Cargo Truck

Legal information

Privacy Policy

This Privacy Policy explains how PT. OPEN SOFT ASIA handles information when you use the Cargo Truck mobile game, website and related online services.

Last updated:

1. Who is responsible

PT. OPEN SOFT ASIA is the developer and data controller for Cargo Truck. This Policy applies to the game, cargotruck.opensoft.asia and the Cargo Truck API.

2. Information we collect

We process your account identifier and email address when you sign in by email, or the provider subject returned by Apple or Google when you choose their sign-in. We store your player ID, display name, language, settings, garage, vehicles, tuning, virtual balances, missions, run results and leaderboard records. For purchases, we process the store, product, transaction identifiers, signed purchase proof, amount and status; Apple or Google handles your payment credentials and we do not receive full card details. With usage-data collection enabled, Google Firebase Analytics receives gameplay activity, app version, language, approximate country derived by Google, device or other identifiers and non-personal game settings, while Google Firebase Crashlytics receives crash, ANR, device, app and diagnostic information. We send the opaque player ID but never send email, display name, purchase proof or payment credentials to Firebase.

3. How information is collected

Information comes from you, from gameplay and service requests, and from Apple, Google and the app stores when you use their sign-in or purchase services. Gyroscope readings used for steering are processed on your device and are not uploaded as account data. Cargo Truck does not request contacts, photos, precise location, microphone or camera access for its core gameplay.

4. Why we use information

We use information to create and authenticate accounts, keep progress available across sessions, operate gameplay and leaderboards, verify and credit purchases, send requested login codes, provide support, prevent fraud and abuse, diagnose failures, secure the service and comply with law. Processing is necessary to provide the service, meet legal obligations and protect legitimate security interests; where consent is legally required, we ask for it.

5. Service providers and disclosure

We disclose only what is needed to infrastructure and hosting providers, Brevo for requested login-code email, Apple and Google for sign-in, Apple App Store or Google Play for purchases and recovery, and Google Firebase Analytics and Firebase Crashlytics for usage analytics, diagnostics, crash reporting and service reliability. These providers process data under their own terms and privacy notices and must provide appropriate protection. We may disclose data when lawfully required or in a business reorganization with appropriate notice. We do not sell personal data, use it for targeted advertising, collect the Android Advertising ID for these services or share data with advertising networks.

6. Security and international processing

We use encrypted network transport, short-lived access credentials, protected refresh credentials, access controls, integrity checks and restricted production systems. No system is completely secure. Data may be processed in countries other than yours where our providers operate; we use legally appropriate safeguards for such transfers.

7. Retention

Account and gameplay data is normally kept while your account remains active. Access credentials expire after a short period and refresh credentials normally expire after 30 days. Operational logs rotate by size and are kept only as needed for reliability and security. After a valid deletion request, we delete or irreversibly anonymize associated data within 30 days unless a longer period is required for payment reconciliation, tax, accounting, security, fraud prevention, dispute resolution or another legal obligation. Retained records are limited to those purposes and then deleted or anonymized.

8. Your choices and rights

Depending on your location, you may ask to access, correct, export, restrict, object to or delete your personal data, and may withdraw consent where consent is the basis. You can turn off Share usage data in the game Settings; the choice is stored with your account and disables further Firebase Analytics and Crashlytics collection on supported builds. You can change supported profile details in the game. To delete the account and associated data, use the Delete account link on this site. We may verify account ownership before acting and you may complain to your local data-protection authority.

9. Children and changes

Cargo Truck is not directed to children under 13. If local law requires a higher minimum age, a parent or guardian must authorize use. If we learn that a child provided personal data without required permission, we will delete it. We may update this Policy as the service or law changes; the current version and effective date will remain posted here. Material changes will be communicated where required.