Privacy

Daylap keeps what it needs to run the leaderboards, and a little to learn how the game is played. No ads, no trackers, nothing sold.

Who runs Daylap

Daylap is made and run by Pliantware in Norway. Questions, or a request to see or delete your data: privacy@daylap.app.

Playing without an account

• Leaderboard laps. When you put a lap on the leaderboard we keep your nickname, the lap and sector times, what you drove with (keyboard, controller or touch), and the lap's inputs, so others can watch it or race its ghost. It's tied to a random id your browser makes; we don't know who you are.
• Online races. For each race we keep the nicknames, the result and every driver's inputs, so the race can be replayed and checked.
• On your device. Your browser keeps the random id, your nickname, your best laps and your settings. That stays on your device.

With an account

• Your email address, used only to send you sign-in links. It's kept by our account provider, Supabase, not on the game server.
• A login cookie, which keeps you signed in on that browser. It's needed for signing in, so there's no cookie banner.
• Your nickname and your laps from every browser you've signed in on, so they count as one driver.
• You can sign out at any time, or delete the account from the menu. Deleting removes your email address, your laps, your records and your statistics for good.

Statistics

To learn how the game is played and which devices struggle, the game reports a few events: a visit starting, laps, heats, online races and how long the page was open. With them we keep:

• the kind of device (phone, tablet or desktop), the operating system and browser family (such as “iOS, Safari”), the graphics mode and what you drive with;
• the country, looked up from your IP address. The IP address itself is not stored;
• lap times, positions and frame rate.

If you're not signed in, visits are only counted per day, with a code that changes every day and can't be linked to other days. If you are signed in, statistics are tied to your account so we can see whether people come back. Statistics are for the developer only, are never shown in the game and are deleted after 13 months.

Who handles the data

• Railway hosts the game server in the Netherlands. Like any host, it logs requests, including IP addresses, for a short time to run and secure the service.
• Supabase keeps accounts and statistics, in Sweden.
• Resend sends the sign-in emails.
• Cloudflare runs the domain name.
• The page loads its fonts from Google Fonts, which sees your IP address when it does.

Why, and your rights

We keep leaderboard and account data to run the game you asked for, and statistics because we have a legitimate interest in improving it, which is why they're kept to coarse categories. You can ask to see, correct or delete your data at the contact above. If you think we've got it wrong, you can complain to Datatilsynet, the Norwegian Data Protection Authority.

Countries are looked up with IP geolocation by DB-IP (CC BY 4.0). Updated 28 September 2026.