DroneRush

Imprint & Privacy Policy

Last updated: October 6, 2026

Imprint

Information according to § 5 DDG (German Digital Services Act)

Stefan Christmann
Horster Str. 72
45968 Gladbeck, Germany

E-mail: dronerush@flaboratorium.org

Responsible for the content according to § 18 (2) MStV: Stefan Christmann, address as above.

We are neither willing nor obliged to take part in dispute resolution proceedings before a consumer arbitration board.

Privacy Policy

DroneRush is an FPV drone racing game. This policy covers the web version (dronerush.flaboratorium.org) and the apps for Android and Meta Quest. In short:

  • No registration, no password, no e-mail address, no real name needed.
  • No advertising, no analytics or tracking services, no cookies.
  • A random account code instead of a login. Your data is not sold or used for advertising.
  • Your player name, your times and the replays of your runs are public on the leaderboards.
  • Our server is in Germany (IONOS).

1. Who is responsible

Responsible for data processing (controller under the GDPR):

Stefan Christmann
Horster Str. 72
45968 Gladbeck, Germany
E-mail: dronerush@flaboratorium.org

2. Hosting and server logs

The website, the game files, the music and the game's server (API) are hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, who processes data on our behalf under a data processing agreement.

Whenever you open the website or the game contacts the server, the server receives technical data: your IP address, date and time, the requested address, the amount of data transferred and the browser or app identification (user agent). This is needed to deliver the game and to keep the server secure (legal basis: Art. 6(1)(f) GDPR). The hosting provider keeps these log files only for a limited time.

When a race starts, the server also stores your IP address together with the start of the race for about 24 hours, to stop fake or automated leaderboard entries (legal basis: Art. 6(1)(f) GDPR, our interest in fair leaderboards).

3. Scripts from other servers

The web pages load program libraries from public content delivery networks. Your browser then connects to these servers, which receive your IP address and the browser identification (legal basis: Art. 6(1)(f) GDPR, a fast and reliable delivery of the pages):

  • cdnjs (the 3D library three.js), operated by Cloudflare, Inc., USA. Cloudflare may process data in the USA and is certified under the EU-U.S. Data Privacy Framework, see the Cloudflare Privacy Policy.
  • jsDelivr (the Discord Embedded App SDK, so the game can run as a Discord Activity), see the jsDelivr Privacy Policy.

The fonts and all other files come from our own server.

4. Data stored on your device

The game stores your player name, your settings (sound, graphics, VR), the last track you chose, your account code, a random device ID and your player ID in the storage of your browser (IndexedDB) or of the app. No cookies are used. You can delete this data at any time by clearing the website data in your browser or by uninstalling the app; note down your account code first if you want to keep your account.

5. Your account without registration

On first start, the game creates a random 16-character account code and a random device ID and registers them with the server. The server stores the account code only as a cryptographic hash, together with a random player ID, your player name, the time the account was created and last used, and for each of your devices the platform (web, Android, Meta Quest …), the device model and the app version.

With the account code (Settings > Account, also as a QR code) you can use the same account on your other devices. Anyone who knows your code can use your account, so only share it with your own devices (legal basis: Art. 6(1)(b) GDPR).

6. Leaderboards and replays

When you submit a race, the game sends your player name, the track, your lap and total times, which lap was your best, your player ID, device ID, platform, device model and app version to the server, and uploads a replay of your run: the flight of your drone (position, rotation and speed during the race), your player name, the track, the times and the time of the race.

Visible to everyone on the leaderboards (in the game and at dronerush.flaboratorium.org/leaderboard.html): your player name, times, place, platform, best lap and the date, as well as the replay, which anyone can watch in the browser or in the game. When a replay link is shared, its preview shows the player name, the track, the place and the times. Please use a nickname and do not enter personal data as your player name (legal basis: Art. 6(1)(b) GDPR, the leaderboards you take part in).

Each leaderboard keeps the best 100 runs of a track. We may rename, hide or delete player names that are offensive or break the rules, and delete runs that are obviously not genuine (legal basis: Art. 6(1)(f) GDPR, our interest in fair and friendly leaderboards).

7. Discord

DroneRush can also be played as an Activity inside Discord. Discord Inc. then processes data under its own responsibility, see the Discord Privacy Policy. The game does not read your Discord profile and sends no Discord data to our server.

8. Apps for Android and Meta Quest

The apps are distributed through Google Play (Google Ireland Limited) and the Meta Horizon Store (Meta Platforms Ireland Limited). These stores process data about downloads and your device under their own responsibility, see the Google Privacy Policy and the Meta Privacy Policy.

The apps contain no advertising or analytics components, use the internet to talk to our server and send the same data to it as the web version. On Meta Quest, the mixed reality mode shows the headset's passthrough view; the headset's system composes this image, the game has no access to the cameras.

The Meta Quest version is a paid app. When it starts, it asks the headset's system through Meta's Platform SDK whether the Meta account signed in on the headset owns the app. The game only learns whether this is the case. It receives no Meta user ID, no name and no other account data, and it sends nothing about this to our server. Meta processes this request under its own responsibility.

9. How long we keep data

The IP address stored with the start of a race is deleted after about 24 hours. Accounts, devices, leaderboard entries and replays are kept as long as the game is operated, unless you ask us to delete them earlier. Runs that fall out of the best 100 of a track are removed from the leaderboard. Server log files are deleted by the hosting provider after a short period.

10. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77).

Because the game works without registration, we cannot tell which data belongs to you. To exercise your rights, please send us your account code (Settings > Account) by e-mail; we will then find and, if you wish, delete your account, your devices, your leaderboard entries and your replays.

11. Children

DroneRush needs no personal data. Children should not use their real name as player name, because player names are public on the leaderboards.

12. Changes

We update this policy when the game changes. The current version is always available at this address.