Privacy & Cookies
This page describes what we collect, why, and your rights under GDPR.
Data controller
iRacing Series Planner — contact: privacy@irsp.app
Cookies in use
| Name | Purpose | Category | Lifetime | Set by |
|---|---|---|---|---|
| iracing-session | Sign-in session | Necessary | 30 days | First-party |
| iracing-tokens | iRacing API access | Necessary | 30 days | First-party |
| oauth-state | OAuth CSRF protection | Necessary | 10 minutes | First-party |
| NEXT_LOCALE | Language preference | Necessary | 1 year | next-intl |
| irsp-consent | This consent record | Necessary | 13 months | First-party |
| _vercel_* | Anonymous visitor analytics | Analytics | Session | Vercel |
| _vercel_speed_insights | Page performance metrics | Analytics | Session | Vercel |
What we collect
Sign-in identifier (when you log in), race plans you create, and owned content lists you mark. Anonymous usage data only when you opt in to analytics.
Third parties
Vercel (hosting + optional analytics, EU region), Turso (database, EU region), iRacing (sign-in via OAuth).
Where your data is stored
EU data centres for both hosting (Vercel) and database (Turso).
Your rights under GDPR
You have the right to access, rectify, erase, and port your data, to withdraw consent at any time, and to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
How long we keep data
Anonymous race plans are retained for 90 days. Plans claimed by signed-in users are retained until you delete your account.