Privacy Policy
Effective November 20, 2026 · Applies to Car Cannon on the web and hub.herdapps.com
Herd Apps LLC (“Herd Apps”, “we”) makes free browser games. We are the company responsible for the personal information described here (the “controller”, where that term applies). This policy explains what our games and website collect, why, who receives it, how long we keep it, and the choices you have. We keep collection to what the game needs to work, stop cheating, and pay for itself with ads. We don’t sell personal information.
The short version
- You can play without an account. Guest progress is saved in your browser (local storage) on your device.
- If you sign in with Google, we store an account ID, your email, your saved progress and your verified runs.
- Ads are served by Google AdSense. Where the law requires it we ask for your consent first, and you can change your choice any time.
- Players under 13 can’t create an account, send us no personal information or gameplay data, and only see non-personalized ads tagged as child-directed. Players 13–17 only see non-personalized ads.
- You can delete your account and its data inside the game or by emailing us.
What we collect
| Data | When | Why |
|---|---|---|
| Age range (under 13, 13–17, 18+) — not your birth date | First visit. Stored in your browser only; never sent to us | To apply the right ad, account and content settings |
| Account ID and email from Sign in with Google | Only if you sign in (13+) | To create your account, keep it secure and answer support requests |
| Saved progress (coins, upgrades, levels, stars, missions, calendar, season progress, paints and trails, settings) | Signed-in players | Cloud save across your devices |
| Run recordings (your steering and boost inputs, launch power, car upgrades, level, distance) | Signed-in players, when a run is sent for verification | To verify scores and postcard unlocks by replaying the run on our server, to rank the Weekly Cup, and to detect cheating |
| Leaderboard entry: an automatic name such as “Player 4F2A” (or a name you choose), your best distance, level and car class | Signed-in players with a verified run | Shown publicly on the weekly leaderboard |
| Weekly Cup results and in-game rewards | Signed-in players | To give you the in-game rewards you earned |
| Solana wallet address (public address only) | Only if you add one on hub.herdapps.com (18+) | To send free collectible postcards you choose to mint |
| Emails you send us | When you contact support | To reply and keep a record of the request |
| Advertising data collected by Google (see Ads) | When ads are requested or shown | To show, limit and measure ads and prevent ad fraud |
We don’t collect your name, phone number, contacts, photos, microphone, camera or precise location. We don’t use analytics or crash-reporting services of our own. We don’t currently offer in-game purchases on the web, so we collect no payment information.
On our websites: our hosting provider processes standard request data (IP address, browser type, time) to deliver and protect the sites. Your browser stores your game progress and age range in local storage, and, if you sign in, a sign-in token so you stay signed in. Apart from the ads described below, our sites use no analytics and no tracking cookies of our own.
Ads
Car Cannon shows ads through Google AdSense (including its games ad products). Google and its ad partners may use cookies or similar technologies and may collect your IP address, approximate location derived from it, browser and device information, and how you interact with ads, to show, limit and measure ads and prevent fraud. In the EEA, UK and Switzerland, and wherever else the law requires, Google’s consent message appears first, and ads that need your consent are only requested if you agree. You can change that choice at any time in the game under Settings → Ad privacy choices (where it applies to you), and you can manage Google’s ad settings at Google’s ad settings page. How Google uses data is explained in Google’s policy on how Google uses information from sites or apps that use its services.
Some ad services are blocked by browser extensions. If ads can’t load, the game still works; you just don’t get optional reward-ad bonuses.
For players aged 13–17 we ask Google to apply its treatment for users under the age of consent, so ads are not personalized. For players under 13, see Children.
Children
Car Cannon is a general-audience game that children may also play. On first visit it asks every player for an age range in a neutral way. If a player says they are under 13, the game:
- turns off sign-in, accounts, cloud save, run uploads, leaderboard entries, the collectibles hub and personalized ads;
- sends no personal information and no gameplay data to Herd Apps’ servers — progress and the age range stay in the browser. (The game can still download the public leaderboard to display it; that request carries nothing about the player.)
What a third party collects. The only information collected from a player under 13 is collected by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to serve ads. We tell Google to treat every ad request for these players as child-directed, which means no personalized ads. Google may use identifiers such as cookies or an IP address solely to support the internal operations of the service: delivering contextual ads, limiting how often an ad is shown, measuring ads and preventing fraud and security problems. These identifiers are not used to contact a child, to build a profile, or for behavioral advertising, and we don’t receive or store them.
Retention for children’s information. We keep no personal information from children under 13 on our servers. The age range and game progress stay in the browser until the player clears site data. If we ever learn that we hold personal information from a child under 13, we delete it promptly, and in any case within 30 days.
Parents and guardians. You can ask us what information, if any, we hold about your child, ask us to delete it, and tell us not to collect more. Contact us at the address, phone number or email in Contact. We don’t make any activity depend on a child giving more information than is needed to take part.
Collectible postcards and the blockchain
When minting opens, adult players can choose to mint postcards they’ve earned as free digital collectibles on the Solana blockchain at hub.herdapps.com. Minting is optional and never unlocks anything in the game. Anything written to a public blockchain — your wallet address and the collectible — is public and permanent; we can’t change or delete it, even if you delete your account. We only ever ask for your public address, never a seed phrase or private key.
Why we’re allowed to use your data
Where the law requires a legal basis (for example in the EEA, UK and Switzerland), we rely on:
- Our agreement with you — accounts, cloud save, verified runs, leaderboards, postcards and support;
- Your consent — personalized ads and similar technologies where required, which you can withdraw at any time;
- Our legitimate interests — preventing cheating and fraud, keeping the game secure, and showing non-personalized ads to fund a free game;
- Legal obligations — keeping records the law requires and answering lawful requests.
Runs are checked automatically by replaying them on our server, and a run that doesn’t match is rejected automatically. If you think a score or account was wrongly removed, email us and a person will review it.
Who receives data
We use service providers that process data on our instructions: Supabase (database, sign-in and servers, hosted in the United States), Google (sign-in), Cloudflare (website hosting and protection) and our email provider (support). Google AdSense and its ad partners receive the advertising data described in Ads. Leaderboard entries are public. Minted postcards are public on the Solana network.
We also disclose data if the law requires it, to protect players or our games from fraud or abuse, or as part of a sale or merger of our business (with this policy continuing to apply). We don’t sell or rent personal information. We don’t allow personal information to be used for cross-context behavioral advertising except through the personalized ads you have agreed to where they are offered, which you can switch off at any time under Settings → Ad privacy choices. We don’t knowingly sell or share the personal information of anyone under 16.
How long we keep it
| Data | Kept for |
|---|---|
| Account, cloud save, runs, leaderboard entries, Weekly Cup results, earned postcards, wallet address | While your account exists. Deleted when you delete your account |
| Weekly leaderboard | Each board covers one week |
| Support emails | Up to 2 years after the request is closed |
| Backups | Roll off within 30 days |
| Blockchain records | Permanent and outside our control |
We may keep limited records longer where the law requires it or to resolve a dispute. Google keeps its own records under its own policies.
Delete your account and data
To delete your Car Cannon account (Herd Apps LLC) and the data linked to it:
- In the game: open Account → Delete account. Deletion starts immediately.
- Without the game: email admin@herdapps.com from the address linked to your account with the subject “Delete my Car Cannon account”. We complete requests within 30 days.
Deleting your account removes your account, email, cloud save, run recordings, leaderboard entries, Weekly Cup results, earned postcards and wallet address from our systems; backups roll off within 30 days. It doesn’t remove progress stored in your browser (clear your site data, or use Settings → Reset), collectibles already minted to a blockchain, or records held by Google. You can also ask us to delete specific data without deleting your account.
Your choices and rights
- Ads: Settings → Ad privacy choices in the game, and Google’s ad settings.
- Local data: clear this site’s data in your browser settings to remove saved progress and your age range.
- Access, correct, export or delete your data: email us from the address linked to your account.
Depending on where you live (for example California and other US states, the EEA, the UK or Switzerland), you may have the right to know what we hold, get a copy, correct it, delete it, move it, object to or limit some uses, withdraw consent, and opt out of targeted advertising. We honor these requests wherever you live and won’t treat you differently for making one. We may need to confirm the request comes from the account holder; an authorized agent can act for you with your written permission. We respond within 30 days (45 where the law allows more time). If we decline a request, you can appeal by replying to our decision, and you can complain to your state attorney general or, in the EEA, UK or Switzerland, to your data protection authority.
US state notice. In the last 12 months the categories we collect are: identifiers (account ID, email, and cookie or device identifiers collected by Google for ads), internet or app activity (gameplay, ad interactions) and approximate location (derived from IP address by Google). We collect no sensitive personal information. Sources, purposes and recipients are described above.
Security
Data is encrypted in transit and at rest. Players can only read their own records, and every change to scores, saves and unlocks is checked on our server. No system is perfectly secure, but we work to protect your information and will notify you and regulators of a breach where the law requires it.
International transfers
We’re based in the United States and store data there. If you play from elsewhere, your data is transferred to the US. Where the law requires it, we rely on approved safeguards such as standard contractual clauses with our providers.
Changes
If we change this policy, we’ll update the date above, and tell you in the game before a significant change takes effect.
Contact
Herd Apps LLC
3000 Biscayne Blvd, Suite 210A-1302
Miami, FL 33137, USA
+1 347-586-9616
admin@herdapps.com