Privacy

Coins can be bought, but never cashed out. They cannot be sold, transferred to another player, or withdrawn, and nothing you win has any cash value. Buying is entirely optional: every account starts with a free grant, and coins are also earned by winning races and by building tracks other people like.

That one-way rule is the whole design, not a limitation waiting to be lifted.

We never see your card. Payments are taken by our payment provider, who is the seller of record: they handle the card details, the receipt and any sales tax or VAT, and all we receive back is confirmation that a named pack was paid for. No card number, expiry or security code ever reaches MarbleRun, because there is nowhere here for one to go.

A single session token, so you are not signed out on every page load. On the web it is kept in your browser's local storage. Clearing your browser data signs you out. The language you use MarbleRun in is kept there too, so the next visit opens in it.

If you predict on today's race while signed out, the marbles you picked are kept in the same place, so the result can tell you how you did, and are never sent to us. Clearing your browser data forgets them. A few days' worth is kept at most.

The game sets no tracking or analytics cookies of its own, and there is no analytics service.

Daily totals. The game counts how many times a handful of things happened each day: the page was opened, a race was opened, a race page failed to work, a race was started, another race was started straight after, a link was shared, an account was created, someone signed in. It records the date, the name of the thing, a running total, the language the app was showing and, if you arrived through a labeled link (such as one in a post or an ad), that link's label, and nothing else: no account, no address, no device, no identifier of any kind. The label is kept in your browser tab until you close it, so a race later in the same visit is counted against the same link. Two people are indistinguishable from one person who did the same thing twice, which is why there is nothing here to show you or to delete on request.

Error reports. When a race page breaks, the app sends a short report so we can fix it: what kind of failure it was, the error message with any addresses, ids and long numbers taken out, where in our code it happened, the kind of browser (for example "TikTok on Android", never its version or your device model), whether the browser can draw 3D, and the label of the link you came from. Like the daily totals, these are kept only as counts per day, with no account, address or identifier, so they cannot be traced back to you.

The same is true of the split shown on today's race: the percentage of playerspicking each marble. It is a count per marble and nothing more, so a prediction made while signed out leaves no record of who made it.

The microphone is used only while you are in voice, and only after you choose to join. Voice always travels through MarbleRun's relay, so other players never see your internet address. While you are in voice, each player's device keeps what the others say, in memory, so abuse can be reported; it is deleted when you leave the room. If you report a player, only that player's voice from that room is sent to us, with the room and the time. A moderator listens to it, every listen is logged, and it is deleted 30 days after a decision. If you are reported, you can ask us what was sent.

When you write to us with the chat button, we keep your messages and our replies, with the time of each and, if you wrote from a race room, which room. Only MarbleRun moderators and admins can read them. A conversation is deleted 12 months after its last message.

Some screens show a banner supplied by Google AdSense. Google may set cookies or read a device advertising identifier to choose and measure those ads, which is processing Google performs as its own controller, not something MarbleRun receives or stores. No account data, wallet balance, bet or email is ever shared with Google.

You can control ad personalization for your Google account, and opt out of personalized ads entirely, from Google's own settings:

If you are in the EU, the UK or Switzerland, you are asked for consent before anypersonalized ad is shown, and you can change that choice at any time.

Nothing is sold, and nothing is shared with anyone else. There is no advertising network beyond Google and no data broker.

Account data is kept while the account exists. You can delete a track you built at any time from My tracks; it leaves the catalog immediately, and its layout is retained only so races already finished on it stay verifiable.

To delete your account, write to privacy@marblerun.selenize.com from the address you signed up with. Your account and email address are removed. Records of races other people took part in are kept, with nothing linking them to your email, because deleting one side of a settled bet would break the record that proves the other side was paid correctly.

Purchase records are the exception, and we cannot delete them on request: a record of money received has to be kept for accounting and tax purposes for several years. It is reduced to the payment itself (what was bought, when, and for how much), with your email address removed along with the rest of the account.

If you are in the EU, the UK or Switzerland you can ask for a copy of your data, ask for it to be corrected or deleted, or object to how it is used. Write to privacy@marblerun.selenize.com and you will get an answer within 30 days.

MarbleRun simulates betting, and is not intended for children. Do not create an account if you are under 18.

If this policy changes in a way that affects what is collected or who sees it, the change will be described here before it takes effect.