Privacy Policy
Roundabout Timing has no sign-up and no analytics of its own. Your progress stays on your device. This page explains the few things that do leave it, and the ads Google may show on this site.
Last updated: 2 October 2026.
Who is responsible
Leonard Suhr, Roonstraße 44, 42115 Wuppertal, Germany. Email: [email protected].
Loading the game
When you open the game, your browser asks our server for its files. Like every web server, it receives your IP address, the time, the file requested and your browser's identification (user agent). We use this only to deliver the game and to keep the server secure; server logs are deleted after a short time. The server is operated by us (self-hosted) in Germany.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in delivering the game safely).
Stored on your device
The game keeps your progress, your settings and, if you play multiplayer, the name you chose in your browser's local storage. It also stores its own files so it runs offline. None of this is sent to us. Storing it is what makes the game work as you asked (§ 25(2) no. 2 TDDDG).
To delete it: Settings → Reset progress, or clear the site data in your browser.
Multiplayer
Only when you open a multiplayer room, the game connects to other players directly (WebRTC). To find each other it uses:
- PeerJS Server (0.peerjs.com), run by the PeerJS open-source project, which receives your IP address and a random room ID to introduce the players.
- STUN servers of Google LLC (stun.l.google.com), which receive your IP address to find a route between the players. Google may process it in the USA; Google is certified under the EU-US Data Privacy Framework.
- The other players in the room, whose devices technically see your IP address, and the name you chose.
- Only if your connection needs a relay (many phone networks and school Wi-Fi do): a relay of Cloudflare, Inc. (USA, certified under the EU-US Data Privacy Framework) that passes the match data on and sees your IP address while it does. Before a room opens, the game asks our server for a login that stops working after a day; the server receives your IP address with that request, as with any request, and does not store it.
Legal basis: Art. 6(1)(b) GDPR (connecting you to the players you chose to play with). Without multiplayer, none of this happens.
Leaderboard
Only if you enter a name for the leaderboard (Progress → Ranks), the game sends it to our leaderboard server, which runs on the same machine as the game. From then on it sends your level (with your Prestige rank) and your Unlimited record whenever they improve.
The server stores the name, a random ID, a secret key that proves the name is yours (only its hash is kept), your best scores and when you reached them. The name and the scores are public: everyone can see them on the leaderboard. Your IP address reaches the server with every request, as with any website; it is used only in memory to stop abuse and is not stored. Offensive names are removed.
Legal basis: Art. 6(1)(b) GDPR (the leaderboard you chose to join). To remove your name and all your scores at once: Progress → Ranks → Remove me from the leaderboard.
Friends
If you open Friends on the leaderboard, the server makes a friend code for you (like K7M2-9QXA). Whoever types your code adds you to their friends list and then sees your name and your best scores on their friends board, which they could already see on the public leaderboard. You can see and remove the people on your own list; the list is stored with your leaderboard entry.
Legal basis: Art. 6(1)(b) GDPR (the friends board you chose to use). Removing your name from the leaderboard deletes your friend code and your list as well.
Cloud sync
Only if you turn on Cloud sync (Settings → Cloud sync), the game sends a copy of your progress (the same data as the progress file you can export: level, money, upgrades, collection, records, settings) to our server. No name, e-mail address or password is needed: the server makes a random sync code, and the code is the only key to the copy. Only its hash is stored, together with the copy and the times it was made and last changed. The copy is not public. Your IP address reaches the server with every request, as with any website; it is used only in memory to stop abuse and is not stored.
Anyone who knows your sync code can load or replace your copy, so keep it private. A picture you chose for Big Screen is not part of it. If you have a name on the leaderboard, the copy also holds that name and the secret key that proves it is yours, so that on a new device you are the same player again, with the same name, scores and friends. Anyone with the sync code could therefore also act as that player.
Legal basis: Art. 6(1)(b) GDPR (the backup you chose to make). To delete the copy for good: Settings → Cloud sync → Delete the cloud copy. Stopping on one device leaves the copy for your other devices.
Big Screen
Big Screen (a map you earn at Prestige ★5) shows your own picture or video behind the roundabout. A picture you upload is made smaller and kept in your browser only; it is never sent to us or anyone else.
Only if you paste a link, your browser loads it straight from that site, which receives your IP address and your browser's identification like on any visit. A YouTube link plays through YouTube's privacy-enhanced mode (youtube-nocookie.com), run by Google Ireland Limited; Google may process data in the USA and is certified under the EU-US Data Privacy Framework. The link itself stays on your device.
Legal basis: Art. 6(1)(b) GDPR (showing what you chose to show). To stop it: Remove in the Big Screen sheet, or take Big Screen off.
Sharing
Sharing a result, a photo, a challenge or a room link uses your device's own share sheet or download.
When you tap Challenge a friend, the game asks our server for a short link (like …/c/K7M29QXA) that shows a picture with your score in a chat. For that it sends the challenge: the shift (level, mode, the random seed of the traffic, your upgrades, roads and car types) and the score to beat. If you have a name on the leaderboard, the link is tied to it and the picture shows that name; removing your name from the leaderboard takes it off your links. The server keeps a short link for a year, then deletes it. Anyone with the link can open it. Your IP address reaches the server with the request, as with any website; it is used only in memory to stop abuse and is not stored. Without the server the game shares the long link, which sends nothing to us.
Legal basis: Art. 6(1)(b) GDPR (the link you asked for).
Ads (Google AdSense)
On game.gustaff.dev (not on CrazyGames) Google AdSense may show ads. For that, your browser loads scripts from Google and sends it your IP address, your browser and device data and the page you are on. Google, and the advertisers it works with, may set or read cookies and similar identifiers on your device to choose and measure ads, to prevent fraud and, with your consent, to personalise ads. Google may process data in the USA; Google is certified under the EU-US Data Privacy Framework.
If you are in the European Economic Area or the United Kingdom, a consent message from Google asks you first. Without your consent, only the ads that need no personal data are possible, or none at all. Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can change your choice at any time with the privacy settings link of the consent message, or by clearing the site data in your browser.
Google is responsible for its own use of the data. How it uses data from sites that use its services, and how to turn personalised ads off:
How Google uses data from partner sites
The Google Play app
The app from Google Play opens this same game at game.gustaff.dev in Chrome (or another browser on your phone), full screen. Everything in this policy applies to it the same way, including the ads; the app itself collects nothing more. Google (Google Ireland Limited) delivers the app and its updates; its privacy policy applies to Google Play.
Deleting your data
You have no account with us: your progress lives on your device. Deleting the game's data in your browser, or uninstalling the app and clearing Chrome's data for game.gustaff.dev, removes it from your device.
What our server keeps exists only if you chose it, and you can delete it yourself in the game at any time: your name, scores, friend code and friends list with Progress → Ranks → Remove me from the leaderboard; your cloud copy with Settings → Cloud sync → Delete the cloud copy. Both are gone for good at once. If you can no longer open the game, write to the email address above with your name on the leaderboard or your sync code, and we delete it within 30 days.
Playing on CrazyGames
If you play the game on CrazyGames, CrazyGames (Maxflow BV, Leuven, Belgium) runs the page around it, may show ads, and keeps your progress: in your CrazyGames account if you are logged in, otherwise in your browser. Their privacy policy applies to that.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object (Art. 15–21 GDPR). Write to the email address above. You may also complain to a data protection supervisory authority, for example the one where you live.