What we collect, and what we never collect.

What we collect

• Account Your email address and name, provided when you sign in with Google or email. Your country (two-letter code, derived from your network) and browser language, used to know which markets we serve and to write to you in the right language.
• Product usage How many minutes the plugin ran, which simulator you used, the plugin version, which tabs of the pit wall you opened, and how many analyses you requested. These are counters, aggregated per day. We use them to know which features are worth improving.
• How you found us The domain of the site that referred you (for example a search engine or a forum), any campaign parameters in the link, and the first page you landed on. Recorded once, at your first visit.
• Telemetry you choose to send If you upload a session, we store your lap data (speed, braking, tyres, suspension, setup) so the engineers can analyse it and so you can review it later. This stays in your account. It is never sold, never shared with other users, and never published.
• Subscription If you subscribe, we keep the subscription status and dates. Payment is handled entirely by Lemon Squeezy: we never see or store your card details.

What we never collect

The AI analysis

When you ask the engineers for an analysis, the telemetry figures of the laps concerned are sent to an AI provider (NVIDIA, DeepSeek or Anthropic depending on availability) to produce the answer. What is sent is driving data: speeds, angles, temperatures, setup values. Your name, email and account identifier are never included. If you would rather no data leave your machine, simply do not use the analysis feature: the rest of the pit wall works without it.

Why we're allowed to

• To provide the service Account, subscription and telemetry storage: without them the product cannot work.
• Legitimate interest Usage counters and acquisition data, so a one-person company can tell what to build next. They are minimal and aggregated.
• Consent Marketing emails, if we ever send any. You opt in, and every message carries an unsubscribe link. Service emails (your access token, an incident) are sent regardless, because they are part of the product.

Who processes it

We use a small number of established providers, each for one purpose:

• Cloudflare Hosting, database and file storage (Europe).
• Clerk Sign-in and account management.
• Lemon Squeezy Payments and subscriptions, acting as merchant of record.
• MailerSend Sending service emails.
• NVIDIA, DeepSeek, Anthropic AI analysis of the telemetry you submit.

How long

• Account data For as long as your account exists. Delete the account and it goes.
• Usage counters 12 months, then deleted.
• Telemetry sessions Until you delete them, or until your account is closed.
• Billing records Kept as long as accounting law requires.

Your rights

Under the GDPR you can ask for a copy of your data, correct it, have it deleted, take it elsewhere, or object to a particular use. Write to hello@simrace.app and we will answer within a month, usually within a few days. You can also complain to the CNIL, the French data protection authority.

Deleting your account removes your identity, your usage counters and your telemetry. Anonymous aggregates that cannot be traced back to you may remain.