You can train and customize without an account. An account is needed for online challenges and account-based synchronization.
Your privacy choices matter. Advertising consent and Apple's tracking permission are separate. Declining tracking does not prevent you from playing.
Biometric data stays with your device. We do not receive your fingerprints or Face ID face data.
1. Information we handle
- Account information: your email address, chosen nickname, internal account identifier, account creation details, protected password hash, and authentication or password-reset records. Your password is transmitted over an encrypted connection and stored on our game server as a salted cryptographic hash, rather than as a readable password.
- Game progress and equipment: stars, level, race results and times, horse selections and names, and horse, driver and chariot customizations. Guest selections and preferences are stored locally; signed-in equipment and progress are also processed by our game service to support your account across devices.
- Online play: room codes and settings, membership, readiness and connection status, matchmaking information, race controls and state, finishing positions, and lobby chat messages you choose to send.
- Technical information: IP address, approximate country inferred from IP, app and operating-system versions, device or SDK identifiers, connection timings, error information, and game or advertising diagnostics. Online race diagnostics may include nicknames, horse selections, power, freshness, movement, collisions and results when troubleshooting is enabled.
- Purchase information: product and transaction identifiers, purchase or restoration status, store receipts or transaction-verification information, and whether the permanent ad-removal entitlement is active. Payment card details are handled by the store; we do not receive your full card number.
- Advertising information: depending on your consent, device settings and the ads served, Google and its advertising partners may process IP address, device identifiers including the advertising identifier when permitted, approximate location, ad impressions and interactions, and performance or diagnostic information.
- Support information: your email address and any message, screenshot or other information you voluntarily send us. Please do not send passwords, recovery links or payment-card details.
The game does not require access to your contacts, camera, microphone, photo library or precise GPS location. Approximate country checks use an IP-country database on our server, without sending your IP address to an external geolocation lookup service.
2. How and why we use information
We use information to create and secure accounts, authenticate you, send requested password-reset emails, save and synchronize progress and equipment, operate online rooms and races, display rankings, validate and restore purchases, respond to support requests, and deliver compatible game assets or configuration updates.
We also use necessary technical information to protect our services, limit abuse and fraudulent activity, investigate race or connection problems, and maintain the game. Advertising providers use permitted information to deliver, measure and protect ads, and to personalize them only where the necessary consent and permissions are available.
Where EU, UK or similar data-protection law applies, we rely on performance of our agreement with you for requested game and account services; legitimate interests for proportionate security, fraud prevention and maintenance; consent for optional tracking and advertising processing that requires it; and legal obligations where applicable. You can withdraw consent without affecting processing that was lawful before withdrawal.
3. Information visible to other players
Players in your room or race can see your nickname, relevant level or ranking information, equipment appearance, readiness or connection indicators, race performance and results. Lobby messages are visible to participants with access to that room. A room code is an invitation credential: share it only with people you want to invite.
Your account email and password are not displayed to other players. Avoid putting real names or sensitive information in nicknames, horse names or chat. Other players may retain information they see, including through screenshots.
4. Advertising, GDPR choices and Apple tracking permission
The game uses Google AdMob for banner, interstitial and rewarded ads. Google's User Messaging Platform (UMP) presents applicable privacy messages and determines whether ad requests are permitted under your current choices. You can revisit the advertising privacy controls from Settings → Support and Privacy → Advertising Privacy when those controls are available for your region.
On iOS and iPadOS, Apple's App Tracking Transparency (ATT) permission is separate from the advertising consent message. When tracking permission is required, the system permission must be obtained before using the advertising identifier or performing tracking covered by ATT. If you decline or restrict ATT, that tracking is not authorized. You can manage the permission in your device's Settings → Privacy & Security → Tracking.
Declining personalized advertising or tracking does not automatically mean that every ad is blocked. Non-personalized or limited ads may be available only where permitted by your choices, platform rules and applicable law; otherwise ads cannot be requested. We do not bypass your privacy choices to force advertising.
Rewarded ads are offered through an explicit choice. The optional permanent ad-removal purchase disables the game's advertising placements. It does not remove technical processing needed for accounts, online play or purchase verification.
Google and advertising partners may process data in ways legally defined as a sale, sharing or targeted advertising in some jurisdictions. Where applicable, use the advertising privacy controls and device settings to exercise the relevant choices, or contact us for assistance.
5. Optional biometric login and local storage
If you enable biometric login, the operating system checks your fingerprint or Face ID and allows access to a protected authentication credential on that device. We receive the authentication outcome, not the biometric template, fingerprint image or face scan. You can disable biometric login from the game's Account section or your device settings.
The app stores preferences, equipment caches, consent state, content downloads and purchase-entitlement information locally to support gameplay and offline use. Login credentials are protected using the platform's secure storage. Removing the app may remove ordinary local data, but platform-secured credentials or store purchase records can remain under the platform's rules. Sign out or disable biometric login before handing your device to someone else.
6. Service providers and disclosures
We disclose information only as needed for the purposes described here, including to:
- Game hosting and infrastructure providers to operate and secure account, online-play and content services.
- Google AdMob and its applicable advertising partners for ads, consent handling, measurement and fraud prevention, subject to the choices described above. See Google's Privacy Policy and how Google uses information from partner apps.
- RevenueCat to validate purchases, manage the ad-removal entitlement and restore purchases. It receives an app-specific account identifier or an anonymous purchase identifier and relevant transaction and technical information. We do not send your game password to RevenueCat, and automatic collection of advertising identifiers is disabled in our purchase integration. See RevenueCat's Privacy Policy.
- Apple App Store or Google Play to process purchases and provide platform services. See Apple's Privacy Policy and Google's Privacy Policy.
- Brevo to deliver requested account-recovery emails. This includes your recipient address, message content and delivery information; provider link redirection or delivery measurements may also apply. See Brevo's Privacy Policy.
Providers processing personal information on our behalf must protect it and use it within the limits of the services they provide and applicable law. Some providers act as independent controllers for their own platform or advertising activities, as explained in their policies. We may also disclose information when legally required, to protect rights or safety, or as part of a lawful transfer of the service with appropriate safeguards. We do not sell account email addresses or passwords.
7. Data retention and account deletion
Account information, synchronized equipment and progress are kept while your account remains active or until you request deletion. Private rooms retain their configuration and membership so players can return; a room's chat keeps its latest 30 messages, with older messages removed as new ones arrive. Deleting a room removes its stored room chat.
Authentication sessions normally expire after 30 days and can be renewed while you use the service. Signing out revokes that session. Password-reset links expire after 30 minutes and can be used only once; successful password resets revoke existing account sessions.
Use Settings → Account → Delete account to delete your active game account, login profile and synchronized equipment. Some historical race records, rankings, room references, diagnostic records or backup copies can remain after active-account deletion. For a request covering remaining identifiable records, contact creo.app.app@gmail.com. We may verify ownership before acting.
We retain historical, security, support and diagnostic records only for as long as needed for their operational purpose, to resolve disputes or abuse, or to meet applicable legal obligations. Backup copies are kept separately from normal gameplay systems and may persist until the relevant backup is retired. Transaction records held by stores or purchase providers may need to remain for purchase restoration, fraud prevention or legal requirements, under their own retention rules. Account deletion does not automatically delete store transaction history or request a refund.
8. Security and international processing
We use encrypted connections, salted password hashing, protected authentication records, restricted server access and platform-secured credential storage to help protect information. No method of transmission or storage is completely secure.
Our hosting and service providers may process information outside your country, including in countries with different data-protection laws. Where required, transfers must rely on an applicable adequacy decision, standard contractual clauses or another lawful safeguard. Contact us for information about safeguards relevant to your data.
9. Your choices and privacy rights
You can train without an account, change available advertising consent settings, manage Apple's tracking permission, disable optional biometric login, sign out, and delete your account. Withdrawing optional consent does not require you to stop using offline training.
Depending on where you live, you may have rights to access or receive a copy of your personal information, correct it, request deletion, restrict or object to processing, obtain portable data, withdraw consent, or opt out of certain advertising uses. You may also have the right to complain to your local data-protection authority, including the Italian Garante per la protezione dei dati personali if applicable. We will not discriminate against you for exercising a privacy right.
Send requests to creo.app.app@gmail.com, preferably from the address associated with your account. Include your game nickname and the nature of your request, but not your password. We may request limited information to verify identity and will respond within the period required by applicable law. For store-managed information or payments, you may also need to contact the relevant store.
10. Children
Rome Arena Racing is intended for a general audience and is not specifically directed to children under 13 or the higher age at which parental consent is required in their jurisdiction. We do not knowingly seek personal information from children who cannot lawfully provide it. A parent or guardian who believes a child has provided information without the required permission should contact us so we can investigate and take appropriate action.
11. This policy page and external links
This privacy-policy page contains no advertising, analytics scripts, tracking pixels or cookies set by the page. The hosting infrastructure necessarily processes connection information such as your IP address to deliver and protect the page. Following a provider link or sending an email uses that provider's service and privacy practices.
12. Changes to this policy
We may update this policy when the game, providers or legal requirements change. The revised version will be published at this address with an updated date. Where required, we will provide additional notice or ask for renewed consent before materially different processing begins.
13. Contact
Developer and data controller: Giovanni Emanuele Spina
App: Rome Arena Racing
Email: creo.app.app@gmail.com