Privacy

What we store

• Your account: your email address and, if you sign in with Google, the name on your Google account.
• Your diary: the sessions you mark as watched or not watched, your ratings, tags and private notes, and when you logged them.
• Your settings: the year you started watching F1, spoiler, auto-logging and notification choices, and your Top 5.
• Your public profile, only if you switch it on: your username and display name.
• Notifications, only if you allow them: the address your browser gives us for sending them and your device’s time zone, so “On this day” arrives in the evening.
• Server logs: our host briefly keeps technical logs of requests (such as IP address, time and page) to keep the service running and safe.

Guests can browse without an account. We store nothing about them on our servers.

Why we use it

• To run your diary: sign you in, save your logs, hide results you haven’t watched and show your stats. This is needed to provide the service you signed up for.
• To send notifications you switched on. You can switch them off at any time in Settings or in your browser.
• To keep the service secure and working, using the short-lived server logs.

Your ratings and tags also count, without your name, towards the community average shown on race pages. Your private notes are never shown to anyone else.

Who can see it

Your diary is private by default. If you make your profile public, anyone with the link can see your username, display name and profile stats, such as races watched, ratings and favourite races. Your notes stay private either way. Season Wrapped images are made only when you share them, and you choose what they show.

Who helps us run it

These services process data for us, only to provide Trackside Diary:

• Supabase: database and sign-in. Your data is stored in Ireland (EU).
• Vercel: hosting the app.
• Resend: sending account emails and our replies.
• Cloudflare: our domain, and forwarding emails sent to hello@tracksidediary.com to our inbox.
• Google: if you choose “Continue with Google”, and Gmail, where emails you send us arrive.
• Your browser’s push service (for example Apple, Google or Mozilla): delivers notifications. Their content is encrypted.

Some of these companies are based in the USA. Transfers of personal data outside the EU are covered by the EU’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

F1 calendars and results come from public community sources. We never send them anything about you.

Cookies and storage on your device

We use only what the app needs to work: a sign-in cookie that keeps you signed in, and a few settings saved in your browser, such as the theme. There are no advertising or analytics cookies, so there is nothing to accept.

How long we keep it

We keep your data while you have an account. When you delete your account in Settings, your account, diary, notes and settings are deleted straight away. Copies may remain in our providers’ backups for a short time until they are overwritten.

Your rights

You can ask to see, correct, download or delete your data, or object to how we use it. Most of it you can change or delete yourself in the app. For anything else, write to hello@tracksidediary.com and we’ll reply within a month.

If you think we handle your data wrongly, you can complain to the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk) or to the data protection authority where you live.

Children

Trackside Diary is for people aged 16 and over.

Changes

If we change this policy, we’ll update the date at the top. If a change matters for how we use your data, we’ll let you know by email or in the app before it applies.