Privacy

This page explains which data is processed when you play “Rush” on rush.codemich.de. In short: we do not ask for your real name, e-mail address or password, and we use no advertising, no analytics and no third-party content. Without an account nothing is stored apart from the server logs. The German version of this page is authoritative.

Controller

The controller is the operator of codemich.de, see the legal notice.

Server and logs

The site runs on a server of netcup GmbH (Karlsruhe) in Germany; a data processing agreement under Art. 28 GDPR is in place with netcup. Whenever a page is requested, the server processes technically necessary information: IP address, time, requested address, amount of data transferred, referring page and browser identification. It is stored in log files to keep the service running and to detect errors or attacks (Art. 6(1)(f) GDPR). Access logs are deleted after about five weeks, error logs after ten weeks at the latest.

Account with access code

For leaderboards and online races you create an account and receive a random access code. Only the following is stored:

• a random account number,
• a non-reversible check value (hash) of your access code – the code itself is not stored,
• the driver name you choose (please do not use your real name),
• the time of creation and of last use,
• your garage: game money, unlocked cars and tuning levels, and what you earned game money for on which day (for the daily limits).

This serves to provide leaderboards and online races to you on any device (Art. 6(1)(b) GDPR).

Leaderboards and online races

When you set a new best time with an account, the server stores your lap time, the car and the recorded line of the lap. This is used to check that the lap is genuine and lets others race against your ghost. Driver name, time, car and line are publicly visible on the leaderboards and the home page. In an online race the other drivers in the room see your driver name, car and position. Positions are only stored during the race and deleted at the latest a few seconds after you leave the room. For statistics, only the number of drivers per race is counted, without names or account numbers. For prize money the game server reports the finishing places to your account after the race; only the credit in your garage is stored.

Deletion

“Delete account” in the game deletes the account, driver name, garage and all times immediately. They remain in the server's backup copies until these are overwritten as scheduled: database backups after 14 days, backups of the whole server after three months at the latest.

Cookie and browser storage

While you are signed in, the site sets one technically necessary cookie (“rush_sitzung”) that recognises you. It contains a random string, is valid for one year and is deleted when you sign out. There are no other cookies. The game also keeps your settings (e.g. car, paint, sound, language) and your own best times in your browser's storage; this data only leaves your device as a lap time when you are signed in. Legal basis: Section 25(2) no. 2 TDDDG (strictly necessary for the requested service).

Protection against abuse

To prevent mass account creation, guessing of access codes and spam, a check value (hash) of your IP address is stored for at most 24 hours when you create an account, sign in, submit a time or join an online race (Art. 6(1)(f) GDPR).

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. As we do not know you by name, you identify yourself with your access code. Please contact the address given in the legal notice. You may also lodge a complaint with a data protection supervisory authority, for example the Thuringian State Commissioner for Data Protection and Freedom of Information.

As of October 2026