Privacy policy

SportLogic ("we", "us") provides the Virtual Racing Data API, and we decide how the personal data described here is handled.

This policy covers sportlogic.io, the dashboard and the API. It does not cover a site you reach by clicking a link to somewhere else.

Contact us about anything on this page at hello@sportlogic.io.

Account data

When you sign up we receive your name, your email address and, if you sign in with Google, the basic profile information Google returns. We do not receive your Google password.

Contact form

What you type into the contact form: your name, your email address, the subject you pick and your message. It is emailed to us so we can reply.

Registration form

What you type when you register a shop or apply as an agent, and basic technical information about the device you sent it from. We use it to check that an application is genuine.

API request data

When you call the API with your key we record the request: the key used, the endpoint, the time, and the IP address it came from. We need this to count your requests against your daily quota, to apply rate limits, to bill correctly and to investigate abuse.

Website usage

When you visit the website we may collect your IP address, browser type, operating system, the page that sent you and how you moved through the site.

Payment data

Paid plans are billed through a third-party payment provider. They handle your card details. We do not see or store your full card number. We keep the record of what you were charged and when.

We do not ask for and do not want special category data: health, religion, political views, biometrics. Do not send it to us.

• To create and run your account and issue your API key.
• To provide the API and enforce quotas and rate limits.
• To take payment and keep financial records.
• To answer your questions and provide support.
• To keep the service secure and to investigate abuse or a breach of our terms.
• To understand which pages are useful, so we can improve them.
• To meet a legal or tax obligation.

We rely on the contract with you for the first four, on our legitimate interest in running a secure service for the next two, and on the law for the last. Where consent is required for analytics cookies, we rely on your consent.

We do not sell your personal data. We do not share it for advertising.

The site uses cookies that are needed to make it work, such as keeping you signed in.

We also use Google Analytics to count visits and see which pages are read. It sets its own cookies and sends your IP address and page views to Google. If you do not want this, most browsers let you block cookies, and Google publishes an opt-out add-on.

We keep the list of companies that process data for us short, and each one only gets what it needs:

Hetzner

Hosts the website and its logs.

Cloudflare

Answers DNS for the domain. It does not carry the traffic.

Resend

Delivers the email from the contact form and account email.

Google Analytics

Website usage statistics.

Our payment provider

Takes payment for paid plans.

We may also disclose data if the law requires it, to protect our rights or someone's safety, or to a company that buys our business, in which case this policy continues to apply.

Our providers store and process data in more than one country. Using the service means your data may be handled outside the country you are in, where privacy law may differ from your own.

Account data

While your account is open, and for 12 months after you close it.

API request records

12 months, then deleted or aggregated so they no longer identify you.

Contact form email

24 months.

Registration records

6 months for the technical record. Your application is kept for as long as we are working with you.

Billing records

7 years, because tax law requires it.

Website analytics

As set in Google Analytics, currently 14 months.

Traffic to the website, the dashboard and the API is encrypted in transit. Access to the systems that hold your data is limited to the people who need it. API keys can be rotated at any time from the dashboard, and you should rotate one the moment you think it has leaked.

No service can promise perfect security. If a breach affects your personal data we will tell you and any regulator we must tell, without undue delay.

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, or stop using it in a particular way. You can also ask us to send it to you in a portable format, and you can object to us relying on legitimate interest.

Email hello@sportlogic.io. We will answer within 30 days. We may need to confirm who you are first. Asking costs nothing and we will not treat you differently for asking.

Some data we must keep even after a deletion request, such as billing records the tax authorities require.

This service is for businesses and developers. It is not for anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe we have, tell us and we will delete it.

We may update this policy. The date at the top always shows the current version, and we will email account holders before a change that materially affects how we use their data.

Email: hello@sportlogic.io

We answer within 30 days.