Privacy Policy

The controller is whoever operates the ULLRA service at the track where you drove — ask the on-site staff if you want to know exactly who that is. Your account page always shows what we store about you, and lets you download or delete it.

• Account: email address, the racing name you chose, and an optional avatar and bio.
• Racing: lap times with timestamps, 10 Hz GPS traces and motion summaries for sessions you claimed, plus coaching notes about your driving.
• Social, if you take part: feed posts, reactions, follows, crews, challenges and ratings. You can opt out of all of it in settings.
• Operations: masked network logs kept 7 days and an admin audit log kept 24 months, used only for debugging and security.

We never store your date of birth or your age. Creating an account only asks you to confirm that you are at least 13, or that a guardian manages the account — that confirmation is a gate, not data.

• Contract: lap times and telemetry are needed to deliver the timing itself.
• Consent: everything social, and a guardian's management of a child's account, rests on the confirmation given at signup — withdraw it with the social opt-out or by deleting the account.
• Legitimate interest: keeping the service running and secure, with masked logs that cannot identify a subscriber.

Database and functions run inside the EU (database in eu-central, functions in Paris). Push notifications and the on-demand AI debrief go through their respective providers when you use them.

• Full-resolution telemetry: 90 days, then thinned to 1 Hz for the rest of the year, then deleted.
• Debug logs: 7 days. Admin audit log: 24 months.
• Laps, accounts and social content have no automatic expiry — they live until you delete them.

Children under 13 do not get their own accounts. Their sessions are claimed to a guardian's account or left unclaimed — and an unclaimed session belongs to a kart, not to a person. Every account is treated with the same care regardless, so the protection never depends on knowing anyone's age.

• Download everything we store about you, as a file, from the settings page.
• Delete your account from the settings page. Telemetry, coaching and social content are deleted for good; lap times stay on the leaderboards without your name, since others raced against them.
• Change your racing name and bio in your profile at any time.

Only strictly necessary storage: the login session and your language choice. There is no analytics, no tracking and no advertising — so there is no consent banner, because there is nothing optional to consent to.