PRIVACY POLICY

Track a race, not your visitors.

1. Our Privacy Philosophy

Race Tracker exists to time races, run brackets, and share the results — not to profile the people using it. We collect only the data needed to save your races to your account and to let spectators view a race you've shared. There is no advertising and nothing about you or your visitors is sold or shared.

2. Data We Collect

To run the service, we store:

Your email address, obtained from Google when you sign in. We use it to attach saved races to your account so that only you can edit or delete them. Your email is visible on any race object returned by the API, so anyone who opens a spectator link you've shared can see which Google account owns the race.
Race details you enter: race or bracket name, description, optional photo, plus the data you fill in — racer names, lap splits, finish times, scores, counts, participants, matches, and winners.

Race state is stored as JSON in Google Cloud Storage in our project, readable only by this application. Uploaded photos sit in the same bucket. We do not sell, share, or license this data to anyone.

Anything you type into a race (including names of racers or participants) is visible to anyone who has the spectator URL for that race — spectator URLs are unlisted but not secret. Don't put information into a race that you wouldn't want a person with the link to see.

3. Data We Do Not Collect

We do not run advertising or use ad networks.
We do not sell or share your personal data.
We do not collect device identifiers, precise location data, or contacts.
We do not log your IP address beyond what Google Cloud Run captures for basic request routing and abuse prevention.

4. Cookies and Local Storage

We set two first-party cookies when you sign in:

A session cookie (cryptographically signed) that remembers you're signed in for 30 days. It holds your email and an expiration time — nothing else.
A short-lived OAuth state cookie used during the sign-in flow to prevent cross-site request forgery. It expires within minutes.

Spectators who never sign in get no cookies from us. We do not use local storage or service workers to track you.

5. Third-Party Services

We rely on Google services to operate the site:

Google Sign-In handles the authentication flow. Google's own privacy policy governs that interaction.
Google Cloud hosts our application (Cloud Run) and stores race data and photos (Cloud Storage). Google's privacy policy applies to platform-level logs (e.g. request routing).
Google Analytics (gtag.js) collects aggregate usage data — page views, referrers, approximate location (country/region), and basic device/browser info — so we can see how the site is being used. Google's own privacy policy governs this data. You can opt out by installing the Google Analytics Opt-out Browser Add-on or by blocking analytics scripts in your browser.

6. Your Data, Your Control

You can delete any saved race at any time from its editor page; this removes the race JSON and any uploaded photo from our storage. To delete your account entirely (all races you own), delete each race and then email us at the address below to purge any remaining residual data. You can also revoke this application's access to your Google account at myaccount.google.com/permissions.

For users in the EU, UK, or California: you have the right to access, correct, delete, and port the personal data we hold about you. Contact us via the email below to exercise any of these rights.

7. Changes & Contact

If we ever change this policy in a material way, we will update this page. For any privacy question, reach out to contact@linearmotionjunctionbox.com.