we never see your payment details. To unlock a race night or your own engineer, the app sends the store's proof of purchase (a transaction signed by Apple, or a Google purchase token) to our server, which checks it with Apple or Google and remembers the transaction ID so the purchase can be restored on a new phone.

Your own engineer

If you buy an engineer who calls you by name, the name you type is sent to our server and to Google's Gemini API, which checks that the name is suitable and records the spoken lines. The recordings are stored on our server at an address only your app knows.

Where your data is

Our server runs on Google Cloud in the Netherlands (EU). Google acts as our processor for hosting and for the Gemini API. We don't sell or share your data with anyone else.

Children

The game can be played by everyone. Online play only uses an optional nickname; offensive names are filtered and can be reported and blocked from the results screen.

Your rights

Under the GDPR you can ask to see, correct or delete data about you. Email us with the player ID shown on the game's INFO screen, and we'll handle it within a month. You can also complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).

Contact

Deviate · support@deviate.nl