1. Who operates the service
Gravity Defied Online is operated by KYKS (“we”, “us”). Questions about privacy or personal data can be sent to koklyk3@gmail.com.
2. Information we process
Account and authentication
If you register, we store your login, a salted one-way password hash, account creation time, and temporary session tokens. We never store your password in readable form.
Game and community data
We store cloud saves, settings, unlocked tracks, selected bike and track, completion history, scores, replay inputs and frames, replay verification results, custom-pack ratings, global game-chat messages and their reply or mention references, forum topics and replies, moderation state, the accepted Terms version, and the date of changes. Competitive lobby chat is delivered in real time and kept only in temporary process memory. Legacy block and report records created before those features were removed may remain until the related account or content is deleted; the current service does not accept new block or report records. If you upload them, we also store your avatar, forum images, and custom MRG packs with the title, author, and source link you provide.
Public information
Your login, avatar, verified scores, replay, profile statistics, custom-pack metadata, ratings, game-chat messages, forum topics, replies, and attached images may be displayed publicly. Do not use your legal name or publish personal information if you do not want it to be public.
Technical and security information
Our servers and reverse proxy may process IP address, proxy forwarding headers, user-agent, origin and referrer, requested URL, interface language, connection and activity times, response status, and a pseudonymous online connection identifier. While a site page or the game is open, the browser may also report screen and viewport dimensions, pixel and color depth, orientation, platform and browser brands, browser languages and vendor, maximum touch points, time zone and UTC offset, display mode, logical processor count, approximate device memory where available, cookie availability (not cookie contents), Do Not Track and browser network status, and network information exposed by the browser (effective connection type, approximate downlink, round-trip time, and data-saver status). In the game, the live activity can include the selected mode, difficulty, track, and bike. For a signed-in connection, the restricted monitor can also show the account ID, registration time, accepted Terms version, and session expiry time. Reading these standard browser properties does not request an additional permission; the monitor does not request or receive precise location or GPS data. Browser- and proxy-reported values can be incomplete or inaccurate and are treated as technical diagnostics, not verified facts. An authorized operator can view these fields for active authenticated and guest connections in a restricted realtime monitor for delivery, abuse prevention, rate limiting, troubleshooting, capacity monitoring, and service security. The live connection view is held in process memory and disappears when the connection closes; server access logs may retain the technical request data described below. Passwords, authentication tokens, and cookie contents are not included in this monitor.
Motion controls
If you enable accelerometer control, motion readings are used locally on your device to control the bike. Gravity Defied Online does not send or store those readings on our server.
3. Why we use the information
- to create and secure accounts and keep you signed in;
- to save progress, publish records, verify runs, and play replays;
- to provide profiles, custom packs, ratings, leaderboards, game and lobby chat, and the community forum;
- to retain limited legacy safety records until their related account or content is deleted;
- to operate, protect, diagnose, and improve the service;
- to meet legal obligations and respond to valid legal requests.
4. Sharing and third parties
We do not sell personal data and do not use advertising or third-party analytics SDKs. Data is processed by infrastructure providers only as needed to host and deliver the service. The About page contains an external PayPal donation link; no PayPal SDK is loaded by Gravity Defied Online, and PayPal receives a request only after you choose to open that link.
5. Storage and retention
Account and gameplay data is kept while your account exists. Global game-chat history is kept for up to 30 days; competitive lobby chat is temporary and disappears when the server process or lobby history is cleared. Legacy block and report rows are no longer created and remain only until the related account or content is deleted. Expired sessions and short-lived security and replay-verification records are periodically removed. Server access logs are retained only for operations and security. When you delete your account, associated live-database records, game-chat messages, and uploaded files are removed immediately. Encrypted or access-controlled backup copies may retain deleted data until the applicable backup is rotated; backups are used only for disaster recovery and deleted accounts are not intentionally restored to the live service.
6. Your choices and rights
You can view public account data on your profile and change your avatar there. You can delete your own global game-chat messages while signed in. You can permanently delete your account in your own profile or at the public account deletion page. Deletion removes your account, sessions, cloud save, scores, replays, verification attempts, ratings, game-chat messages, forum topics and replies, blocks, reports submitted by the account, avatar, forum images, and custom packs uploaded by the account. For access, correction, objection, or another privacy request, contact us at the address above.
7. Children
The service is not intended for children who cannot legally consent to data processing in their country without a parent or guardian. A parent or guardian can contact us to request deletion of a child’s information.
8. Security and international processing
We use HTTPS, access controls, password hashing, rate limits, and restricted database access. No online service can guarantee absolute security. Depending on your location, information may be processed in a different country where our hosting infrastructure operates.
9. Changes to this policy
We may update this policy when the service or legal requirements change. The effective date at the top will be updated, and material changes will be communicated in the service when appropriate.