Privacy
LightBikes.io · last updated 8 September 2026
This game is made by one person. The short version: it keeps what it needs to let you ride, remember your bikes and show a leaderboard; and it keeps that on your own device wherever it can. It uses no third-party analytics or tracking service — what it does count for itself is described under Analytics. The one thing that does come from outside is the advertisements, and the Advertising section below says who supplies them and what they set on your device. We ask for non-personalised advertisements everywhere, which means what you see is chosen from where you are and what the game is — never from a profile of you.
What stays on your device
Most of what the game remembers never leaves the browser you are playing in. It is held in that browser's own storage and is not sent anywhere unless a section below says it is:
- the nickname you typed, and the bike you have equipped;
- your bikes, coins, unlocks, records and lifetime stats — kills, distance, best run;
- your daily objectives and how many days in a row you have played;
- settings: sound, vibration, smoother motion, control scheme, left-handed layout and language.
Clearing your browser's site data for this game erases all of it from the device.
It does not erase what is on our server, and we want to be straight about that. The moment you play online the game gives your browser an anonymous identity — a random identifier, no email and no name — and your unlocks, your stats, your leaderboard rows and your recent rounds are attached to it. Clearing site data throws away the key to that identity rather than the identity itself: you come back as somebody new, and the old rows stay. There is nothing in them that names you, but we would rather say so than let “clear your data” sound like more than it is. If you want those rows actually gone, the surest route is to add an email address and then use delete account, which removes everything attached to it — or write to us and we will do it.
Playing online
Playing against other people connects your browser to our game server in Ashburn, Virginia, in the United States. That server sees:
- your IP address, because every internet connection reveals one to the machine at the other end. It is used to run and protect the connection, and it is not stored against you in our database;
- the nickname you typed, which is filtered on the server;
- your steering inputs and the result of the round, which is the game itself.
There is no chat in this game. You cannot send another player text and no other player can send you any. That is a design decision rather than a missing feature, and it removes most of what there would otherwise be to moderate.
Accounts, which are optional
You never have to sign up. The first time you play, the game creates an anonymous identity — a random identifier and nothing else. No email, no password, no name. It exists so that a set of unlocks and a leaderboard row can belong to somebody.
You may optionally add an email address and a password, which is what lets your bikes and records survive a cleared browser or move to another device. If you do:
- we store your email address, so you can sign in again and reset your password;
- your password is stored only as a one-way hash by our authentication provider — we never see it and cannot recover it;
- password resets are a six-digit code sent to your address, never a link, because the game often runs inside another site's page where a link would open somewhere the game cannot see.
If you are playing on a site that already signed you in — CrazyGames, for example — the game stores that site's own id for you, so your bikes and records follow your account there without your having to make a second one here. It is the id alone. No name, no avatar, no email and nothing else from that site is stored, and it is deleted with your account like everything else on this page.
Accounts, unlocks, stats and leaderboard rows are held in a Postgres database hosted by Supabase in the United States (us-east-1).
Leaderboards and friend codes
A leaderboard row carries your rank, your score and the nickname you chose, filtered. That is public by definition — it is a leaderboard.
Friends work by friend code: a short code you choose to give somebody. There is no way to search for a player by name and there is no directory of players. If you did not hand your code to someone, they cannot find you.
Crashes and errors
When something goes wrong, the game may send us the error message, the technical stack behind it, your browser's user-agent string and which build you were running. It never sends your IP address or your player identifier with it — the database columns that would hold those do not exist. It is there so that a fault which only happens on one kind of phone can be found and fixed.
Sharing a round
Nothing about a round leaves your device until you press share or save. Playing, finishing and looking at your score are all local, however many rounds you play.
When you do press it, we store a copy of that round on our server and give you a short link to it. The copy is the recording itself — the moves, not a video — together with the nickname you were riding under and your score. Anyone who has the link can watch the round, which is what a share link is for. We keep it for one year and then delete it.
We cannot see who you send a link to. We have no way to withdraw a link once you have sent it, so treat sharing a round as public. If you want a round taken down before the year is up, email [email protected] with the link.
There is also a longer link that carries the whole round inside the link itself, after the
#. That one is not uploaded anywhere, and it is what you get if the short link
cannot be made. Opening somebody else's link, either kind, is an ordinary visit to our site.
The rounds you have ridden
Separately from sharing, the game keeps a short shelf of your own rounds on our server so you can watch them back on any device. A round on the shelf is the recording itself — the moves, not a video — with how long it ran, which mode it was, and when. It carries no message, no address and nothing typed by anybody.
The shelf is short on purpose: your last 15 rounds, and up to 20 more that you have chosen to keep. Past that the oldest one drops off by itself, so nothing accumulates for years without anyone deciding it should.
It is attached to the identity described under What stays on your device — which means a guest has one too, not only somebody with an account. Deleting your account deletes the shelf with it, in the same step and not by a script somebody has to remember to run.
Advertising
There are two kinds of advertisement in this game, and one of them you choose.
Videos you ask for. Some bikes can be unlocked by watching a video instead of paying coins for them. You tap to start it, you know what you are getting, and the bike is yours when enough of them are done. Nothing is taken away if you never watch one — every bike can also be earned by playing or bought with coins.
Videos between rounds. Sometimes an advertisement plays after a round ends. It is limited on purpose: you will not see one at all during your first visit, none in the first several minutes of any visit, only a handful in any one visit however long you play, and at least a couple of minutes between them. You will never see one on a round that just earned you something, and watching a video you asked for pushes the next one further away. There is never an advertisement during play. On a game portal the portal decides how often its own advertisements appear; the limits above are ours, and the rules about your first visit and about rounds that earned you something apply everywhere.
Who supplies them. On lightbikes.io it is Google, through AdSense H5 Games Ads. In the iOS and Android apps it is AppLovin, which also passes requests to other advertising companies on our behalf. On a game portal such as CrazyGames or Poki, that portal supplies the advertisements and its own privacy policy governs them.
We ask for non-personalised advertisements everywhere. That means the advertisement you see is chosen from where you are and what the game is, not from a profile of you. We do not build advertising profiles, we do not give these companies your nickname or your account, and we do not sell or share personal information for advertising. They still need to count how many times you have seen something and to spot fraud, so they set their own identifier on your device for that, and their privacy policy governs it — Google's and AppLovin's are linked at the bottom of this page.
Nothing you can buy, with money or with a video, affects how the game plays — every item is a look.
Analytics
We do not use Google Analytics, or any other third-party analytics or tracking service, to measure how you play. There is no tracking pixel in the game and nothing follows you to another site. The advertising companies named above are the one exception, and only for the advertisements themselves.
What we do keep is counted on our own server and stored as totals: how many rounds were played, how long a session lasted, how many people were connected. Those are numbers about the game rather than rows about you.
Our site is served by Cloudflare and our game server runs at Hetzner. Both keep short-lived operational logs of the kind every web host keeps, including IP addresses, in order to serve traffic and block attacks.
Children
Games like this one are played by children and the design assumes it. There is no chat, no player search, no profile, no photograph and no way to describe yourself in free text. We do not build advertising profiles, and we do not sell or share personal information with anyone for advertising. The advertisements in the game are non-personalised, which means they are not chosen from anything about you.
If you are a parent or guardian and you believe your child has given us more than the above, write to the address below and we will delete it.
Deleting your account
You can do this yourself, in the game, without asking us. Open settings, then the account row at the top, then delete account. It asks you once to be sure and then it is done.
If you are playing on a site that signs you in with its own account — CrazyGames, for example — the game does not show that settings row, because your account there is not one we made or can remove. Write to the address at the bottom of this page from the email on that account and we will delete everything the game holds for you. It is the same deletion; it just starts with a message instead of a button.
It takes everything attached to the account with it — your stats, the bikes you have unlocked and your places on the leaderboards. That happens as part of removing the account itself, rather than because somebody remembered to run a script afterwards. It cannot be undone and we cannot put it back for you.
The game keeps working straight afterwards. You carry on as a player without an account, the way everybody starts.
If the button is not there, you are not signed in to an account — so there is nothing on our side to delete, and clearing this game's site data in your browser removes what is held on your device. If you are signed in and cannot reach the button, write to the address at the bottom of this page and we will do it for you.
What else you can ask for
Wherever you live, you can ask us to:
- tell you what we hold about you;
- correct it;
- delete it.
Depending on where you live you may also have the right to object to how we use your information, or to complain to your national data protection authority.
We keep account data for as long as the account exists. Operational logs are short-lived. Aggregate totals, which are not about you, are kept indefinitely.
Changes
If this policy changes in a way that matters — a new advertising provider, a new kind of data — the date at the top changes with it, and the game will say so rather than relying on you to re-read this page.
The advertising companies
These are the companies that may supply an advertisement, and their own privacy policies. Which ones apply depends on where you are playing.
- Google, on lightbikes.io — how Google uses information from sites that use its services
- AppLovin, in the iOS and Android apps — AppLovin privacy policy
- CrazyGames, when you play there — CrazyGames privacy policy
- Poki, when you play there — Poki privacy policy