Privacy policy
Effective 1 October 2026
I’m Kishore Sundarajan, the developer and operator of Desi Mayhem. This policy covers the Apple app and the browser game at desimayhem.com.
Apple app
You can play solo without an online rider profile. The app keeps your settings, personal bests, progress and blocked-player list on your device.
For online features, the app creates a persistent rider credential and player ID. It sends that credential, your chosen rider name, and race records to the leaderboard service. Race records include city, mode, difficulty, score, elapsed time and distance. I use them to save your profile, rank scores and check submissions.
Multiplayer sends your rider identity, room settings, controls and race state to the multiplayer service so it can run the race and keep participants in sync. Other players can see your rider name and race results. Leaderboards also show names, scores and ranks. Choose a name you are comfortable sharing.
The app stores pending scores on your device and retries submissions when it can reach the service. When you report a player, it sends the reporter ID, target player ID and selected reason. I use reports to investigate offensive names, harassment and cheating. Blocking stays on your device; the app hides blocked leaderboard names and prevents you from sharing a room with those players.
The Apple app does not include the browser gameplay analytics described below. I have disabled Unity Analytics, Unity Ads and Unity cloud crash reporting in this app.
Browser game
The browser game uses the same online leaderboard and multiplayer services. It also sends gameplay analytics to Supabase: a generated persistent browser rider ID, ride ID, event time, city, mode, difficulty, device category, browser and operating-system category, play duration, distance, score, collisions, lives lost and the result of a ride. I use these records to understand play sessions and game problems.
When you open, complete, save or copy a result share, the browser records that action. You choose whether and where to share the result image and caption. A service you share to handles the information under its own policy.
The browser sends an online-presence heartbeat with its generated rider ID to count active visitors. The service discards entries that have not sent a heartbeat for 90 seconds when it processes the next heartbeat. It uses local storage for your rider credential, profile, preferences, personal bests and pending scores, and session storage for music preferences and queued analytics.
I use Vercel Web Analytics for website visits and Vercel Speed Insights for page performance. These services collect visit and performance information, such as page, referrer, browser, device and country information. Vercel describes its handling in its Web Analytics privacy documentation and Speed Insights privacy documentation. These browser services do not run in the native Apple app or on these static privacy and support pages.
Services and access
I use Supabase for profiles, leaderboards, gameplay analytics and reports; Cloudflare for multiplayer and browser asset delivery; and Vercel for website hosting and browser visit and performance analytics. These providers process information to deliver their services. Network requests expose technical information, including your IP address, to the services you connect to. The multiplayer service uses IP-based rate limits to prevent abuse.
I do not sell your personal information or use it for targeted advertising. I share the public rider information described above with other players. Service providers process the information needed to operate the game, and I may disclose information if law requires it or to investigate abuse and protect players.
I use encrypted HTTPS and secure WebSocket connections for online services. The game does not ask for your contacts, precise location, photos or microphone access. If you email me for support, I receive your email address, message and any attachments you choose to send. Avoid sending passwords or rider credentials.
Retention and deletion
I keep your online rider profile and scores until you delete the account or I remove them to address abuse or operate the service. I retain gameplay analytics, reports and support correspondence for game operation, troubleshooting and handling player concerns. I do not currently set a fixed automatic deletion period for those records.
In the Apple app, open Settings → Privacy & Player Safety → Delete Online Account and confirm. After the server confirms deletion, it removes your online profile, name, run records, leaderboard scores and historical profile mapping. Reports tied to the deleted profile are also removed. Your saved solo progress remains on your device.
I retain a hash of the revoked rider credential to prevent delayed requests from recreating the deleted account. This record is separate from your deleted profile. Account deletion does not remove separate historical browser gameplay analytics, because those records are not tied to your current online profile.
For browser account deletion or a request to access, correct or delete information, email madebykishore@gmail.com. Include your rider name and the platform you use. I may ask for information to verify that the profile belongs to you. Do not email your secret rider credential.
You can remove local browser data through your browser’s site-data settings. That also removes the credential the browser uses to access your rider profile; it does not delete server records. Request online deletion before clearing site data. Removing the Apple app or its local preferences does not delete your online profile either.
Younger players
I do not ask for a date of birth or target Desi Mayhem at children under 13. If you believe a child has provided personal information, contact me so I can investigate and remove it where I can identify it.
Contact and policy updates
Contact Kishore Sundarajan at madebykishore@gmail.com with privacy questions or requests. Depending on where you live, you may have rights to access, correct, delete or object to the use of your information, and to contact your local data-protection authority.
I will update this page when the game’s data practices change and revise the effective date above.