Privacy Policy

Podcrash Limited, registered in England and Wales, is the controller responsible for the processing described in this policy. Contact us at help@podcrash.com or at:

Accounts and sign-in

Email address, salted and hashed password, display name, optional avatar, session and account-security information. We use this to create and secure the account shared across the Podcrash website and wiki, provide sign-in, prevent abuse and grant staff access where appropriate.

Community contributions

Bug reports, comments, ideas, votes, “same” confirmations, and images you upload. We use these to operate the tracker and ideas board, respond to reports and improve our products. Public contributions appear with your display name.

Technical and security data

IP address, request and device information, security logs and cookie identifiers. We use these to deliver the service, maintain sessions, diagnose faults and protect Podcrash and its users.

Support

Your email address and anything you include when contacting us. We use it to answer and manage your request.

Optional analytics

With your consent, Google Analytics 4 receives information such as pages visited, interactions, approximate location derived from IP address, and device and browser details. We use aggregated reports to understand and improve the website.

Please do not include sensitive personal information in public submissions. Uploaded images are stored in Cloudflare R2 and account and contribution data in Cloudflare D1.

• Strictly necessary: secure session storage keeps signed-in users authenticated; local storage remembers your analytics choice; and a small cookie remembers anonymous idea votes. These are used to provide features you request or remember your privacy choice.
• Optional analytics: Google Analytics is loaded only after you accept analytics. It may then set analytics cookies to distinguish visits and measure usage.

You can accept or reject analytics without losing access to the website. To change your choice later, select Cookie settings in the footer. Withdrawing consent does not affect processing that occurred before withdrawal.

Cross Tracks uses Google AdMob for advertising and may use Google Firebase services for analytics, crash reporting and diagnostics. Where consent is required, collection for advertising, tracking or optional analytics must not begin until you make a choice. You can review or withdraw an in-game consent choice from the game’s privacy or consent settings, where available, or contact us for help.

On Apple devices, Cross Tracks must request permission through App Tracking Transparency before accessing the advertising identifier or tracking you across other companies’ apps and websites. Refusing optional consent does not prevent you from playing the game, though ads may be contextual or non-personalised.

Learn more in Google’s advertising information, Firebase privacy information, and Privacy Policy.

Cross Tracks may be enjoyed by younger players. We apply data minimisation and privacy-protective defaults appropriate to the likely audience. We do not knowingly use children’s data for personalised advertising, collect precise location through the game, or ask a child to provide more data than is needed to use a feature.

Ad requests identified as relating to a child must be tagged for child treatment so that personalised advertising, remarketing and transmission of advertising identifiers are disabled. If we learn that a child’s personal data was collected without any consent required by law, we will delete it. A parent or guardian can contact us to request access to or deletion of a child’s information.

• Contract: to provide the website, account, game, purchases and support you request.
• Legitimate interests: to secure, troubleshoot and improve our services, prevent fraud and manage community contributions, where those interests are not overridden by your rights.
• Consent: for optional website analytics, personalised advertising, tracking and other processing where consent is required. You may withdraw consent at any time.
• Legal obligation: to comply with tax, accounting, law-enforcement and data-protection requirements.

We disclose only what is necessary to:

• Cloudflare, which hosts the website, database and user uploads;
• Bunny CDN (BunnyWay d.o.o.), which delivers uploaded images such as product artwork and bug screenshots to your browser;
• Postmark, which delivers account-verification and other transactional email;
• Discord, which receives a limited notification containing the reporter name, report title, description, product and platform when a new bug report is submitted for staff review;
• Google, for consented website analytics and, in Cross Tracks, AdMob and Firebase services;
• Apple and Google, which independently operate their app stores and process purchases;
• Waypoint Studios Limited / Bedrock.gg, when you choose a Minecraft Marketplace link routed through mcmrkt.com;
• professional advisers, acquirers or public authorities when reasonably necessary and lawful.

We require processors acting for us to protect personal data, use it only on our instructions and provide protection consistent with this policy. Apple, Google and other providers may also act as independent controllers for their own services; their policies apply to that processing.

Some providers process data outside the United Kingdom. Where required, we rely on an adequacy regulation or approved contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses. Contact us for more information about the applicable safeguard.

We use access controls, password hashing, encrypted transport, service-provider security controls and monitoring designed to protect personal data. No system can guarantee absolute security.

• Account data is kept while your account is active and then deleted or anonymised after a valid deletion request, except where limited retention is required by law or for security.
• Public contributions may be retained as part of the community record but can be disassociated from your account on request.
• Support correspondence, security logs, gameplay telemetry and diagnostics are kept only for the period reasonably necessary to resolve the request, secure or improve the service, meet provider retention settings and establish or defend legal claims, then deleted or anonymised.
• Purchase and transaction records are kept for the period required for accounting, fraud prevention and legal compliance.

To request deletion of personal data connected with Cross Tracks or the website, email help@podcrash.com with “Data deletion request” in the subject. We may need to verify your identity. Cross Tracks does not create an app account, so there is no separate game account to delete.

Depending on where you live and the processing involved, you may have rights to access, correct, erase or receive your personal data, restrict its use, object to processing, and withdraw consent. You may also have a right to data portability and to complain to a regulator. These rights can be subject to legal exceptions.

Contact us to exercise a right. In the UK, you may complain to the Information Commissioner’s Office. You are not required to pay a fee in the usual case.

Our services link to sites and stores we do not control. When you follow a Bedrock.gg (mcmrkt.com) link, Waypoint Studios Limited may process click, referral, device and usage information under its privacy policy. Apple App Store and Google Play transactions and accounts are governed by those providers’ policies.

We may update this policy when our services or legal obligations change. We will post the new version here, update the date above, and provide additional notice where a change is material or consent is required.