Privacy Policy

Last updated: 18 October 2026 · Applies to cgt.monster and CGT Rocket X Racer services we operate.

1. Scope

This Privacy Policy explains how information is handled when you visit cgt.monster or play CGT Rocket X Racer—a browser HTML5 / Web runner game (and any related apps we may publish). Together these are the “Service.”

The game is entertainment only (cold-gas thruster “flying-car” style). It is not affiliated with any automotive brand. Fictional in-game motifs (e.g. “market-bear”) are not financial advice.

If the current web build collects little beyond hosting logs, this Policy still covers what may apply as features grow (including optional sign-in).

2. Geographic availability

The Service is intended for a global audience outside mainland China and outside jurisdictions where providing the Service would be unlawful or restricted under applicable sanctions, export-control, or embargo rules (including lists maintained by the United Nations, the United States, the European Union, the United Kingdom, and similar authorities).

We do not market or provide the Service to users located in mainland China. If you access the Service from a restricted territory, we may block, suspend, or terminate access. You are responsible for complying with local law where you live.

3. Information we collect

What we collect depends on how you use the Service. Today the marketing site and web playable builds may collect little or no account data. Categories may include:

3.1 Information you provide

• Support messages — if you contact us through in-game / in-app support or a future site contact form, we process the content you submit and related metadata.
• Account details (if / when accounts are offered) — such as display name or linked sign-in identifiers. See Section 4.

3.2 Information collected automatically

• Technical and log data — IP address, approximate location derived from IP, browser or device type, operating system, referrer URL, pages or assets requested, timestamps, and error diagnostics. Hosting and CDN providers (for example Cloudflare, GitHub Pages, or similar) may generate these logs as part of delivering the Service.
• Local storage / necessary cookies — preferences or session state stored on your device to make the game or site function. See our Cookie Notice.
• Gameplay telemetry (if enabled in a future build) — non-precise performance metrics (e.g. crash reports, mode selected). We will update this Policy if we introduce analytics beyond necessary operation.

3.3 Information we do not intentionally collect

We do not require payment card data on the marketing site. We do not knowingly sell personal information. We do not use the Service to provide banking, investment, or real-money gambling services.

4. Accounts and sign-in (Apple / Google / web)

We may introduce optional sign-in so you can save progress or sync across devices, including:

• Sign in with Apple
• Google sign-in
• Web account created on our Service

Until such features launch, playable web builds may work without an account.

When you choose Apple or Google sign-in:

• Apple Inc. and Google LLC (and their affiliates) act as independent controllers of data they collect under their own privacy policies and terms. We receive only the identifiers and profile fields those providers share with us after you authorize the sign-in (for example, a stable user ID and any name or address fields you permit them to share).
• We act as a controller of the account data we store on our systems to operate your Service account. In some technical arrangements we may also act as a processor solely to complete authentication callbacks—without changing Apple’s or Google’s independent controller role for their platforms.
• You can review and manage permissions in your Apple ID or Google Account settings. Disconnecting sign-in may limit synced features; residual logs may remain as described under Retention.

5. How we use information

We use information to:

• Provide, secure, and maintain the Service (including CDN delivery, abuse prevention, and debugging);
• Create and manage accounts when offered;
• Respond to support and privacy requests;
• Comply with law, enforce our Terms, and protect rights, safety, and integrity;
• Improve gameplay and site performance, using aggregated or de-identified data where practical;
• Send service notices related to your account or request (not unsolicited marketing spam).

6. Legal bases (EEA / UK and similar)

Where the GDPR or UK GDPR applies, we rely on one or more of:

• Contract — to provide the Service you request;
• Legitimate interests — security, fraud prevention, service improvement, and limited analytics that do not override your rights;
• Consent — where required (e.g. non-essential cookies), which you may withdraw;
• Legal obligation — where we must retain or disclose information.

7. Sharing and processors

We do not sell personal information. We may share information with:

• Hosting / CDN / infrastructure — e.g. Cloudflare, GitHub Pages, cloud object storage, or similar vendors that process data on our instructions to deliver the Service;
• Identity providers — Apple and Google, as described in Section 4;
• Professional advisers and authorities — when required by law or to protect rights;
• Business transfers — in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.

Third-party sites linked from the Service (including playable builds hosted on domains such as *.pages.dev) have their own practices. Review their notices when you leave our primary domain.

8. International transfers

We and our processors may process data in countries other than where you live, including the United States and other locations where infrastructure is hosted. Where required, we use appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms) for transfers from the EEA/UK/Switzerland.

9. Retention

We keep information only as long as needed for the purposes above: account data while the account is active and for a reasonable wind-down period after deletion requests; server logs typically for a short operational window unless needed for security or legal holds; support correspondence as needed to resolve your request. Aggregated statistics may be kept longer without identifying you.

10. Security

We apply reasonable technical and organizational measures appropriate to a free-to-play web game and marketing site. No method of transmission or storage is fully secure. You are responsible for safeguarding devices and any credentials associated with Apple, Google, or web accounts.

11. Children

The Service is not directed to children under 13 (or under 16 where local law sets a higher digital-consent age). We do not knowingly collect personal data from children below those ages. If you believe a child has provided data, contact us through in-game / in-app support or the site contact channel when available, and we will take appropriate steps to delete it. Parents and guardians should supervise use of entertainment software.

12. Your rights (GDPR / CCPA and similar)

12.1 EEA / UK and analogous regimes

Subject to law, you may have rights to access, rectify, erase, restrict, or port your personal data; to object to certain processing; and to withdraw consent. You may lodge a complaint with your local supervisory authority.

12.2 California (CCPA / CPRA) notice

If you are a California resident, you may have rights to know, delete, and correct personal information, and to opt out of “sale” or “sharing” for cross-context behavioral advertising. We do not sell personal information and do not share it for cross-context behavioral advertising as those terms are commonly defined. We do not use or disclose sensitive personal information for purposes that require a right to limit beyond what is necessary to provide the Service. You will not receive discriminatory treatment for exercising privacy rights.

12.3 How to exercise rights

Submit a privacy request through in-game or in-app support (when available) or through the on-site contact form when published. Mark the request as a privacy rights request and describe what you need (access, deletion, correction, etc.). We may need to verify your identity. Authorized agents may submit requests as permitted by law. We will respond within the time required by applicable law.

13. App Store privacy labels

If we publish on the Apple App Store or Google Play, platform “nutrition label” / Data safety disclosures are maintained in those storefronts and may summarize data types linked to you or used for tracking under Apple’s and Google’s definitions. Those labels supplement—but do not replace—this Policy. If a label and this Policy differ in wording due to platform templates, this Policy and the store form both apply in their respective contexts.

14. Changes

We may update this Policy from time to time. The “Last updated” date will change when we do. Material changes may be highlighted on the site or, if you have an account, notified by reasonable means. Continued use after the effective date constitutes acceptance where permitted by law.

15. How to contact us

For privacy questions about this game, use in-game / in-app support when offered, or the website contact form when published. This site does not publish a contact email address.

Optional formal operator placeholders: [LEGAL ENTITY NAME], [ADDRESS].

Related documents: Terms of Use · Cookie Notice · Disclaimer.