This policy explains what data Carcato: Dispatch processes to operate the game and support. It applies to carcato.com.
Data we process
- Account data: company name, email address, password hash and account settings when you create or protect an account.
- Game data: fleet, contracts, trips, balance, game events and progress needed to run the simulation.
- Product analytics: a temporary session identifier, platform, app version, interface language, screens opened, onboarding steps, game actions and technical error codes. We do not include email, IP address, advertising identifiers or free-form game content in these events.
- Support data: messages you deliberately send through the public support form or in-app feedback, plus the contact email needed to reply.
- Presence data: the IP address of your most recent request while playing, and the timestamp of that request. We keep only the latest value, not a history of visits. An approximate country and city are derived from that IP on the fly using an offline database; the location itself is not stored, and no third party ever receives your IP for this purpose. Used to show operational status and to help detect abuse.
Who operates Carcato: Dispatch
Carcato: Dispatch is operated by the team behind this game. This policy covers the data we process directly.
Why we use it
We use the data to authenticate you, save game progress, prevent fraud, provide support, understand where players encounter difficulty, improve onboarding and meet legal obligations. We do not sell personal data or use it for behavioural advertising.
When data is shared
Carcato: Dispatch discloses data only to hosting and infrastructure providers that operate the service on our behalf, when required by law, or when necessary to investigate abuse. We do not sell or rent player data.
Retention and deletion
We keep account and game data while the account exists. Product analytics events are deleted after 180 days and are also removed when an associated account is deleted. You can export your data or permanently delete the account from Company → Account. Deletion removes the associated game and payment records, except where retention is required by law. Presence data is overwritten on every request and is never kept as history.
Your choices
You may review, update, export or delete your account in the game. For a privacy request that cannot be completed there, use the public support page and state that it is a privacy request.
Security
Passwords are stored as hashes. Access to payment and support data is limited to the operator. No method of transmission or storage is completely secure.
Changes
We may update this policy when the service changes. The current version and its date are published on this page.