Privacy policy · October 20, 2026

Play first.
Collect less.

Railcade is a game from Daygull Studios LLC. You can play without linking a sign-in account, and core gameplay works locally on your device.

Information the game handles

Railcade stores settings, achievements, scores, gameplay statistics, and unlocks on your device. Local play uses a random Rider identifier stored on your device. Choosing progress protection creates or links a Firebase account. If you choose “Protect progress,” a supported sign-in method is linked so supported progress can be restored across devices. We do not copy your provider password into Railcade.

Protected progress may include settings, achievements, high scores, mission progress and best times, unlocks, and aggregate gameplay counters. Where remote diagnostics are enabled for eligible adult sessions, they may include app version, device and operating-system information, crash details, and technical events needed to operate and secure the service.

Sign-in information

When you protect progress with Apple or Google, your chosen provider and Firebase process your account identifier, email address and basic profile information for authentication. We use that identity to link and restore your Railcade progress. Your provider email and name are not copied into your public Rider name. Railcade does not request access to your Gmail messages or Google contacts. The sign-in options shown in the game depend on your platform and eligibility.

Where email sign-in is offered, Firebase processes your email address and authentication credentials to sign you in. Do not send your password to support.

Rider profiles and Following

Where online features are available, your chosen Rider name, profile icon, Rider Code and leaderboard results can be visible to other players through profiles, code lookup and score comparisons. Where the limited younger-player service is enabled, eligible teens can protect private progress and publish pseudonymous leaderboard results. Following and broad player-name discovery are unavailable in that experience. Following and blocking records support your chosen connections and safety controls. Eligible signed-in players, including eligible teens, can also connect by exact player code: both players must agree before comparing scores. We store the participating account/player identifiers, request and acceptance states, timestamps and safety limits for this optional feature. Connections do not enable chat or broad teen-profile discovery. Avoid putting personal contact information in your public Rider name.

Activity and player reports

When online social features are available, confirmed leaderboard records may appear in the in-app Activity feed of current followers. We store limited record summaries and read acknowledgements to show relevant updates and distinguish unread items. Unfollowing, blocking or account deletion removes the corresponding feed visibility. These leaderboard-follow updates do not send push notifications.

Connection requests and acceptances appear privately in Activity. If you enable connection notifications on iOS or Android, we use Firebase Cloud Messaging and a notification token for your device to send request and acceptance alerts. The token, platform, registration time, connection events and read status are associated with your Railcade account for app functionality, not advertising. You can turn alerts off in Railcade Settings or your device settings. Lock-screen alerts do not include player names or codes. Desktop web provides in-app updates only. The inbox shows current events from the last 14 days; inactive registrations older than 30 days are not used for delivery. Sign-out and disabling alerts revoke delivery where reachable; account deletion removes associated registration and connection-event records.

If you choose Report player, we store the reporter and reported player identifiers, selected reason, optional written details, creation time and review status privately in Firebase for safety and moderation. Reports are available to authorized studio operators, not other players, and are not used for advertising or tracking. Please do not include passwords, payment information or other sensitive personal details.

Why we use it

Ranked play and app security

Online score and mission-time submissions may include the game mode, course, difficulty, gameplay inputs, timing and result data so our servers can verify leaderboard results. Local personal bests and online rankings are separate records. Firebase App Check helps check that requests come from a genuine app or browser session. Desktop web uses Google reCAPTCHA Enterprise, Android uses Play Integrity, and supported Apple builds use App Attest. These security services process technical app, device and browser signals, which may include IP addresses, to detect abuse. This security check is separate from your advertising choices.

Optional purchases and recovery

In versions offering purchase-first checkout, you can buy ad removal without a Railcade profile. We use a private purchase identifier and purchase records to verify access. A separate secret kept in the app or browser protects that purchase session; the identifier alone does not authorize access. Native purchase verification uses Apple or Google Play transaction evidence. Purchasing does not create a public Rider profile or change age or device permissions.

Website checkout asks for a recovery email. We store it privately with the purchase session and use Cloudflare to send recovery links when requested. Links expire after 30 minutes and work once; they recover purchase access, not a player sign-in. Recovery requests expire after 10 minutes. Expired requests, tokens and short-lived abuse counters are removed by scheduled cleanup. We do not use this address for marketing. You may optionally link a verified purchase to one Railcade account for access across supported platforms. Unlinked purchase-data deletion can be requested at [email protected] after ownership verification.

Service providers

Railcade uses Google Firebase services for authentication, cloud data, storage, remote content, and diagnostics. A supported provider such as Apple or Google processes information when you use its sign-in service. Where purchases are available, RevenueCat and the relevant store or web payment provider process purchase records and ad-free entitlement status. Those providers also apply their own privacy policies, including Google’s Privacy Policy. Google reCAPTCHA Enterprise is also subject to Google’s Terms of Service.

Website, support and launch requests

Adults aged 18 or older can use our launch form to request one Railcade announcement. Daygull Studios stores the email address, selected game, consent version, request and expiry dates, and source website in a private Cloudflare database. It does not create a game account or subscribe you to other games. No confirmation email is sent and email ownership is not verified. Short-lived keyed IP-derived counters limit abuse; raw IP addresses are not stored in the signup database. Requests expire after one year and are removed by daily cleanup, or earlier following withdrawal or completion of their purpose. See launch-notice privacy and withdrawal details. Automated launch announcements are not currently sent.

Cloudflare hosts and protects our website and routes company email. Website requests can include IP address, browser information and technical security logs. If you email us, we process your address, message and attachments to respond. A launch-notice request is used for the requested Railcade announcement, not general marketing; email us to withdraw it.

Anonymous website and gameplay totals

Our public website counts page requests and broad referring-website groups. Eligible adult desktop-web gameplay also sends small batches of counts, such as game loads, round starts and finishes, mode and difficulty, active play seconds, training and mission completions, and startup service failures. Active play excludes pauses and background time. These reports use no analytics cookies, saved analytics identifiers, player names, email addresses, account identifiers, advertising identifiers or individual browsing histories. We do not store raw IP addresses, raw referrer URLs or error messages in the reporting database. The hosting provider still processes requests as described above. Reporting respects browser Do Not Track and Global Privacy Control request signals. Private playtests and restricted-age gameplay do not send gameplay counters.

We combine counters into daily totals in a private Cloudflare database accessible only to the owner, and remove totals after 90 days. They help us understand game use and service reliability, not target advertising. We cannot use these totals to recognize returning players or retrieve an individual player’s activity. Delivery is best effort and numbers can be incomplete. Native gameplay is not included in this reporting.

Sharing and protection

We use service providers to host, secure and operate Railcade and handle support. Public Rider information is shared as described above. Information may also be disclosed when needed to comply with law or protect people and the service. We do not sell Google sign-in data or use it for advertising. Access to account data is restricted and service connections use encryption; no system can guarantee absolute security.

Advertising

Children, teens and unknown-age sessions do not receive in-game ads or initialize the game’s advertising service. Eligible adult sessions may use Google AdMob and its User Messaging Platform for between-round ads and privacy choices. Eligible adult sessions in the native apps can request production ads when provider approval and inventory permit. Browser gameplay currently does not serve third-party ads. Google’s advertising SDK can process IP addresses, device or advertising identifiers, app interactions and diagnostic information for advertising, measurement, security and fraud prevention. Ad requests depend on the provider’s privacy checks, your choices and ad-free status. Where required, Settings offers advertising privacy choices. On supported iPhone and iPad builds, eligible adults who receive ads may see Apple’s optional tracking-permission request. If you allow it, advertising partners may use your device’s advertising identifier to personalize ads and measure their effectiveness across other companies’ apps and websites. If you choose Ask App Not to Track, you can keep playing and may still receive ads without that identifier. You can review this choice in your device’s Settings under Privacy & Security → Tracking. Declining tracking does not purchase or remove ads; ad-free ownership is separate. See Google’s advertising privacy information. The public marketing website does not currently load advertising, and web-game advertising remains disabled pending provider qualification.

Retention and deletion

The Activity feed displays eligible records from the last 14 days; this is a display window, not a scheduled erasure deadline. Stored activity is limited to 20 record summaries per player and pruned on later writes, while read acknowledgements are bounded. Reports remain available for moderation until removed through account cleanup; we do not promise a fixed report-expiry period. Deleting a Railcade account removes its activity and read state, and reports made by or about that account.

Local data remains until you remove it through the app or device, clear browser storage, or uninstall, subject to device backup and restore behavior. Deleting your Railcade account removes its cloud identity, progress and associated gameplay records, and starts separate cleanup of its linked RevenueCat purchase-customer records and associated private purchase credentials, recovery email associations and recovery tokens. An unlinked purchase is not part of that profile; contact support to request its deletion. We do not retain that record solely to recover a deleted account’s purchase. Cleanup runs asynchronously; provider outages or records linked to another identity require follow-up before we can confirm completion. Minimal processing records remain until cleanup is resolved; completed purchase-cleanup receipts are removed after 24 hours. Contact support for the status of an unresolved request. Website purchases cannot be recovered after their purchase records are deleted. Apple and Google Play purchases may be restored through the original store account. Store and payment providers independently control their own transaction records and legal retention. See our account deletion page.

Age groups and online features

Railcade offers local play for children, teens and adults. An age group and applicable platform requirements determine which features are available. Children under 13 and players whose eligibility cannot be established use local play, subject to any required platform verification or approval. These sessions cannot use accounts, cloud progress, online rankings, following, advertising or remote crash reporting. Website checkout and email recovery require eligibility for contact-data processing. In purchase-first native versions, store purchase access is assessed separately, subject to required app and payment permissions. Younger-player online access requires a supported service and applicable permissions; signing in is not proof of age or parental consent. Where the younger-player service is enabled, accounts are available from age 13, subject to country-specific parental-consent and safeguard requirements. Canada is assessed separately for Quebec and elsewhere. When access is unavailable, Age settings explains the applicable requirement. Platform and provider permissions still apply. Availability can differ by platform and app version. Where the limited service is enabled, eligible teens may use protected progress and public pseudonymous rankings. Advertising, remote crash reporting, Following and broad player-name discovery remain unavailable. Store access is assessed separately from advertising. Purchase-first versions do not require a Railcade account to buy; required platform and payment permissions still apply, and existing ownership is preserved. Adult features remain subject to account, privacy and platform controls.

Railcade does not ask you to choose a country. When you enter an optional younger-player online feature, our existing hosting service supplies coarse country or region information from your connection to apply regional protections. No GPS permission or precise location is requested. This information is held for the session and sent with an account access check; it is not added to your player profile or retained in the server access decision, and is not used for advertising. A previously saved residence choice may retain an applicable protection. Connection information is approximate, not proof of residence, age or parental consent. If access cannot be confirmed, you can retry or return to local play.

Railcade stores a selected age group and age-sharing preference on the device rather than asking for a date of birth. On supported devices, Apple or Google handles platform age-sharing requests. Railcade uses the returned information to assess eligibility; it does not retain or upload the raw platform age range. Required checks may occur again when the game starts or returns to the foreground. If a platform requires verification or update approval, the game explains the available steps. An approval may be remembered for that specific update; it does not approve later updates automatically.

Where online eligibility checks are enabled, Railcade sends its service an account identifier, app build, a broad eligibility category (adult, teen or restricted), allowed/restricted permission and social-feature indicators, and the version of the requested access experience. The service stores an account-linked access decision and permitted features to enforce eligibility and protect service access. This is not a birth date, identity document or copy of the platform’s full response.

Website requests and voluntary support messages may still involve the information described above. Settings → Age settings provides the available review and support options. A parent or guardian can contact us about a child’s information. Please do not send identity documents or a child’s date of birth in an ordinary support message.

Your choices

You can play locally, decline progress protection, remove local app data through your device, or request deletion of protected cloud data. Privacy questions and requests may be sent to legal@daygullstudios.com.

Changes

We may update this policy when the product or law changes. The date above identifies the current version. Material changes will be presented through an appropriate product or website notice.