Privacy Policy
What we collect
When you create an account we store:
- Your email address — used only for authentication.
- Your display name — chosen by you, shown to other users in shared leaderboards.
- Your hashed password — we never store it in plain text.
- A session cookie — set by our authentication system to keep you signed in. It expires when you sign out or after an idle period.
We do not collect your real name, payment information, location, or any other personal data.
Legal basis (GDPR)
We process your personal data on the following legal bases under Art. 6 GDPR:
- Contract performance (Art. 6(1)(b)) — email, password, display name, and session cookie are necessary to provide the service.
- Legitimate interest (Art. 6(1)(f)) — aggregate analytics to understand how the site is used, with no personal data involved.
The companion app
The LapBattle companion app runs locally on your PC and reads iRacing telemetry while a session is active. It sends only iRacing lap and session data to our servers — nothing else. It does not read files outside of iRacing, does not access your clipboard, camera, microphone, or any other system resource.
How we use your data
Your data is used solely to operate LapBattle:
- Authenticate you when you sign in.
- Display your lap times on leaderboards you are a member of.
- Identify your entries to other members of the same leaderboard.
We do not sell, rent, or share your data with third parties.
Data retention & deletion
You can delete your account at any time from the dashboard settings page. Deleting your account permanently removes your email, display name, and all associated lap data from our systems.
Analytics
This website uses Umami, a privacy-focused analytics tool. It collects no personal data and sets no cookies. We use it only to see aggregate page view counts.
Hosting
LapBattle runs on a VPS provided by Strato AG, a German hosting provider. All data is stored on servers located in Germany and does not leave the EU. Strato acts as a data processor under a standard data processing agreement.
Your rights (GDPR)
If you are located in the EU, you have the right to:
- Access — request a copy of the data we hold about you.
- Correction — update your display name or email from the dashboard.
- Deletion — delete your account and all associated data at any time from the dashboard settings page.
- Portability — request your data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
To exercise any right not covered by the dashboard, contact us at niklas031712@gmail.com.
Contact
Questions? Email niklas031712@gmail.com.