Privacy policy

Last updated: 3 October 2026

TEB RUN is a free browser game. We built it to collect as little as possible, and we mean it. This policy explains what data is involved when you visit tebrun.io, play at play.tebrun.io, or email us.

The short version

• No cookies. No ads. Anonymous, cookie-free statistics only (GoatCounter, see “Visit statistics”).
• Anonymous, cookie-free visit statistics with GoatCounter (details below).
• No accounts. We don’t ask for your name, email or age to play.
• Your high scores, chosen car and settings stay in your own browser.
• Our host, Cloudflare, processes technical request data such as your IP address to deliver the site.
• If you email us, we use your message only to reply.

1. Who is responsible

The data controller is Teb, based in Belgium. Contact: ciao@tebrun.io

Because the controller is in Belgium, the EU General Data Protection Regulation (GDPR) and Belgian data protection law apply.

2. What data is processed, and why

2.1 Data stored in your browser (localStorage)

The game saves the following only in your browser’s localStorage, on your own device:

• your high-score table (three-letter initials, scores)
• the car you chose
• your game settings (for example, audio and mute preferences)

This data is not sent to us or anyone else. We cannot see it. It stays on your device until you clear it, for example by clearing your browser’s site data. localStorage is used only to provide features you asked for, and it is not used for tracking.

If you build the game from its source code and add your own music files to the radio, they are played locally in your browser. They are not uploaded.

2.2 Hosting and technical request data

The website and the game are hosted on Cloudflare, operated by Cloudflare, Inc. When your browser requests a page or file, Cloudflare processes technical data needed to deliver it and keep the service secure. This may include:

• IP address
• date and time of the request
• requested URL
• browser and device information (user agent)
• referring page

Purpose: delivering the site and game, security, and preventing abuse. Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).

Cloudflare acts as a processor on our behalf. It may process data outside the European Economic Area, including in the United States. Such transfers are covered by appropriate safeguards, such as the EU-U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. See Cloudflare’s privacy policy at https://www.cloudflare.com/privacypolicy/.

We don’t use Cloudflare’s analytics products, and we don’t combine this data with anything else.

2.3 Email

If you write to ciao@tebrun.io or press@tebrun.io, we receive your email address, your name if you include it, and whatever you put in your message. Email is handled by our mail provider, Zoho Mail (Zoho Corporation), acting as a processor.

Purpose: reading and replying to your message. Legal basis: our legitimate interest in answering you, or steps taken at your request (Art. 6(1)(b) and (f) GDPR).

Please don’t send us sensitive personal data. We don’t need it.

2.4 Global leaderboard (if and when enabled)

Right now, high scores live only in your browser. We may add an optional global leaderboard in the future. If and when the leaderboard is enabled, submitting a score would send our server:

• your three-letter initials
• your score and time
• the route you took
• the date

As with any web request, the server would also see your IP address. We would use the IP address only for security and to prevent cheating and abuse, and we would not publish it. Initials, score, time, route and date would be shown publicly on the leaderboard.

Legal basis: our legitimate interest in running a fair public leaderboard (Art. 6(1)(f) GDPR).

Please don’t use initials that identify you if you’d rather stay anonymous. Three letters is plenty of mystery. We will update this policy before the leaderboard goes live.

Visit statistics (GoatCounter)

To understand how many people visit and play, and where they stop, the site and the game send anonymous statistics to GoatCounter (goatcounter.com), an open-source analytics service. It sets no cookies and stores nothing on your device. For each page view or game event (for example “race started”, “stage reached”, “fork taken”, “ending reached”, “shared”) it receives the page or event name and the technical data any web request carries (such as the referring site and the browser). GoatCounter does not store your IP address or browser string: it keeps only aggregated, computed numbers and does not build a profile of you. We see only those aggregated numbers.

Legal basis: our legitimate interest in understanding how the site and the game are used, with the least possible data (Art. 6(1)(f) GDPR). Because no cookies or device storage are used, no consent banner is needed. You can block it with any content blocker, and the game works the same.

3. What we don’t do

• We don’t use cookies.
• No advertising or profiling: our statistics are anonymous and cookie-free (see “Visit statistics”).
• We don’t show ads.
• We don’t sell or rent personal data.
• We don’t build profiles, and we don’t make automated decisions that have legal or similarly significant effects on you.

4. How long we keep data

• localStorage data: on your device until you delete it. We never hold a copy.
• Hosting logs: kept by Cloudflare only for as long as necessary for delivery, security and abuse prevention, in line with Cloudflare’s retention practices.
• Emails: kept as long as needed to deal with your message, and deleted within 24 months of our last exchange unless we need them longer to meet a legal obligation.
• Leaderboard entries (if and when enabled): kept while the leaderboard is running. Any IP data used for abuse prevention would be deleted within 30 days.

5. Children

TEB RUN has no accounts and doesn’t collect personal data from players. There’s no chat, no profile and nothing to sign up for. Kids can play without handing over any information. If you believe a child has sent us personal data by email, contact us and we’ll delete it.

6. Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you
• rectification of inaccurate data
• erasure of your data
• restriction of processing
• object to processing based on our legitimate interests
• data portability, where applicable

To exercise any of these rights, email ciao@tebrun.io. We’ll reply within one month. Data in your browser’s localStorage is fully under your control. You can delete it at any time by clearing your browser’s site data for tebrun.io.

You also have the right to lodge a complaint with a supervisory authority. In Belgium, this is the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, https://www.dataprotectionauthority.be). You can also contact the authority in the EU country where you live or work.

7. Security

The site and game are served only over HTTPS. Because we collect so little, there’s very little that could go wrong. That’s on purpose.

8. Changes to this policy

If anything changes, for example if a global leaderboard is enabled, we’ll update this page and the “Last updated” date above. Significant changes will be announced on the site.

9. Contact

Questions about privacy? Email ciao@tebrun.io.