← Arcade
Privacy
Last updated 26 September 2026
Crash Test Arcade is a set of free games with shared leaderboards. This page says what the arcade keeps about you, why, who else handles it, and how to delete it. There are no adverts, no analytics or tracking, and nothing is sold.
What’s kept, and why
| What | Why | Who can see it |
|---|
| Your player name | To show your scores on the leaderboards | Everyone |
| Your scores, with when you played and details such as the level, your time or your car | The leaderboards, records, badges and your profile | Everyone |
| A random player id | To tell your scores apart from other players’ | The database only |
| Your email address and Google account id, only if you sign in with Google | So you can use the same player on another device | You (on the main page) and the database |
| Your badges, arcade tokens, shop items and what your dummy wears | The shop and your profile | Everyone (what your dummy wears); you (tokens) |
| Your friends leagues | League leaderboards | The other players in the league |
| Reports you make about a player name | Moderation | The arcade’s admins |
| A notification address, only if you turn on record alerts | To tell you when someone takes your record | The database only |
Picking a player name is what creates your player. Just looking at the leaderboards doesn’t. Please don’t use your real name, especially if you’re under 13.
Kept only on your device
Your settings (sound, music, vibration), your personal bests, race ghosts, your brawler gear, scores waiting for a connection, and in Dummy Drop the face photo you add. These stay in your browser’s storage and are never uploaded (apart from a ghost saved with a new personal best in Stunt Dummy, which is a list of positions). Clearing your browser’s data for the site removes them.
Who else handles it
- Supabase runs the database and signing in.
- Netlify hosts the website.
- Google handles “Sign in with Google” (if you use it) and serves the fonts, which means your browser asks Google’s servers for them.
- jsDelivr serves the game libraries (three.js, Planck.js, cannon-es and the Supabase library).
How long it’s kept
Until you delete your player. Guest sign-ins that never picked a name are cleared out after 30 days. An admin can hide a score or change an offensive name.
Deleting your player
On the arcade’s main page, open your profile (tap your name) and tap Delete my player, then tap again to confirm. That deletes your name, every score and record, your badges, tokens, shop items, league places, alerts, reports and your sign-in, straight away and for good. Records you took from other players stay on their history as “a deleted player”.
Your rights
Under UK data protection law you can ask for a copy of your data, have it corrected (you can rename your player at any time) or deleted, and complain to the Information Commissioner’s Office.
Contact
A contact email for privacy questions will be added here.