Privacy Policy
Effective date: 31 May 2026
Who we are
Simracing Enduro Planner is a race planning tool for endurance simracing. This policy explains what personal data we collect, why we collect it, and how it is stored.
What data we collect
Account data (via Discord OAuth)
When you sign in we receive your Discord email address and user ID. We use these to create and identify your account. We never see or store your Discord password.
Profile data
We store a display name, timezone, and colour preference for your account. These are used to identify you inside sessions and teams and can be edited at any time.
Race and planning data
Race sessions you create — including game, track, car, driver list, stints, fuel figures, and tyre selections — are stored on our servers. This is the core data the app exists to manage.
Team data
Teams store a team name, member list with roles, and a team PIN used to join the team.
⚠ Team PINs are stored as plain text
Team PINs are currently stored in our database without any hashing or encryption. Do not reuse a PIN you use elsewhere. We intend to hash PINs in a future update.
Theme preference
Your light/dark mode choice is saved in your browser's localStorage. It never leaves your device.
Usage analytics
We collect anonymised page views and feature events (for example “session created” or “calculator used”). No personal identifiers are attached to these events. We also collect performance metrics such as page load times.
What we do not collect
- Passwords (authentication is handled entirely by Discord)
- Payment information
- Location data
- Any data beyond what is listed above
How data is stored
All application data is stored in a hosted database. Authentication sessions are managed via HTTP-only cookies. Access to team sessions is restricted to team members. Race sessions may be visible to other users if a direct link is shared.
Third-party services
| Service | Purpose |
|---|---|
| Discord | OAuth login |
Cookies
We use session cookies to keep you logged in. These are HTTP-only and expire when your session ends or you sign out. We do not use advertising cookies or tracking pixels.
Data retention and deletion
Your profile and race data persist until manually removed. There is currently no self-service account deletion. To request removal of your data, email d.arj.guy01@gmail.com and we will delete your account and all associated data within 30 days.
Your rights
You may request access to, correction of, or deletion of your personal data at any time by emailing d.arj.guy01@gmail.com. If you are in the EU/EEA you have additional rights under the GDPR, including the right to data portability and to lodge a complaint with your supervisory authority.
Changes to this policy
If we make material changes we will update the effective date at the top of this page. Continued use of the app after changes are posted constitutes acceptance of the updated policy.
Contact
Questions about this policy? d.arj.guy01@gmail.com