LEGAL · DON’T JAYWALK

Privacy notice

What Don’t Jaywalk collects, why, who sees it and how long we keep it.

Last updated: October 10, 2026

Who is responsible

Don’t Jaywalk (the game at dontjaywalk.com and its billboard shop) is run by a sole proprietor based in France, the “operator”, “we” or “us” in this notice. The operator decides how this data is used (the “controller”). Contact: contact@dontjaywalk.com.

When you play

• On your device. The game keeps in your browser’s localStorage your best score, your team, your game progress (such as streets given today and team changes this week), a random device code for the race, and the current list of billboards. This stays on your device until you clear your browser data. It is needed for the game to work, and it is not used for advertising.
• Your IP address. Like any website, our servers receive your IP address with each request. Our hosting provider tells us the country and region it comes from, so the game can pick your team. We do not keep your address itself.
• The race. At the end of a run, the game sends the streets crossed, the flight bonus, the run’s duration, your team and the random device code. We keep each team’s weekly total and how far runs go, with no identifier. The device code’s record (today’s streets, this week’s team and team changes) is deleted 30 days after that device last plays. For the live activity on the home screen and the Game Over card (“🇺🇸 TEXAS +12 · BONK! 🚕 · 1 MIN AGO”), we keep each counted run’s team (country and region), its streets, how it ended in the game (the vehicle, the train, the river or the tow truck) and its time for 24 hours, with no device code or other identifier. To apply the daily limit per network, we keep a coded form of your network address, made with a server secret so that the address cannot be read back from it; it is deleted after 3 days.
• Your pictures. The game makes your share picture on your device. We never receive it; you decide where to share it.

Our statistics: no cookies, no ad trackers

• We count page views, games, game overs and how each run ends (a car, a train, the river or the tow truck), shares, leaderboard views, team changes, shop visits and each step of the shop reached (website, design, spot, months, email, payment page, payment errors, paid), billboard views and clicks, and page errors (without any detail about the error).
• To count each visitor once a day, our server makes a daily HMAC code from your IP address and your browser’s user-agent, with a secret key; the code changes every day. These codes are pseudonymous, not anonymous. We store them with your country and region, never with your IP address or user-agent.
• Daily records are deleted after 31 days. Before that, we add them to totals by month, which we keep. The totals contain no identifier.
• Tagged links. If you arrive through a link such as dontjaywalk.com/?utm_source=tiktok, your browser tab keeps the tag (“tiktok”) in sessionStorage for that visit, and we count visits, games, each step of the shop and billboard purchases per tag. A billboard bought after such a visit keeps the tag with the order.
• If your browser sends Do Not Track or Global Privacy Control, these statistics and link tags are switched off.
• We use no advertising trackers, no pixels from social networks and no outside analytics service.

When you buy a billboard

• What we collect. Your business email, your firm’s website, the ad you design (firm name, texts, phone number, colors and logo), the billboard and months you choose, and the payment records Stripe sends us (amount, date, payment reference and receipt link). The shop keeps an unfinished order in your browser’s sessionStorage until you close the tab, with the currency you chose; its demo mode, shown when payments are unavailable, keeps a simulated order in localStorage. To show prices in your currency, the shop uses the country our hosting provider gives for your IP address; it is not stored.
• The draft of your billboard. When you enter your website, our server reads its public pages to draft your billboard. Nothing about you is stored at that step; our hosting network may keep the draft (public information from your website) for up to a week to answer faster.
• An order you do not finish. When you move on with Next, the shop tells our server the step you reached and how long after you opened the shop, with what you just submitted: your website (step 1), the billboard and the months you picked, then your email (step 5). Nothing is sent while you type. We keep this for 30 days after your last step, with a coded form of your network address that limits how many orders one network can start in a day, to see where the shop can be improved and to follow up on your order. If you reached the payment page and did not pay, we send you one reminder email, with a link that reopens your order for 7 days and an unsubscribe link; after you unsubscribe, we send you no more reminders.
• Your payment. You enter your card in Stripe’s secure fields. Your card number goes to Stripe, never to our servers. Stripe processes the payment through the operator’s Stripe merchant account, named Burden Hunt, and may use cookies in its own payment fields for security and fraud prevention, under Stripe’s privacy policy.
• Your private page. After payment, your browser keeps a private key to your page, and our emails contain single-use links that open it. We store only a coded form of these keys and links. “Log out” makes your browser forget the key. Deleting your private link or bookmark does not delete your data from our servers: email us for that.
• Our emails. We send the purchase confirmation with your receipt, a notice before your billboard ends and when it has ended, a refund confirmation if you get one, a monthly report of your billboard’s views (reply “stop” to stop it), the access links you ask for, and one reminder if you leave a checkout unfinished (with an unsubscribe link). Our email provider sends them.
• Why. To deliver what you bought (our contract with you), to keep the accounting records the law requires, and to prevent fraud and abuse, improve the shop and follow up on an order you started (our legitimate interest).

How long we keep data

• Game data on your device: until you clear your browser data. Shop data in sessionStorage: until you close the tab.
• Race: a device’s record, 30 days after it last plays; coded network addresses, 3 days; team totals and run lengths, kept (no identifier).
• Statistics: daily records, 31 days; monthly totals and totals per link tag, kept (no identifier).
• Billboard orders, firm details, ads and payment records: while the billboard runs, then as long as accounting and tax rules require (up to 10 years for accounting records under French law), or longer if needed for a dispute.
• Emails: our copy of a sent email’s content and recipient address is erased 30 days after sending; single-use links are deleted 7 days after they expire.
• A checkout that is not completed: the coded network address used to limit spots on hold is erased after the checkout ends; the order details stay with the other order records.
• An order you do not finish (the steps, what you submitted, the coded network address): 30 days after your last step. A reminder’s link: 7 days, then deleted a week later. The unsubscribe list keeps a coded form of your address (made with a server secret, it cannot be read back), not the address.
• Messages you send us: as long as needed to answer and to keep a record of the request.

Who else handles data

• Our providers, who process data for us under their terms: Vercel (hosting, United States), Supabase (database, United States), Stripe (payments) and Resend (email). Their technical logs can include IP addresses and are kept for limited periods under their own policies.
• Advertisers never receive players’ data. Firms see only their own billboard’s view counts.
• Authorities, when the law requires it, and anyone needed to protect our rights or the safety of the service.
• A new owner. If Don’t Jaywalk is sold, merged or transferred, the data goes with it, and the new owner must keep handling it as this notice describes until it tells you otherwise.
• We do not sell personal information and we do not share it for cross-context behavioral advertising, as California law defines these terms.

Data outside Europe

Our hosting, our database and our providers process data in the United States. For people in the European Union, the United Kingdom and Switzerland, these transfers rely on our providers’ data-protection terms, which include the European Commission’s standard contractual clauses or the EU–U.S. Data Privacy Framework where a provider is certified.

Children

Anyone can play, and the game asks no one for a name or contact details. The shop is only for adults buying for a law firm. We do not knowingly collect personal information from children under 13. If you believe a child sent us personal information, email us to have it deleted.

Your rights

Depending on where you live (for example under the EU or UK GDPR, or the laws of California and other U.S. states), you can ask to access, correct or delete your data, to receive a copy of it, to restrict or object to some uses, and to withdraw a consent you gave. Email contact@dontjaywalk.com; we may need to check that the request comes from you, and you can appoint someone to ask for you. Players have no account, so we can usually not link game data to a person. You will not be treated differently for using your rights. You can also complain to the CNIL in France (cnil.fr) or to the data-protection authority where you live.

Security

We protect data with measures such as encrypted connections, coded access keys and network codes, a database that only the site’s own login and its administrator can read, and payment notifications that must carry Stripe’s signature. No system is perfectly secure; if you notice a problem, tell us.

Changes to this notice

We update this page when our practices change. The date at the top shows the version in force.

Contact

Questions and requests about your data: contact@dontjaywalk.com. Advertising purchases are covered by the advertiser terms, and playing by the game terms.