Privacy notice

1. Who is responsible

RaceCritic is an independent editorial project publishing reviews of free mobile games at racecritic.com. RaceCritic decides how and why personal information collected through this site is handled, and is the entity you should approach with any question about it.

Write to the desk at editor@racecritic.com. We answer privacy requests within 30 days.

2. The law we work under

This notice is written for readers in Australia. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and the supervisory authority for this site is the Office of the Australian Information Commissioner (OAIC).

3. What we collect

• Technical log data. IP address, browser user agent, referring page, requested URL, date and time of the request. Created automatically by the hosting layer whenever a page is served.
• Cookies and similar identifiers. Small files and storage keys set by this site and, if you accept them, by analytics and advertising partners. Details are listed in the cookie notice.
• Analytics data. Aggregated pages viewed, approximate region, device class and session length. Used to see which files people read.
• Advertising identifiers. Identifiers set by advertising partners for frequency capping and measurement, only where you have accepted advertising cookies.
• Dispatch form data. The e-mail address you type, the optional name, and the fact that you ticked the consent box. We do not ask for a telephone number anywhere on this site.
• Push notification identifiers. A device or browser subscription identifier created by OneSignal if you allow browser notifications, together with the tags we attach to it (site domain, the optional name and the source of the sign-up).
• Paid plan enquiries. If you reserve a place on a paid plan, we keep your e-mail address, the plan you asked for and the date of the request. Card billing is not live on this site, so no card number or bank detail is collected or stored here.

4. Why we use it, and on what basis

• Serving the site and keeping it secure — technical log data. Necessary for the ordinary functions of the site.
• Sending the dispatch and browser notifications — e-mail address, name, push identifier. Based on the consent you give when you tick the box and again when your browser asks you to allow notifications.
• Understanding readership — analytics data. Based on your acceptance of analytics cookies.
• Showing and measuring advertising — advertising identifiers. Based on your acceptance of advertising cookies.
• Opening a paid plan — plan enquiry data. Necessary to prepare and manage the subscription you asked for.

You may revoke consent at any time. Revoking it does not affect anything we did while the consent was in force.

5. How long we keep it

• Technical log data — up to 12 months, then deleted or aggregated.
• Analytics data — up to 24 months in aggregated form.
• Dispatch and push data — until you unsubscribe or ask us to erase it, and then removed within 30 days.
• Paid plan records — for the life of the subscription and for as long afterwards as Australian record-keeping rules require.
• Correspondence with the desk — up to 24 months.

6. Who else handles the data

We do not sell personal information. We share it only with service providers that help us run the site, and only for that purpose:

• Hosting and content delivery. Serves the pages and keeps the security logs.
• OneSignal. Runs the browser push service and the e-mail records attached to it. OneSignal acts on our instructions as a processor.
• Analytics provider. Produces aggregated readership statistics.
• Advertising partners. Deliver and measure the advertising shown alongside the editorial pages, where you have accepted advertising cookies.
• Payment provider. Will handle billing for paid plans once that service is activated. Until then no billing data reaches us or them through this site.

Some of these providers operate servers outside Australia. Where information is sent overseas we take reasonable steps to make sure the recipient handles it in a way consistent with the Australian Privacy Principles.

7. Cookies

The cookie banner records your choice in your browser's local storage and does not load optional cookies until you accept. Categories, purposes and lifetimes are described in the cookie notice, which also explains how to clear or block them.

8. Your rights

• Ask what personal information we hold about you and get a copy of it.
• Ask us to correct anything inaccurate or out of date.
• Ask us to erase your address from the dispatch list and to delete the related push identifier.
• Revoke consent for the dispatch, for notifications, or for optional cookies.
• Ask us to stop using your information for direct marketing.
• Complain to us first, and then to the OAIC if you are not satisfied with our answer.

Send any of these requests to editor@racecritic.com. The OAIC can be reached through its own website at oaic.gov.au or by calling its enquiries line.

9. Security

The site is served over an encrypted connection. Access to the dispatch list is limited to the people who need it, and we review that access periodically. No online service can promise perfect protection, but we take reasonable technical and organisational steps to guard the information we hold, and we will tell you and the OAIC about an eligible data breach as the Privacy Act requires.

10. Children

The site is written for a general adult audience. We do not knowingly collect personal information from children under 15. If you believe a child has signed up to the dispatch, write to the desk and we will remove the record.

11. Changes to this notice

If the way we handle information changes, we will publish the revised notice on this page and move the date at the top. Material changes affecting the dispatch will also be announced in the dispatch itself.