Rent a Car Empire Privacy Policy
tucel.dev — Rentacargame
Privacy Policy
Last Updated: November 10, 2026
tucel.dev ("we", "us", or "our") operates the Rent a Car Empire mobile application (the "App"). This page is intended to inform you of our policies regarding the collection, use, and disclosure of personal data when you use our App and the choices you have associated with that data.
By using the App, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect only the information needed to run the game:
- Guest Account: When you tap Play for the first time, a guest account is created for you automatically. It consists of a randomly generated user ID and your language, and contains no information that personally identifies you. A guest account that is never linked to an email address is deleted automatically 90 days after you last used the App.
- Account Information (Optional): You may add an email address to keep your progress safe and use it on other devices. There is no password: to link the address and to sign in, we send a 6-digit code to it. We store your email address with your account; the codes are never stored, only irreversible hashes of them, for at most 10 minutes and 5 attempts. We do not send marketing emails.
- In-Game Data: Your progress (such as cash, level, cars, branches, staff, upgrades, story progress, collections, and in-game statistics) is stored on your device, and a copy is saved to our servers so it is not lost and can be synced across your devices. With it we store a short summary (in-game day, level, and cash) to compare the copies, the time of the last sync, and your language. Your settings (language, sound, music, vibration, graphics) are stored on your device; only your language is also saved with your account.
- Purchase Records: For each in-app purchase we store the platform (Google Play or App Store), the product ID, the store's order or transaction ID, the number of days of a timed pass, when it was bought, whether it was a test purchase, and when it was refunded, if it was.
- Session Data: Sign-in tokens are stored only as irreversible hashes. Up to 5 devices can be signed in to one account at the same time.
- Technical Data: Your IP address is used only temporarily, to prevent abuse and excessive requests; it is kept only for the short time window of that limit and is not written to our database or logs. We keep daily totals of server activity (such as the number of sign-ins) that contain no data about individual players. We do not use any analytics service of our own. Third-party advertising and measurement services may collect device data as described in Sections 4 and 5.
The App does not access your precise location, contacts, photos, camera, or microphone.
2. Use of Information
The collected data is used for the following purposes:
- To provide the game, save your progress, and sync it across your devices.
- To manage sign-in for users who add an email address.
- To verify in-app purchases (cash packs, timed XP boosts, and ad-free periods), deliver and restore them, and process refunds.
- To show ads and grant the rewards of rewarded ads.
- To measure the effectiveness of our advertising campaigns.
- To keep the service secure and prevent abuse and fraud.
- To provide customer support.
3. In-App Purchases
Our App offers optional In-App Purchases: in-game cash packs, a timed XP boost (+50% XP for 30 or 90 days), and ad-free periods (30 or 90 days) that turn off interstitial ads.
- Purchases are entirely processed through the application stores (Google Play Store or Apple App Store) tied to your device's operating system.
- We do not collect, process, or store your credit card or financial payment information. This data is handled directly by the respective app store in accordance with their own privacy policies.
- To deliver your purchase, our server verifies it with Google or Apple and keeps the purchase record described in Section 1.
- The remaining time of an XP boost or ad-free period is kept with your account, so signing in with your email address on another device brings it back. On iOS, "Restore Purchases" in the in-app Store also brings it back, including after reinstalling the App. Cash packs are added to your in-game cash when bought and cannot be restored.
4. Ads (Google AdMob)
To support the App and provide it for free, we show ads: rewarded ads that you choose to watch (for example, to double a day's earnings or your cash register, to finish a repair at once, or to call back a customer who left), and interstitial ads at the end of a business day, from level 8 on and no more than once every 3 minutes. Interstitial ads are not shown during an ad-free period.
- Google AdMob: AdMob may collect your device's Advertising ID (Android Advertising ID or Apple IDFA), IP address, device model, operating system, language, approximate location derived from your IP address, ad interaction data, and diagnostic data, in order to serve, measure, and personalize ads and to prevent fraud.
- Consent: Where required by law (for example, in the EEA, the UK, and Switzerland), we ask for your consent through Google's consent form when you first open the App. To change your choice later, contact us at mobil@tucel.dev. Reinstalling the App also shows the consent form again (link an email address first so your progress is kept).
- iOS: After Google's consent form (where it is shown), the App asks for your permission through Apple's App Tracking Transparency prompt. Your IDFA is accessed only if you allow tracking. If you choose "Ask App Not to Track", the App still shows ads, without the IDFA.
- To learn more about how Google collects and uses your data, you can visit How Google uses information from sites or apps that use its services and the Google Privacy & Terms page.
- You can opt out of personalized advertising or reset your advertising ID through your device's settings (Android or iOS).
5. Advertising Measurement (Meta)
We use the Facebook SDK by Meta Platforms to measure how well our advertising campaigns work. The SDK sends Meta the fact that the App was installed and opened, device information (model, operating system, language), and, if you have allowed it, your advertising ID. It also sends a few in-game events: reaching a new level, finishing the tutorial, and in-app purchases (product ID, price, and currency). Where the GDPR applies, the SDK starts only if you gave consent in Google's consent form to storing and accessing information on your device. On iOS the SDK starts only after you have answered Apple's App Tracking Transparency prompt. The App has no Facebook login and does not access your Facebook account. To learn more, see the Meta Privacy Policy.
6. Sharing of Information
We do not sell your personal data for money. We share data only as needed to run the App, with:
- Google: Google Play payments and purchase verification, AdMob ads.
- Apple: App Store payments and purchase verification.
- Meta Platforms: advertising measurement.
- Our email delivery provider: only to deliver sign-in codes to your email address.
- Our hosting and network providers: only to run and protect our servers.
- Authorities: only when required by law.
We and our service providers may process your data in countries other than your own (such as the European Union, the United States, or Turkey). Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
If you live in California or another U.S. state with similar privacy laws, personalized advertising and ad measurement through AdMob and Meta may be considered "sharing" of personal information under those laws. You can opt out using the advertising settings described in Section 4 or by contacting us.
7. Data Retention
- Accounts with an email address are kept until you delete them in the App (Settings › Account › Delete account).
- Guest accounts are kept until you delete them, or are deleted automatically 90 days after you last used the App if they were never linked to an email address.
- Codes are kept for at most 10 minutes. Sessions expire 60 days after their last use, or immediately when you sign out.
- When an account with an email address is deleted, we keep only an irreversible hash of that address (never the address itself) for 365 days, so that signing in with it again tells you the account was deleted.
- Data collected by Google and Meta is retained according to their own privacy policies.
8. Data Security
The security of your data is important to us. All communication between the App and our servers is encrypted (HTTPS/TLS), sign-in tokens and codes are stored only as irreversible hashes, sign-in attempts are rate-limited, and access to our database is restricted. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure, and we cannot guarantee its absolute security.
9. Children's Privacy
While our App appeals to a general audience, we do not knowingly collect personally identifiable information from children under the age of 13 (or the applicable legal age in your country). If you are a parent or guardian and you are aware that your child has provided us with personal information (such as an email address), please contact us. We will take immediate steps to remove that information from our servers.
10. Data Deletion and Your Rights
- You can delete your account at any time in the App under Settings › Account › Delete account. This works for guest accounts and for accounts with an email address alike. Your account, email address (if any), cloud save, purchase records, and all sessions are permanently deleted from our servers, together with the progress stored on that device. The remaining time of any XP boost or ad-free period is lost.
- If you have added an email address and cannot access the App, email us at mobil@tucel.dev from that address, and we will delete your account within 30 days.
- A guest account contains nothing that lets us identify you outside the App, so please delete it from within the App. Uninstalling the App or clearing the App's data deletes only the progress stored on your device; the guest account on our servers is then deleted automatically 90 days after you last used the App.
Depending on where you live (for example, under the GDPR in the EEA and the UK, or under U.S. state privacy laws), you may also have the right to access, correct, or receive a copy of your data, to object to or restrict its processing, to withdraw your consent, and to lodge a complaint with your local data protection authority. To exercise these rights, contact us at mobil@tucel.dev. We will respond within 30 days.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We may also provide a prominent notice within the App for significant changes.
12. Contact Us
If you have any questions or requests regarding this Privacy Policy, please contact us:
- Email: mobil@tucel.dev
- Website: tucel.dev