Legal

Privacy policy

Last updated 17 August 2026 · Applies to the Voidride mobile app and this website.

The short version

Voidride is a game played on the real world map. To work at all it needs to know where you are, and it stores what you write to other players. That is the whole of the sensitive part, and this page explains it without hiding behind language.

  • Your location drives the game. It is not used to advertise to you, because the app carries no advertising.
  • There is no third-party analytics or tracking library in the app.
  • We do not sell personal data, and we do not share it for anyone else's marketing.
  • Voice calls are live only. They are not recorded and not stored.
  • You can export everything we hold, and you can delete your account from inside the app.

Who we are

The controller of your personal data is VOIDMAW ENTERTAINMENT SRL, Municipiul Timișoara, Jud. Timiș, Strada Frații Buzești, Nr. 11, Ap. 1, Romania, registered with the Romanian Trade Register under J2026051974000, tax identification 55499596.

Contact for anything in this policy, including data requests: support@voidride.app.

What we collect, and why

Account

Email address, username, display name, date of birth and a password hash — or, if you use Google sign-in, the identifier Google returns and the email on that account. We never receive or store your Google password.

Legal basis: performance of the contract (we cannot give you an account without it). Date of birth is processed to meet our legal obligation to keep the service to adults.

Location

Precise device location while you are playing. See the dedicated section below.

Things you write and send

Messages in servers and direct messages, images and voice notes you attach, reactions, pinned items, your profile text and the pictures you upload for your avatar and banner.

Legal basis: performance of the contract.

Who you are connected to

Your friends, the people you have blocked, the servers and crews you belong to, and the parties you ride in.

Gameplay

Distance travelled, area explored, regions and countries opened up, experience, level, crew standing, cosmetics owned and abilities used, and purchases made.

Fair-play signals

Movement measurements used to detect location spoofing and other manipulation, plus a record when something is flagged.

Legal basis: our legitimate interest in a game that is not ruined by cheating. Kept for 30 days. Aggregate daily movement statistics carry no account identifier and no location.

Device and technical

A push notification token if you enable notifications, session records for the devices you are signed in on, and server logs including IP address.

Legal basis: legitimate interest in operating the service securely, rate-limiting abuse and investigating incidents.

Location, specifically

This is the part that deserves its own section.

  • What. Precise GPS position from your device, while the app is open or while a ride is running in a foreground service you can see in your notification shade.
  • Why. It lifts the fog around you, places you on the map, decides which other players can see you, and measures the distance and area you are credited with.
  • Who sees it. Players near you see an arrow. Friends, crew and party members see it is you. Everyone else sees an anonymous arrow whose identifier is different for every viewer, so strangers cannot follow you between sessions or correlate you across the map.
  • Background. The app does not request the Android background location permission. Location while your screen is off is collected only during an active ride, through a foreground service with a persistent notification.
  • Turning it off. Revoke the location permission in Android settings at any time. The game cannot function without it, but nothing else about your account is affected.

What your explored map is

The fog you have cleared is a record of places you have physically been. We treat it as exactly that sensitive. It is stored against your account, it is not shared with anyone outside the game, and deleting your account removes it.

What we never do

  • No advertising. The app contains no advertising network and no ad identifier is collected.
  • No third-party analytics. There is no analytics or attribution library embedded in the app.
  • No sale of personal data, and no sharing of it for another company's marketing.
  • No voice recording. Voice channels and calls are carried live and are not recorded, stored or transcribed.
  • No selling or publishing of your location, in any form, aggregated or otherwise.

Who we share it with

Only the service providers that make the app run. Each one processes data on our instructions under a data processing agreement.

  • Amazon Web Services — hosting, database, file storage and email delivery. Data resides in the EU (Frankfurt).
  • Mapbox — map tiles and place search. Search terms and an approximate position are sent to render the map; requests are proxied through our servers so your device does not talk to Mapbox directly.
  • LiveKit — real-time voice transport. Audio passes through, and is not stored.
  • Google — sign-in if you choose it, push notification delivery, and app distribution and payments through Google Play.

We will also disclose data where we are legally required to, or where it is necessary to investigate a credible threat to someone's safety.

Where it is stored

Our servers and databases run in Amazon's eu-central-1 region in Frankfurt, Germany. Some providers listed above are established outside the European Economic Area; where that leads to a transfer, it is covered by the European Commission's standard contractual clauses or an equivalent safeguard.

How long we keep it

  • Account and gameplay data — while your account exists.
  • Messages and attachments — while the conversation or server exists, or until deleted.
  • Fair-play signals — 30 days, then automatically pruned.
  • Server logs — a short operational window for security and debugging.
  • Moderation records — retained after an account is deleted, deliberately. A record of an enforcement decision cannot be erased by the account it was made against, and we keep it to defend the decision and to meet our obligations as a platform.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. You can also withdraw consent where we relied on it.

Two of these you can do yourself, immediately, without asking us:

  • Export — request a copy of your data from inside the app.
  • Delete — delete your account from Account Settings. See below for exactly what happens.

For anything else, write to support@voidride.app. We answer within one month.

If you think we have handled your data badly you can complain to the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), or to the authority where you live.

What deletion actually does

Deleting your account is immediate and cannot be undone. You will be asked to confirm with your password, or to re-authenticate with Google. If you own a server you must transfer or delete it first, so that no community is left without an owner.

When you confirm, we:

  • remove you from every server and notify the members whose rosters are open;
  • end any live voice session you are in;
  • delete your friendships and blocks;
  • revoke every session, delete your sign-in credentials so the password no longer works, and unregister your devices from push notifications;
  • erase the actual image files for your avatar and banner from storage, not merely the links to them;
  • anonymise your account record: username, email and display name are replaced, and your profile text and pictures are cleared.

Being straight about one thing: messages you sent in shared conversations are not pulled out of other people's chat history. They remain, attributed to “Deleted User”, with nothing linking them back to you. Removing them entirely would rewrite other people's records of their own conversations. If you need specific content removed, write to us.

Age

Voidride is for adults. You must be 18 or older to create an account, the check runs on our servers rather than in the app, and it applies equally to Google sign-in. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, tell us at support@voidride.app and we will remove it.

Security

Traffic is encrypted in transit. Passwords are stored using a memory-hard hashing function and are never recoverable, by us or by anyone else. Sessions use short-lived tokens that rotate, and reusing an old one invalidates the session rather than extending it. Databases and file storage are not reachable from the public internet.

No system is perfect. If you find a security problem, please tell us at support@voidride.app before disclosing it publicly, and we will work with you.

Changes to this policy

If we change something that materially affects you, we will say so in the app before it takes effect. The date at the top always reflects the current version.