Privacy policy

Last updated: 11 October 2026.

Who is responsible

Circuit Sprint is published under the name Circuit Sprint Studios. Operator and data controller: Harry Barker, trading as Circuit Sprint Studios.

For support or privacy questions, email circuitsprintstudios@gmail.com.

Playing the game

The current Android game works without an internet connection. It has no accounts, advertising, analytics, tracking SDKs or location lookup. It does not send us your progress, device identifiers or gameplay activity. We do not sell or share game data for advertising.

Data stored on your device

The game saves progress, puzzle sessions, stars, achievements, unlocked rewards, tutorial completion and preferences locally on your device. This allows you to continue playing and keep your settings. These records are not uploaded to us.

You can reset progress in Settings. Clearing the app’s storage or uninstalling removes its local records. Android automatic backup is disabled for this app. In a browser, records stay in that browser’s local storage until you reset them or clear the site’s data.

Optional backups

Exporting a backup saves a JSON file containing your game progress, sessions and settings to a location you choose. Import reads the file you select and asks before replacing progress. The app does not automatically upload backups. Exported files remain until you delete them separately.

If you choose a cloud storage service through your device’s file picker, that service handles the file under its own privacy policy.

Sharing results

Sharing is optional. The game prepares result text or an image locally. Android sharing opens your device’s share chooser; the game does not select a recipient or automatically post your result. Copying and saving are also actions you choose. The app or service you share through handles the result under its own privacy policy.

Support emails

If you contact us, we receive your email address, message and any attachments or other details you provide. We use this information to answer your request, investigate reported problems and keep necessary support records. The lawful basis is our legitimate interest in providing support and maintaining the game, subject to your rights.

Messages are handled through Gmail, provided by Google. Google processes email information under its applicable terms and privacy arrangements, which may involve processing outside the UK. We review resolved support messages monthly and normally delete them within 90 days of resolution. We may retain relevant records longer when needed for an unresolved complaint, security incident or legal obligation. Downloaded attachments are included in that review. Please avoid sending passwords, payment details or other sensitive information.

Local result images

Android result images prepared for sharing are held temporarily in the app’s private cache. The app removes images older than 48 hours when another result image is prepared. Device storage controls can remove the cache sooner. Copies saved or shared elsewhere remain until you delete them from those places.

Children

The game does not ask players for names, email addresses, dates of birth or other personal details. The same local-only gameplay approach applies to players of every age. Children should ask a parent or guardian before emailing support or sharing anything personal.

Your privacy rights

For personal information held in support messages, you may request access, correction, deletion or restriction and object to processing, where applicable. Contact the email above. We cannot remotely access or delete game progress stored only on your device; use the app’s reset option or your device’s storage controls.

If you are unhappy with how your personal information is handled, you can raise a concern with us or complain to the UK Information Commissioner’s Office.

This website

The Circuit Sprint website has no analytics scripts, advertising tags or non-essential cookies added by the studio. Like other websites, its hosting platform may process technical information such as your IP address, request details and security logs to deliver pages and protect the service. The website is hosted through OpenAI Sites; its privacy policy explains its processing. Do not interpret the game’s local-only behaviour as a promise that a website or its host receives no information.

Contact form and human verification

The website includes an enabled contact form with human verification and email delivery. Submitting it sends your email address and message to our server so we can respond. We do not create a separate database of form submissions. The same support purpose, retention period and privacy rights described above apply.

The Contact page embeds Cloudflare Turnstile. Loading it sends technical information, such as your IP address and browser information, to Cloudflare for human-verification checks. This widget is not included in the Android game. See Cloudflare’s Turnstile Privacy Addendum.

Resend processes the sender’s email and message to deliver it to our Gmail support inbox. These providers may process information outside the UK. See Resend’s privacy policy. Email delivery providers and hosting services may retain operational and security records under their policies. You can also use the email links instead of the form.

Stores and future changes

This notice covers the current game and support contact. Google Play, itch.io, download websites and external services may separately process information under their own policies. It does not mean those services collect no data.

We will update this notice if the game’s privacy practices change, including before adding accounts, ads, analytics or cloud saves.

Contact form cooldown

After a successful contact-form submission, we store a signed, secure cookie and a local browser timestamp for one hour to prevent repeated messages. These are used only for this limit, not advertising or analytics.

Security and necessary browser storage

Our legitimate interests are responding to requested enquiries and protecting the contact form against spam and abuse. We use the one-hour security limit only for those purposes. The cookie expires automatically after one hour. The local countdown is removed when it expires while the page is open, or when you next open the Contact page; otherwise it remains in your browser until its site data is cleared. A session timestamp shows the thank-you message and is removed with the browser session or the expired countdown. No advertising or analytics tags are enabled.

Cloudflare also processes verification signals to improve its bot detection as described in its Turnstile Privacy Addendum. Hosting, verification and email providers may have their own retention periods. Our support deletion period does not control their operational records.

Providing information and decisions

Contacting us is optional. The form needs an email address and message so we can receive and answer an enquiry. Verification and the one-hour limit can block a submission; they do not make decisions with legal or similarly significant effects about you. We do not use support messages for profiling or marketing.

You may request information about safeguards for overseas processing by emailing us. We aim to answer privacy-rights requests within the applicable legal time limit, normally one month. Some rights, including portability, apply only in particular circumstances.