Privacy notice for our games

This notice covers The Perfect Race and The Perfect Murder. We build and run both games the same way, so one notice covers both; where something is true of only one of them, the game is named. Our terms of sale cover purchases.

1. Who is responsible

UX Productions AB (organisationsnummer 556947-8661), Lyckåsgatan 3, 633 58 Eskilstuna, Sweden, is the controller of the personal data described here.

Questions about this notice, or about your data, go to support@uxproductions.se.

2. Which games this covers

The Perfect Race — the-perfect-race.com
The Perfect Murder — the-perfect-murder.com

Each game also publishes its own notice with detail specific to that game. This one is the common description of what we collect and why.

3. What we process

Account details — email address, display or racer name, your password (stored only in scrambled form, never as plain text), verification status, and the identifier of a linked Google or Apple account if you signed in that way. We never see your Google or Apple password.
Purchases — payment transaction identifiers, what was bought, and what it unlocked on your account. Card details are handled by Stripe; we never receive or store a complete card number.
In-game records — for The Perfect Race, verified lap times, leaderboard entries, ghost replays, seasonal results and shareable challenge links; for The Perfect Murder, game history, statistics and ladder results. Basic events such as opening or completing a shared challenge are recorded too.
Social features — friend requests, accepted friendships, blocked players and activity inbox items.
Preferences — notification and email settings, leaderboard visibility, and in-game appearance choices.
Multiplayer session state — short-lived room and match state while a game is running.
Service logs — standard security, diagnostics and operational logs, including IP address and approximate request timing, produced by running the service.

4. Playing without an account

Both games can be played as a guest, with no account and no email address. Guest results are not published to the leaderboards, and a purchase cannot be attached to a guest session.

5. Why we process it

To create and operate your account and keep it secure.
To verify that submitted results are genuine, so leaderboards mean something.
To deliver and maintain content you have purchased.
To provide multiplayer, profiles, friends and shared challenges.
To send account email, and activity email you have asked for.
To detect and prevent cheating, abuse and fraud.
To keep the service running reliably and to fix what breaks.
To keep the accounting records a sale requires.

6. Legal bases

Under the GDPR, we rely on:

Performance of a contract — running your account, providing the game features that come with it, and delivering what you purchased.
Legitimate interests — preventing cheating, abuse and fraud, securing the service, and keeping it reliable. Our interest is in a service that works and is fair to everyone playing it; we weigh it against your interests and use no more data than the purpose needs.
Consent — optional email such as friend-activity notifications. You can withdraw consent at any time in your notification settings, without affecting email already sent.
Legal obligation — accounting records of a sale, which Swedish accounting law requires us to keep.

7. Cookies and local storage

The games use an essential sign-in cookie to keep you logged in, and local storage on your device for preferences, guest progress and update state.

We do not use advertising cookies, we do not run third-party ad or tracking networks, and we do not sell personal data.

8. Who processes data for us

Microsoft Azure — hosting, database, operational telemetry and transactional email, in the EU.
Stripe — payment processing. Stripe receives the card details you enter at checkout; we never do.
Google and Apple — only where you choose to sign in with a Google or Apple account.
A private ntfy channel — operational alerts to us about the state of the service.

9. Transfers outside the EU/EEA

Our hosting and databases are in the EU. Some of the providers above are established outside the EU/EEA or may process data there. Where that happens, the transfer relies on an approved safeguard — an adequacy decision such as the EU–US Data Privacy Framework, or the European Commission's standard contractual clauses.

10. How long we keep it

Account and game data: while your account exists.
Friend activity inbox items: about 180 days, then removed automatically.
Operational logs and diagnostics: normally about 30 days.
Deleted data can remain briefly in encrypted service backups until those backups expire on their normal schedule.
After you delete your account we keep a de-linked payment record — transaction identifiers, amount, currency and refund status, with no link back to you as a user — for accounting, dispute and refund handling. Swedish accounting law requires it to be kept until the end of the seventh year after the calendar year in which the financial year ended. Stripe separately keeps its own records under its own legal obligations.

11. Your rights

You can ask us to:

give you access to the personal data we hold about you,
correct data that is wrong,
erase your data,
export your data in a portable form,
restrict how we use it, or
object to processing we base on legitimate interests.

You can also withdraw consent for optional email at any time, and you can delete your account permanently from inside the game — in The Perfect Race from Garage, in The Perfect Murder from your profile. Deletion removes your account and the game data attached to it.

To exercise any of these, email support@uxproductions.se. We answer within one month; if a request is complex we will tell you and may take longer, as the GDPR allows.

If you think we have handled your data wrongly you can complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY) — Box 8114, 104 20 Stockholm, imy.se — or to the supervisory authority in the EU country where you live.

12. Age

You must be at least 13 years old to create an account. Younger children can still play as guests, without an account and without giving us an email address.

13. Changes

We may update this notice. The version in force is the one published on this page, with the date shown at the top.

14. Contact

UX Productions AB
Lyckåsgatan 3, 633 58 Eskilstuna, Sweden
support@uxproductions.se