Privacy Policy

Last updated: March 2026

1. Information We Collect

When you use Derby Dash, we collect:

  • Account information: Your name, email address, and profile picture provided through our authentication provider (Clerk). This may include data from social login providers (e.g. Google, GitHub) if you choose to sign in that way.
  • Game data: Your in-game coin balance, betting history, race results, daily streak progress, and room participation. Race results (winning horse, final positions, room configuration) are stored to calculate global horse statistics and odds.
  • Usage data (with consent): If you accept analytics cookies, we collect anonymised usage data via Google Analytics, including pages visited, game events (room creation, bets placed, races completed), browser type, and approximate location. No personal information (name, email) is sent to Google Analytics.
  • Technical data: Browser type, IP address, and device information collected by our hosting providers (Vercel, PartyKit) for security, performance, and abuse prevention.

2. How We Use Your Information

  • To provide and maintain the Game, including real-time multiplayer sessions
  • To manage your account, coin balance, and in-game progress
  • To calculate and display global horse statistics, odds, and leaderboards
  • To prevent fraud, cheating, and abuse (e.g. multi-tab coin farming detection)
  • To improve the Game experience

3. Third-Party Services

We use the following third-party services to operate the Game:

  • Clerk (privacy policy) — Authentication, user account management, and session handling. Clerk processes your email, name, profile picture, and login credentials.
  • Neon (privacy policy) — Database hosting. Stores your account data, coin balance, transaction history, and race results.
  • Vercel (privacy policy) — Web application hosting and serverless API execution. May collect IP addresses and request metadata.
  • PartyKit (privacy policy) — Real-time multiplayer game server powered by Cloudflare Workers. Processes WebSocket connections and temporary game session data.
  • Google Analytics (privacy policy) — Analytics service, only active when you accept analytics cookies. Collects anonymised usage data to help us improve the Game. You can opt out at any time via our Cookie Policy page.

Each service has its own privacy policy governing how they handle your data. We encourage you to review them.

4. Data Storage & Retention

Your account data (username, coin balance, transaction history, streak data) is stored in a Database hosted by Neon and retained for as long as your account is active. Race results are stored indefinitely to power global horse statistics.

Real-time game session data (room state, dice rolls, current bets) is held in memory on PartyKit servers and is not persisted after the session ends. Once all players leave a room, the session data is discarded.

5. Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. By using the Game, you consent to the transfer of your information to these locations.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Withdraw consent for data processing

To exercise any of these rights, you can delete your account through Clerk's user management interface, or contact us directly.

7. Cookies

We use essential cookies for authentication and optional analytics cookies (Google Analytics) with your consent. We do not use advertising cookies. See our Cookie Policy for full details.

8. Children's Privacy

Derby Dash is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the Game. Continued use after changes constitutes acceptance of the updated policy.