Privacy policy
Last updated: [TO COMPLETE: publication date]
Data controller
[TO COMPLETE: name or company name of the publisher], [TO COMPLETE: address]. Contact for any question about your data: [TO COMPLETE: dedicated email address].
What stays in your browser
The game stores the following in your browser’s local storage (localStorage), without sending it:
- your settings (driving aids, graphics quality, audience measurement choice);
- in offline mode: your attempts and the replay of your best lap, for 30 days at most;
- your livery in offline mode;
- online: your sign-in session and a random device identifier (see below).
No advertising cookies are set. Clearing the site’s data in your browser erases all of this.
What is sent to the server (online mode)
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Account identifier (anonymous guest by default), email address if you add one, Google identity if you use it | Signing you in, keeping your results | Performance of the service (terms of use) | Until the account is deleted; inactive guest accounts are deleted after 12 months |
| Driver name, constructor, livery, club | Leaderboards, public profile | Performance of the service | Until the account is deleted |
| Attempts: time of day, lap time, sectors, status, distance | Leaderboards, statistics | Performance of the service | Until the account is deleted (season history) |
| Replays (your inputs, 120 times a second) | Recalculating and checking every time, ghosts | Legitimate interest (fair leaderboards) | 12 months, then deleted, except your best lap of each day (next row) |
| Your best lap of each day, with your car’s livery on that day | Video of the day: the best laps race together, with your driver name | Legitimate interest (presenting the results) | Until the account is deleted |
| Premium: Stripe customer identifier, plan, status and end date of the subscription or pass | Giving access to premium, managing the subscription | Performance of the contract | Until the account is deleted (the Stripe customer is then deleted). Payment data (card, invoices) is kept by Stripe, never by DailyFormula. |
| Random device identifier (created by the game, not a fingerprint) | Limiting multiple accounts | Legitimate interest (preventing cheating) | Kept with the attempts concerned |
| Game errors: message, stack trace, page, browser (no IP address) | Fixing bugs | Legitimate interest | 30 days |
| Request counters per account | Protecting the service against abuse | Legitimate interest | 1 day |
Hosting providers also process your IP address for technical reasons (connection logs), under their own retention periods.
Audience measurement
Audience measurement (PostHog, hosted in the European Union) is loaded only if you accept it in the banner shown on your first visit. Refusing is as easy as accepting, and you can change your mind at any time through the “Cookies and audience measurement” link on the home screen. Without your consent, no measurement script is downloaded.
Processors
- Supabase (database, accounts, files, server functions), region: [TO COMPLETE: project region, for example Frankfurt]
- Website hosting: [TO COMPLETE: host, for example Cloudflare Pages]
- Sending sign-in emails: [TO COMPLETE: email service configured in Supabase]
- Stripe (premium payments: card, invoicing, VAT), only if you buy premium
- Google (only if you choose “Continue with Google”)
- PostHog (only with your consent)
If a processor handles data outside the European Union, the transfer is covered by the safeguards provided for by the GDPR (standard contractual clauses or an adequacy decision).
Your rights
You can access your data, correct it, erase it, get a copy in a common format, object to processing based on legitimate interest, or ask for it to be restricted. The “Delete my account” button (Profile tab) immediately erases your account, your results, your replays and your livery. For any other request: [TO COMPLETE: dedicated email address]. We reply within one month.
You can also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Minors
The game does not ask for your age. For audience measurement, consent from a minor under 15 must be given jointly with a holder of parental authority.