Privacy Policy

Last updated: 2026. Contact: massimo@eordea.it

For legal review. This page describes what the software actually does. The identity of the data controller, the legal bases, the retention periods and the supervisory authority are marked below and must be completed and reviewed by a qualified professional before launch.

Who is responsible

Data controller: [legal entity name, address, VAT/registration number]. Contact for data protection matters: massimo@eordea.it.

What we collect

Account data: email address, password (stored only as a scrypt hash, never in readable form), nickname, and the date you accepted the Terms and this policy.
Profile data: what you choose to add — country, short bio, avatar selection, favourite track and vehicle.
Race data: results submitted by the game — lap and sector times, track, vehicle, mode, finishing position, distance.
Security data: session records, linked game installations, and a truncated form of your IP address (the last part is removed) together with your browser's user agent string.
Audit records: security-relevant events such as logins, password changes and moderation actions. These never contain passwords or tokens.

What we do not collect

No scanning of your device, no file inventory, no keystroke capture and no telemetry beyond the race data listed above. We do not sell personal data and we do not use third-party advertising trackers.

Why we process it

To run your account and show your profile — necessary to provide the service you asked for.
To keep leaderboards honest and to detect abuse — our legitimate interest in a functioning competitive service.
To send you service email (confirmation, password reset, security notices) — necessary to provide the service.
To send optional news, only if you asked for it — consent, withdrawable at any time.

Legal bases to be confirmed against [applicable regulation, e.g. GDPR Art. 6(1)(b) and (f)] during legal review.

How long we keep it

Retention periods: account data for as long as the account exists; audit records for [period]; race results indefinitely, in anonymised form after account deletion. To be confirmed in legal review.

Deleting your account

You can delete your account from your account page. Your email address, password, nickname and profile text are erased. Race results stay on the boards without a name attached: removing them would rewrite standings that other players earned. This is irreversible.

Your rights

Subject to applicable law, you can request access to your data, correction, deletion, restriction, portability, and object to processing based on legitimate interest. Write to massimo@eordea.it.

Right to lodge a complaint with [supervisory authority].

Email delivery

Service email is sent through Google's Gmail API using an account operated by us. Your address is processed by Google for the purpose of delivering that message.