Privacy Policy
Lagos Run is a free browser game at danfo.horpey.dev. This page explains what data the game uses, why, who else sees it, and what you can ask us to do with it. We keep it short because we collect very little. There are no ads, no accounts and nothing is sold.
Who is responsible
The controller under the EU General Data Protection Regulation (GDPR) is Opeyemi Adeniran. Contact: direct message to @eureka_seamless on X.
What we store, and why
1. The leaderboard
When you finish a run, the game sends your score to our server, together with:
- the driver name you chose (or "Driver" if you didn't pick one),
- a random player ID the game created on your device. It isn't linked to your name, email or phone, and we can't tell who you are from it,
- run details (score, distance and time driven) so we can reject impossible scores.
Why: to show the daily, weekly and all-time leaderboards you asked to take part in, and to keep them fair. Legal basis: Art. 6(1)(b) GDPR (providing the game you're using) and Art. 6(1)(f) GDPR (our interest in a cheat-free board).
How long: daily board entries are deleted automatically after 3 days, weekly ones after 15 days. All-time best scores and driver names stay until you ask us to delete them, or until we remove them for breaking the Terms of Use.
2. Your IP address, briefly
Like every website, our server sees your IP address when your browser connects. We use it only to count requests per minute so one person can't flood the leaderboard. That counter expires after 90 seconds. We do not store IP addresses with scores or names. Our hosting provider keeps standard technical logs for a short time for security and operations. Legal basis: Art. 6(1)(f) GDPR (a secure, working service).
3. Storage on your device
Your progress (coins, paints, missions, streak, best score, settings, chosen radio station, player ID and driver name) is saved in your browser's local storage. If your browser blocks that, as some in-app browsers do, the game uses small first-party cookies (names starting with lr_) for the same data instead. The game also uses a service worker cache so it loads fast and works offline. None of this is sent to us except the leaderboard data above. It is needed for the game features you use, so it doesn't require consent (§ 25(2) no. 2 TDDDG). Clearing your browser's site data deletes it, and your progress with it.
4. Google Analytics, only if you say yes
If you tap Accept on the analytics banner, we load Google Analytics 4 to see things like how far people get and where runs end, so we can improve the game. Until you accept, no Google Analytics code is loaded and no analytics cookies are set. Google signals and ad personalisation are switched off.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA, which is certified under the EU–US Data Privacy Framework. Cookies set: _ga and _ga_*, stored for up to 2 years. See how Google uses data from sites that use its services.
Legal basis: your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can change your mind at any time via Cookie settings at the bottom of the game's start screen. Declining removes the analytics cookies.
5. Live radio
The game starts on its own music. If you tune to a real Lagos station, your browser connects directly to that station's official public stream, so the station and its streaming provider receive your IP address and browser details, as with any radio app or website. To find those streams, the game asks the community-run Radio Browser directory for the station list and keeps it on your device for a day. We have no control over the stations' own data practices. Please see their websites (linked with ↗ in the game).
6. Fonts
All fonts are served from our own site. We do not use Google Fonts or other font services.
Who processes data for us
- Vercel Inc., USA, hosts the game and runs the leaderboard server (region: Frankfurt, Germany).
- Upstash Inc., USA, runs the leaderboard database.
- Google, analytics, only after consent, as described above.
Vercel and Upstash act on our behalf under data processing agreements. Where data may reach the USA, transfers rely on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.
Your rights
You can ask us for access to your data, to correct it, delete it, restrict it, or receive it in a portable form (Art. 15–20 GDPR). You can object to processing based on our legitimate interests (Art. 21 GDPR) and withdraw consent at any time. To have your leaderboard entries and driver name removed, send your driver name (and a screenshot of your best score if you can) to @eureka_seamless.
You also have the right to complain to a data protection authority, for example the one in the EU country where you live. Players in Nigeria have the same rights under the Nigeria Data Protection Act 2023 and can also complain to the Nigeria Data Protection Commission (NDPC).
Children
Lagos Run is suitable for all ages. If you are under 16, please ask a parent or guardian before accepting analytics. Don't use your real full name as a driver name.
Changes
If the game starts using data in a new way, we'll update this page and the date at the top first.