1. Who we are
Ghost Road (“Ghost Road”, “we”, “us”) is a free, side-scrolling motorcycle game that you play in your web browser on this website. We are responsible for the personal information described in this policy.
Questions about privacy can be sent to relations@oknitech.com.
2. Information we collect
You can look at the Ghost Road home page without signing in. To ride, you sign in with Google. When you do, we collect:
| Information | Where it comes from |
|---|---|
| Email address of your Google account | Google, after it verifies your sign-in |
| Your Google account’s unique ID (the “subject” identifier Google gives our app) | |
| Whether Google has verified that email address | |
| Profession (student, job or self-employed) | You, once, when you create your account |
| Date of birth | You, once, when you create your account |
| IP address of your most recent sign-in | Detected by our server |
| When your account was created, last updated and last signed in | Recorded by our server |
| How you signed in (Google) | Recorded by our server |
Our account records also have fields for an approximate country, region, city and time zone. These fields are currently empty; see section 5.
We do not collect your precise location, GPS data, latitude or longitude, contacts, photos or files. We do not ask for or store a password.
Your best distance and your sound and music settings are saved only in your own browser and are not sent to us (see section 11).
Earlier email sign-in
Earlier versions of Ghost Road also let you sign in with a one-time code sent by email. That option has been removed and we no longer send codes. If you used it, our database may still contain your email address together with an expired, one-way-hashed code and the times it was requested and used. These records are not used any more, and they are deleted along with your account if you ask (see section 14).
3. Google Sign-In
Ghost Road uses Google Sign-In (Google Identity Services) only to confirm who you are. When you choose “Continue with Google”, Google asks you to sign in and then gives our server a signed sign-in token. Our server checks that token with Google’s public keys before trusting it. From that token we use only:
- your Google account’s unique ID,
- your email address, and
- whether Google has verified that email address.
Google’s sign-in token can also contain your name and profile picture. Ghost Road does not store or use them.
If you already have an account, you go straight to the game. We update your last sign-in time and IP address. Your profession and date of birth are not asked for again and are not changed.
If you are new, we keep your verified Google ID and email address in your server-side session for up to 15 minutes while you choose your profession and enter your date of birth. Your account is created only when you click “Create Account”. If you don’t finish in time, that temporary information is discarded and you need to sign in again.
If an account already exists with the same email address, for example from the earlier email sign-in, your Google account is linked to it instead of creating a second account.
4. Profile information
When you create an account we ask for two things, once: your profession (student, job or self-employed) and your date of birth. Both are required to create an account. We use them to understand who plays Ghost Road and to improve the game. They are not shown to other players, and we do not use them to show you ads.
You can’t currently edit these details in the game. To correct them, contact us (see section 19).
5. IP address and security information
Each time you sign in, our server records the IP address your connection comes from. The browser does not send it to us; the server detects it. We keep only the most recent sign-in IP address with your account, replacing the previous one. We use it to keep the service secure, for example to investigate abuse or suspicious sign-ins.
Like most websites, our web server may also keep standard technical logs of requests. These can include IP addresses, dates and times, the pages or files requested, and browser information. They are used to run, troubleshoot and protect the site.
Approximate location (not yet active). In the future we may use an IP-lookup service to estimate the country, region, city and time zone your IP address belongs to. This estimate is approximate, it is based only on the IP address, and it does not use GPS. It is not active today, so these fields are empty. We will update this policy before turning it on, including the name of any provider used.
6. How we use information
- To sign you in and keep you signed in on your device.
- To create and run your account, and to recognise you when you come back so you are not asked for your profile again.
- To keep Ghost Road secure: to prevent, detect and investigate fraud, abuse and attacks on the service.
- To understand and improve the game, using general profile information such as profession and age.
- To respond to you when you contact us, including deletion and other privacy requests.
- To meet legal obligations and to establish or defend legal claims.
Where the law requires a legal basis for using personal information, we rely on what is needed to provide the service you ask for (your account), on our legitimate interests in running and securing the game, on legal obligations, and on your consent where it is required.
8. Google services
Ghost Road asks Google only for the basic identity information needed to sign you in (your account ID and email address). We do not request access to, and cannot see, your Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos or any other Google service or content.
We do not use information from your Google account for advertising, we do not sell it, and we do not use it to develop, improve or train generalised artificial-intelligence or machine-learning models. Ghost Road’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
You can remove Ghost Road’s access to your Google account at any time from your Google Account settings (myaccount.google.com/connections). This stops future Google sign-ins to Ghost Road. It does not delete the information we already hold; to delete that, see section 14.
9. Analytics
Ghost Road does not currently use any analytics service.
We may add an analytics service in the future, such as Google Analytics, to understand how the game is used and to improve it. If and when analytics is enabled, it may collect information such as:
- device and browser information (for example, device type, operating system, browser and screen size);
- approximate location worked out by the analytics service (for example, from your IP address);
- the pages you visit and your interactions and events in the game;
- how you reached Ghost Road (traffic source and referring site); and
- other technical information, such as the time and length of a visit.
Before analytics is enabled, we will update this policy to name the service and explain your choices, including consent where the law requires it.
10. Advertising
Ghost Road does not currently show advertisements and does not include any advertising network or advertising tracker.
We may show third-party advertisements in the future. If we do, the ad provider may use cookies or similar technologies to show and measure ads. Before that happens, we will update this policy to name the provider and explain your choices, including consent where the law requires it. We will not use information from your Google account for advertising.
12. Data security
We take reasonable steps to protect your information. For example:
- We check Google sign-in tokens on our server. We never accept an email address or Google ID that is just sent by the browser.
- The sign-in cookie can’t be read by page scripts and is limited to our own site. On a secure (HTTPS) connection it is sent only over that encrypted connection.
- Your account data is stored in a database that only our server software uses, and our server configuration and credential files are blocked from public web access.
No method of storing or sending data is completely secure, so we cannot guarantee absolute security. If you think your account has been misused, contact us.
13. Data retention
We keep your account information for as long as reasonably necessary to operate your account and for security, legal obligations, resolving disputes and legitimate operational purposes, subject to applicable law. After that, or when you ask us to delete your account, we delete it. We may keep information for longer only where we need to for those purposes.
Temporary sign-up information for new players (see section 3) expires after 15 minutes if you don’t finish creating your account.
14. Account and data deletion requests
You can ask us to delete your Ghost Road account and the personal information linked to it at any time.
How to request deletion: email relations@oknitech.com with the subject “Account deletion request”. Please send it from the email address of the Google account you use with Ghost Road, so we can match it to your account and confirm it is you.
What happens next:
- Deletion is not automatic or instant. A person handles each request.
- We may ask you to confirm your identity before we delete anything.
- We will delete your account record: email address, Google account ID, profession, date of birth, sign-in IP address and account timestamps. We will also delete any leftover records from the earlier email sign-in.
- We will tell you when your account has been deleted. If we need to keep any information for a legal reason (see section 13), we will tell you that too.
Your best distance and sound settings are stored only in your browser. You can remove them yourself by clearing this site’s data in your browser settings.
15. Your rights
Depending on where you live, you may have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- object to, or ask us to limit, how we use it;
- ask for your information in a portable format;
- withdraw consent where we rely on it; and
- complain to your local data-protection authority.
To use any of these rights, contact us at relations@oknitech.com. We may need to confirm your identity first. We will not treat you differently for using your privacy rights. We aim to comply with applicable privacy and data protection laws.
16. Children’s and minors’ privacy
Ghost Road is made for a general audience. It is not specifically directed at children.
When you create an account we ask for your date of birth. Please be aware of how this currently works: Ghost Road does not use your date of birth to block, limit or change access to the game. Any date between 1900 and today is accepted, so the game does not technically stop younger players from creating an account.
If you are under the age at which you can agree to the use of your personal information where you live, please get permission from a parent or guardian before signing in. Google’s own age requirements for Google accounts also apply.
If you are a parent or guardian and believe your child has given us personal information without the permission required by law, contact us at relations@oknitech.com and we will delete it.
17. International data transfers
Players visit Ghost Road from many countries. Our servers and the service providers we use (including Google for sign-in) may be in a different country from yours, where data-protection laws may be different. When we transfer personal information across borders, we take reasonable steps to protect it as described in this policy and as required by applicable law.
18. Changes to this policy
We may update this policy, for example before enabling analytics, advertising or IP-based location. When we do, we will change the effective date at the top of this page. If the changes are significant, we will make that clear on the site before they take effect.
19. Contact us
For questions about this policy, to correct your profile, or to make a privacy or deletion request, email relations@oknitech.com.