Global Rally
Privacy Policy
Last updated: 20 July 2026 · Effective: 20 July 2026
This policy explains what Global Rally ("the App") collects, why, and what you can do about it. The App is operated by Opnix Digital Studios ("we", "us"), based in Malaysia.
The short version. We collect your email, the display name and avatar you choose, and your gameplay record. We don't use ad networks, we don't run third-party analytics or tracking SDKs, we don't track you across other apps or websites, and we don't sell your data. You can delete your account at any time.
1. Information we collect
Information you give us
- Email address and password — used to create and sign in to your account. Your password is stored only as a salted hash by our authentication provider; we never see or store it in plain text.
- Display name and avatar — shown to other players on leaderboards, in matches, and in the in-game activity ticker. Don't put your real name here unless you want other players to see it.
- Support correspondence — if you email us, we keep the message and your email address so we can reply.
Information generated when you play
- Gameplay data — matches you take part in, the moves you submit, results, team assignment, and season history.
- Economy data — your Stars balance and a ledger of every change to it (earned, spent, purchased), plus the sabotage effects you deploy and who they target.
- Purchase records — if you buy a Stars pack, we store the Apple transaction identifier and what was credited, so we can grant your Stars and handle refunds. We never receive your card number or billing address — payment is handled entirely by Apple.
- Technical data — your app version and basic request/error logs generated by our backend when the App talks to it. These are used to keep the service running and to debug problems.
What we do not collect
No location data. No contacts, photos, microphone, or camera access. No advertising identifier (IDFA). No third-party analytics, attribution, or crash-reporting SDKs. No cross-app or cross-site tracking of any kind.
2. Why we use it
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create your account and sign you in | Email, password hash | Performance of a contract |
| Run matches, teams, seasons, leaderboards | Display name, avatar, gameplay data | Performance of a contract |
| Operate the Stars economy and sabotage effects | Economy data | Performance of a contract |
| Grant purchases and process refunds | Purchase records | Performance of a contract |
| Keep the service secure, prevent cheating and abuse | Technical data, gameplay data | Legitimate interests |
| Reply to your support requests | Support correspondence | Legitimate interests |
| Comply with tax, accounting, and legal obligations | Purchase records | Legal obligation |
3. What other players can see
Global Rally is a competitive multiplayer game, so some of your information is visible to other players by design:
- Your display name and avatar
- Your team, and your contribution to your team's score
- Matches you played and their outcomes, including against your opponent
- Sabotage effects you deploy — these appear in the public activity ticker, attributed to you and your team
Your email address, password, purchase history, and Stars balance are never shown to other players.
4. Who we share it with
We do not sell your personal data and we do not share it for advertising. We share it only with the service providers we need to run the App:
| Provider | Role | What they handle |
|---|---|---|
| Cloud hosting provider | Backend, database, authentication, realtime | Account, gameplay, economy, and technical data |
| Apple Inc. | App distribution and in-app purchases | Payment processing; sends us a purchase receipt |
These providers act as processors on our instructions and are bound to keep your data confidential. We may also disclose data if we are legally required to (for example, a valid court order), or to protect our rights and the safety of our players.
5. Where your data is stored
Our backend is hosted on cloud infrastructure located in the United States. If you use Global Rally from anywhere else, your data is transferred to and processed in the United States. Where personal data is transferred out of a jurisdiction that restricts such transfers (for example, the EEA or the UK), it is covered by Standard Contractual Clauses or an equivalent safeguard offered by our hosting provider.
6. How long we keep it
- Account and gameplay data — for as long as your account is active.
- After you delete your account — your sign-in, display name, avatar, Stars balance and transaction history, and push notification tokens are deleted immediately.
- Purchase records — retained for up to 7 years after the transaction, because tax and accounting law requires it and because your app store may issue a refund long after a purchase.
- Server logs — retained for a short operational window (typically under 90 days).
7. Your rights
Under Malaysia's Personal Data Protection Act 2010 — and, where they apply to you, the GDPR (EU/UK) and the CCPA/CPRA (California) — you can:
- Access a copy of the personal data we hold about you
- Correct data that's wrong (you can change your display name and avatar in the app at any time)
- Delete your account and your data
- Withdraw consent or object to processing based on our legitimate interests
- Port your data to another service in a machine-readable format
- Complain to your data protection authority — in Malaysia, the Personal Data Protection Commissioner (JPDP)
California residents: we do not sell or share personal information as those terms are defined by the CPRA, and we will not discriminate against you for exercising any of these rights.
To exercise any of these, email opnixdigitalstudio@gmail.com from the address on your account. We'll respond within 30 days.
8. Deleting your account
You can delete your account from inside the App: Profile → Settings → Delete Account. This permanently removes your sign-in, display name, avatar, Stars balance and transaction history, and push notification tokens. You will not be able to sign in again, and we will no longer hold anything that identifies you.
Purchase records are retained for up to 7 years, because tax and accounting law requires us to keep them and we need them to process any refund your app store may issue later.
If you can't reach that screen, email opnixdigitalstudio@gmail.com from your account's email address with the subject "Delete my account" and we'll do it within 30 days.
Deletion is permanent. Unspent Stars, including purchased Stars, are forfeited and cannot be restored or refunded.
9. Security
Traffic between the App and our backend is encrypted with TLS. Data is protected at the database level by row-level security policies, so one player's account cannot read another's private data. Score, wallet, and match writes are handled exclusively by trusted server-side functions, not by the app on your phone. No system is perfect, but we take reasonable technical and organisational measures to protect your data, and we will notify you and the relevant authority of a breach where the law requires it.
10. Children
Global Rally is not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, email us and we will delete it. Where you are between 13 and the age of digital consent in your country, you should only use the App with a parent's or guardian's permission.
11. Changes to this policy
If we change this policy we'll update the date at the top, and for significant changes we'll notify you in the App before they take effect. Continuing to use Global Rally after a change means you accept the updated policy.
12. Contact
Opnix Digital Studios
opnixdigitalstudio@gmail.com