Privacy Policy
Last updated: March 24, 2026
1. Information We Collect
Account Information
When you create an account, we collect your display name, email address, and password (stored as a salted hash). If you sign in via a third-party provider (iRacing, Discord), we receive your profile information from that provider.
Usage Data
We collect anonymized usage data including pages visited, features used, and performance metrics to improve the Platform. This data is not linked to your identity.
League & Racing Data
League configurations, race results, protests, standings, and other league-related data you create or import are stored to provide the service.
2. How We Use Your Information
- To provide, maintain, and improve the Platform
- To authenticate your identity and secure your account
- To send transactional emails (account verification, password resets, notifications you opt into)
- To display public league information (standings, results, driver profiles)
- To detect and prevent abuse, fraud, and security incidents
3. Information Sharing
We do not sell your personal information. We may share information with:
- League members: Your display name, driver profile, and racing statistics are visible to members of leagues you join.
- Service providers: We use third-party services for hosting, email delivery, payment processing, and error tracking. These providers only access data necessary to perform their services.
- Legal requirements: We may disclose information if required by law or to protect the rights, safety, or property of Racey or its users.
4. Data Storage & Security
Your data is stored in encrypted databases. Passwords are hashed using bcrypt. Sessions use signed, httpOnly cookies. We implement industry-standard security measures, but no system is 100% secure.
5. Cookies
We use cookies for:
- Authentication: Session cookies to keep you signed in
- Preferences: Remembering your settings (theme, onboarding state)
We do not use advertising or third-party tracking cookies.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate information
- Delete your account and associated data
- Export your data in a portable format
- Opt out of non-essential communications
To exercise these rights, visit your account settings or contact us.
7. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized, aggregated data (e.g., league statistics) may be retained indefinitely.
8. Children
Racey is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email or a notice on the Platform.
10. Contact
Questions about this Privacy Policy? Contact us at privacy@racey.app.