Privacy notice

Last updated 26 September 2026

In short: you can play without an account, and then your company stays in your browser. We count visits without cookies and without personal data. If you create an account, we store your email address and one compressed copy of your company so you can continue on another device. There are no ads and we never sell data. You can delete your account at any time from inside the game.

Who runs Cargo & Consequence

Cargo & Consequence is a free educational game made by an independent developer (GitHub: opefyre). Contact for anything about your data: hello@abosh.io.

Playing as a guest

Your company is saved in your browser's local storage on your device. It is not sent to us. Clearing your browser data removes it; Settings → Export saves a copy as a file. The game sets no cookies.

Visit statistics

On playcargo.vrolen.com we count visits and a few game milestones (for example "finished the first shift" or "passed a challenge") with GoatCounter, a privacy-friendly service. It uses no cookies and stores no IP addresses or identifiers; it keeps the page, the referring site, browser and system type, screen size and an approximate country. We use this only to learn whether the game works for players. Nothing is counted if your browser sends Do Not Track or Global Privacy Control, or if you play a downloaded copy.

Accounts and cloud saves (optional)

If you create an account, these Google Firebase services store:

Firebase Authentication: your email address, a securely hashed password (or your Google account ID and name if you sign in with Google), and when the account was created and last used.
Cloud Firestore (Europe): one compressed copy of your company, with its day, seed, game mode, size and the time it was saved. It is saved automatically, and each save replaces the previous one; no older versions are kept.
reCAPTCHA Enterprise (App Check): when you open the account screen, reCAPTCHA checks that requests come from the real game and not from a script. It collects information about your browser and device and sends it to Google, under Google's Privacy Policy and Terms of Service.

Google processes this data for us as a service provider, and may process it outside the EU under its standard contractual safeguards. We use your data only to run your account and cloud save, and to keep the service safe from abuse. The legal bases are providing the service you asked for, and our legitimate interest in security.

How long we keep it, and how to delete it

We keep your account and cloud save until you delete them. In the game, open the account screen and choose Delete account: your cloud save and account are removed at once. If you cannot sign in any more, email us and we will delete them for you.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by writing to hello@abosh.io. You can also complain to your data protection authority.

Children and classrooms

Students can play without an account, which keeps everything on their device. If you are under 16, ask a parent, guardian or teacher before creating an account. Teachers can run a class without any accounts: result files and the class board stay on the teacher's computer.

Changes

If this notice changes, the date at the top changes too.