Effective October 19, 2026
Who handles your information
Moises Alejandro Bautista, trading as Gitto 420, operates Gitto 420 and its website skin store. For privacy questions or requests, email support@gitto420.com or use Gitto 420 Support.
Game account and online play
The online game uses your racer username, email and account identifiers to create, verify and recover your account. It stores a password-verification record rather than your plaintext password, along with authentication and security records.
The service saves your garage, cars, progression, race results and related transaction history. Online features handle the profile information, chat, messages, invitations and marketplace activity you submit. Other racers can see information you share through the relevant game feature; direct messages are delivered to their intended recipient.
Skin checkout, payments and refunds
Signing into the skin store sends your game username and password over a secure connection for verification by the game account service. The website uses a separate sign-in session to identify your account and check the compatible car and skin ownership.
Checkout associates the purchase with your account ID, order ID, chosen skin/car and refund-policy version. You enter payment information on Stripe's hosted page. Our checkout integration does not collect or store your full card number or card security code.
Stripe supplies payment status and transaction references so we can deliver skins, prevent duplicates, reconcile purchases and handle refunds or disputes. Purchase/refund records include the account and payment references, amount, currency, status and event times. Stripe may collect contact and billing details on its page; see Stripe's Privacy Policy.
Support requests
When you email support or use the website form, we receive the information you provide, such as email, racer username, subject, message and attachments. We keep ticket/reply history, support status and related customer references or notes to address the request.
Do not send passwords, full card numbers, bank information or unrelated sensitive documents.
Sign-in cookies and security
The skin store uses a secure, encrypted cookie for its separate website session. Page scripts cannot read it, and it expires after up to one hour. Signing out revokes that website session. The cookie is separate from persistent purchase/refund records.
Hosting, payment and security providers process connection information, such as IP address and browser/request details, to serve the site and protect it from abuse. The store uses IP information for rate limiting; the support form uses Cloudflare Turnstile for its security check.
The game can save local settings and game-related files on your device. Payment/security providers may use cookies or similar technology under their own notices. Blocking required cookies can prevent sign-in or checkout from working.
Service providers and uses
We use information to operate accounts and online play, deliver purchases, communicate about verification/support, process refunds, protect accounts, maintain transaction records and respond to applicable legal obligations.
Cloudflare provides website/security and support storage, DigitalOcean hosts the online game authority, Stripe processes payments, and Resend handles support email. Account verification and recovery messages use the configured transactional email service. Pages using Google Fonts cause your browser to contact Google. These providers can process relevant information where they operate, including outside your home country.
Relevant records may be disclosed when required by applicable law or to investigate fraud, resolve a payment dispute or protect accounts and the service. Avoid posting information in social game features that you want to keep private.
Retention and requests
Account/game history, purchase/refund references and support records are kept to operate the service, reconcile transactions, resolve issues and meet applicable recordkeeping needs. Signing out or allowing a sign-in cookie to expire does not erase those separate records. Some transaction/security records and backup copies can remain after an account-closure request.
Contact support@gitto420.com to request access, correction or deletion, or to ask about your account/purchase information. We may need to verify that the request relates to your account. Requests are handled subject to applicable law and any transaction/security records that must be retained.