Privacy policy

CarveMania · last updated 30 October 2026

CarveMania is a browser ski racing game. It doesn't ask for your email (unless you choose to sign in with Google), doesn't sell data, and doesn't use advertising cookies on its own site. This page says what the game does store and send, and why.

CarveMania is made and run by Alec Salisbury Digital LLC in the United States ("we"), which decides how this data is used.

On your device

Your personal bests, medals, settings, outfit and board name are kept in your browser's local storage. Clearing your site data removes them.

Leaderboards

When you post a time, the game sends it to our leaderboard server (hosted by Supabase in the United States):

• the course, your time and the inputs of your run (so the server can replay it to check it, and others can race it as a ghost);
• the board name you choose and, if you pick one, a country flag.

On our own site the game makes an anonymous account for you, with no email or password (unless you sign in with Google, below). On CrazyGames your CrazyGames username is used as your board name instead, checked with a token from your CrazyGames login. Names, flags, times and runs on the boards are public. Offensive names are refused, and we can remove names or times that break the rules. Supabase's sign-in system also logs the IP address and browser of each session, for security.

Friends: other players can find you by board name and follow you, and opening someone's challenge link (which carries their player number) makes you follow each other. We store who follows whom, so you can see your friends' times and race their ghosts.

Signing in with Google

On our own site you can choose to sign in with Google, so your board name, times and friends are the same on every device. Your account with us (kept by Supabase) then stores your Google email address and Google's ID for your account, along with the name and picture Google sends with them. They're used only to sign you in: they never appear on the boards, and we don't email you or share them. If you sign in on a second device that already has times of its own, they're added to your account. Signing in is optional, and it isn't offered on CrazyGames.

Signing out forgets your account on that device only. To remove the Google sign-in from your account, or the whole account with its times, contact us and we'll delete it. You can also remove CarveMania's access in your Google account settings.

Analytics

We use PostHog (United States) to learn which courses people finish, where they crash or give up, and whether they come back. It records page views and game events such as starting, finishing or quitting a run, with your browser, device type, the page address and the site you came from, rough location (from your IP address) and a random ID kept in local storage. It doesn't record your screen, keystrokes or clicks on the page, and it respects your browser's Do Not Track setting. You can turn it off in Settings (Play stats): then nothing is sent and the ID is removed.

Hosting

The site is hosted by Cloudflare, which sees your IP address to deliver the pages and block attacks.

CrazyGames

When you play on CrazyGames, CrazyGames shows ads and handles accounts under its own privacy policy. We receive your CrazyGames username and an account ID, and the IDs of your CrazyGames friends, so that the ones who play CarveMania show up as your friends here. Our analytics (above) runs there too.

Why we use it

Leaderboards, accounts, friends and replies to your messages are what you ask the game for, so we need the data to provide them. Analytics, the checks on posted runs and the sign-in logs are in our legitimate interest in running a game that works and is fair; you can turn analytics off at any time.

Where it's kept

Supabase, PostHog, Cloudflare and Resend keep data in the United States. Where the law requires it, they protect data from the EU and UK with the European Commission's Standard Contractual Clauses.

Keeping and deleting data

Leaderboard entries, accounts and follows are kept for as long as the game runs: the boards are the game's record. Analytics events are deleted after 12 months. Messages are kept in our email. To have your name and times removed, contact us with your board name and we'll delete them. If you signed in with Google, tell us its email address too, and we'll delete your account with it.

Your rights

You can ask us for a copy of the data we hold about you, or to correct or delete it, and you can object to how we use it: contact us. If you're in the EU or UK you can also complain to your data protection authority. We don't sell or share personal information as California law defines it.

Children

CarveMania is made for a general audience, not for children under 13, and doesn't knowingly collect personal information from them. If a child under 13 has signed in with Google or posted a name, contact us and we'll delete it. Board names are the only free text, and they're filtered. The analytics ID is used only to keep the game working and make it better, never to contact anyone or show them ads.

Contact

Questions or removal requests: send us a message here. It reaches us by email (sent through Resend), with the email address you give so we can reply. We use it only to answer you.