Privacy policy
Last updated: 7 November 2026
Trash Heist is a free browser game made by one person. This page explains what data the game uses, why, and what you can do about it. Short version: you can play without giving us anything about yourself, and analytics only runs if you say yes.
Who is responsible
The data controller is Dmitry Christie, a private individual based in Spain, who runs trashheist.net. Contact for anything about your data: privacy@trashheist.net.
What we use, and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Your raccoon name, and what you do in a heist (moves, score) | To run the game and show you to the other players in your room | Providing the game you asked for (Art. 6(1)(b) GDPR) | Only while the room is open (in memory, not saved) |
| Your raccoon name and score on the daily heist board | To show today's leaderboard | Providing the game (Art. 6(1)(b)) | Deleted after 30 days |
| Your IP address | To connect you to the game, and to stop abuse (rate limits) | Legitimate interest in keeping the service running and safe (Art. 6(1)(f)) | Rate-limit counters are kept in memory for up to an hour. Our server logs don't record IP addresses; the hosting provider may keep standard connection logs for a short time |
| Usage data via Google Analytics 4: pages and screens, game events (for example "a round started", "a round ended", score, map), device and browser type, approximate location (country/city), a random ID in a cookie | To understand how the game is played and what to improve | Your consent (Art. 6(1)(a)), which you can withdraw any time | Kept by Google for the retention period set in our Analytics account (14 months at most) |
| Your settings (name, language, sound, epilepsy-safe mode, cookie choice) | So the game remembers them | Strictly necessary for the service you asked for | On your device only, until you clear it |
If you don't accept analytics, Google Analytics still receives anonymous, cookieless pings with no identifier, to count visits in aggregate (Google Consent Mode). Nothing is stored on your device for it.
Voice chat
Voice chat is optional and only starts when you turn it on. It connects your browser directly to the other players in your room (peer to peer, WebRTC). Your audio is not sent to or recorded by our server. To set up the direct connection, your IP address is shared with the other players' browsers and with Google's STUN servers, which tell your browser its public address.
Who else handles data
- Railway (Railway Corporation, USA) hosts the game server, in a data centre in the Netherlands.
- Google (Google Ireland Ltd / Google LLC) provides Google Analytics (only with your consent), the fonts the game uses (Google Fonts, which receives your IP address when the page loads them), and the STUN servers for voice chat.
- Namecheap forwards emails sent to privacy@trashheist.net.
Some of these companies are in the USA. Transfers rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
Accounts and the shop
Accounts and the shop are not open yet. When they open, this policy will be updated before anything new is collected (for example an email address to sign in).
Children
The game is family-friendly. In Spain, people under 14 need a parent or guardian to consent for them, so if you're under 14, please ask a parent before accepting analytics cookies.
Your rights
You can ask to see, correct or delete the data about you, to restrict or object to its use, and to get a copy of it (access, rectification, erasure, restriction, objection, portability). Email privacy@trashheist.net. Since the game doesn't know who you are, tell us your raccoon name and roughly when you played, so we can find it.
You can withdraw your analytics consent at any time in the game: Settings → 🍪 Cookies. Withdrawing doesn't affect what was collected before.
If you think your data is being misused, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), or to the authority in your own country.
Changes
If this policy changes, the new version will be posted here with a new date. If the change affects what you agreed to, the game will ask again.