← Back

Privacy Policy

This privacy policy explains how stats4i.racing processes personal data when you use the service. Effective date: June 5, 2026.

Controller

Matthias Hampel

c/o POSTFLEX PFX-963-020

Emsdettener Straße 10

48268 Greven

Germany

Email: support@stats4i.racing

What we process

We collect personal data from you directly, automatically when you use the service, and from third parties such as iRacing after you sign in.

  • Account data from iRacing sign-in: customer ID and a session identifier stored in authentication cookies.
  • Racing statistics fetched from iRacing on your behalf after sign-in, including ratings, recent races, activity, and related dashboard metrics.
  • Technical data in server access logs: truncated IP address (last octet removed), request timestamps, requested path, HTTP status, and response size. These logs support operating and securing the service. We do not record browser or User-Agent details in access logs.

Data stored in our databases

When you use the service, we persist the following data in our databases. It is linked to your iRacing customer ID, which we use as your account identifier.

Account and sign-in

  • Profile: iRacing customer ID and a placeholder email address derived from your customer ID (for example 123456@iracing-member.com for customer ID 123456). We do not receive your real iRacing email through sign-in.
  • OAuth connection: iRacing access and refresh tokens, token expiry times, and granted scopes - required to fetch your racing data on your behalf.
  • Sessions: session token and expiry time for active logins. We do not store IP addresses or browser user agents in our databases.
  • Account timestamps: when your account was created and last updated.
  • Driver name (optional):if you enable "Sync my iRacing driver name" in Settings, we fetch your iRacing display name from the iRacing API and store it in your account so it can be shown on your dashboard. This is disabled by default and you can turn it off at any time; disabling sync deletes the stored name.
  • Dashboard preferences: your selected category filters, stats time period, and custom race stat tile layout, stored in your account so your dashboard looks the same on future visits and across devices where you are signed in.

Racing history and dashboard statistics

After sign-in, we import your official iRacing results and store them to power the dashboard. This includes, per race you participated in:

  • Session and series identifiers, track, car, and license category
  • Finish and starting positions, laps completed, incidents, and reason for not finishing (if applicable)
  • iRating and safety rating before and after the session, license level, and championship points
  • Best lap time, distance driven, strength of field, session start time, and team-race metadata where applicable

For each session we process, we also store the iRacing customer IDs of all drivers who participated in that session. We do not store full session result payloads for other drivers. Reference data about tracks, cars, series, and license types is stored separately and does not identify you.

Onboarding process (only temporary stored data)

When your account is first created, we temporarily store import progress (how many of your historical sessions have been processed). This record is removed once the initial import is complete.

We do not store payment information. Game reference data (tracks, cars, series) is not personal data. Operational queue and error logs may contain session identifiers but are not used to build your profile.

Your choices

You stay in control of your account data.

  • Driver name sync: you can enable or disable syncing your iRacing driver name at any time in Settings.
  • Account deletion: you can permanently delete your account and all stored personal data from Settings. This removes your profile, OAuth connection, sessions, racing history, dashboard preferences, and any synced driver name.
  • Data export: contact us at support@stats4i.racing to request a copy of the personal data we store about you.

Purposes and legal bases

  • Providing the dashboard (Art. 6(1)(b) GDPR - contract / pre-contractual steps).
  • Securing accounts, preventing abuse, and maintaining the service (Art. 6(1)(f) GDPR - legitimate interests).
  • Complying with legal obligations where applicable (Art. 6(1)(c) GDPR).

Sharing with other users

Your dashboard is private to your account. We do not make your dashboard publicly accessible to other users of the service. If you enable driver name sync, your iRacing display name is shown only on your own dashboard and is not shared with other users of the service.

Recipients and third parties

Data is shared only as needed to run the service. This includes iRacing (OAuth and racing data APIs) and internal backend services that store and compute your dashboard. When you use third-party services linked through iRacing sign-in, their privacy policies apply to data you provide to them directly. We do not sell your personal data.

Hosting: the service - website, application, and databases - runs on servers operated by Hetzner Online GmbH in their datacentres in Nürnberg and Falkenstein, Germany. Hetzner acts as a processor (Auftragsverarbeiter) on our behalf; we have data processing agreements in place with our processors as required by Art. 28 GDPR.

International data transfers

The service is hosted entirely in Germany within the European Union on Hetzner infrastructure in Nürnberg and Falkenstein. iRacing is based outside the EU; when you sign in, account and racing data are exchanged with iRacing under their terms and privacy policy. If other service providers process data outside the EU or EEA, we rely on appropriate safeguards such as standard contractual clauses where required by law.

Storage and retention

Authentication session cookies expire after 7 days. If you use the service while signed in, the expiry is refreshed automatically (at most every 30 minutes). Account and dashboard data are retained while you use the service and deleted or anonymised when no longer required, unless longer retention is required by law.

Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, or loss. No online service can guarantee absolute security; please use a strong, unique password for your iRacing account. If you discover a security vulnerability or incident, please report it to security@stats4i.racing.

Your rights

Under the GDPR you may exercise the following rights by contacting us at support@stats4i.racing:

  • Access (Art. 15): obtain confirmation of whether we process your personal data and, where we do, a copy of that data.
  • Rectification (Art. 16): request correction of inaccurate personal data.
  • Erasure (Art. 17): request deletion of your personal data where applicable.
  • Restriction (Art. 18): request that we limit how we use your data in certain circumstances.
  • Data portability (Art. 20): receive your data in a structured, commonly used, machine-readable format where applicable.
  • Objection (Art. 21): where we process your personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR) - in particular to secure accounts, prevent abuse, and maintain the service - you may object to that processing on grounds relating to your particular situation. We will then stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is needed for the establishment, exercise, or defence of legal claims.

You also have the right to lodge a complaint with a supervisory authority; in Germany this is typically your local Landesbeauftragte für Datenschutz.

Children

The service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Cookies

We use strictly necessary cookies for authentication and session management. The session cookie expires after 7 days and is refreshed while you remain active (at most every 30 minutes). These cookies are required to keep you signed in and are not used for advertising or analytics.

When you change category or time period filters on the dashboard, we store your selection in your account (for example road or last 6 months) so your filters are restored on your next visit, including on other devices where you are signed in. The same applies to your custom race stat tile layout. These preferences are not used for advertising or analytics.

Changes

We may update this policy when the service changes. Material changes will be posted on this page. The current version is always available here.