Skip to main content

Privacy Policy

Last updated 2026-06-28

AssettoGrid is a community site for Assetto Corsa: a race calendar, league and driver directories, leaderboards, and a strategy calculator. We try to keep data collection to the minimum needed to make the site work. We do not run analytics, advertising, or third-party tracking scripts.

What we store

  • Anonymous session. The first time you visit, we create an anonymous account (a random user ID) so your schedule can be saved. No email or personal info is involved.
  • Account info, if you sign up. If you create an account with email and password, we store your email and a hashed password. If you sign in with Google or Discord, we receive the basic profile info those providers return (typically email and a provider user ID). If you sign in with Steam, we store your Steam ID, Steam display name, and avatar URL. You can link more than one provider to the same account from the Settings page.
  • Schedule data. The leagues and championships you subscribe to, and any individual events you pin or unpin, are stored against your user ID so they sync across devices when you're signed in. If you generate a calendar (iCal) feed, we store a random token for that feed so the link keeps working.
  • Saved strategies. Setups you save in the Strategy Calculator are stored against your user ID. If you mark a saved strategy as public to share it via link, anyone with that link can view it.
  • Feedback you send us. If you use the Contact / Suggest form, we store the message and any optional name and images you attach. For bug reports, if you leave the "attach diagnostics" toggle on, we also store your browser user-agent string and the page URL you were on. You can turn that toggle off before sending.
  • Your preferences. Your filter selections, calendar view, and display settings (time format, accent color, density) are saved to your account in our database, so they follow you across devices. If you do not have an account yet, they attach to an anonymous session that is created the first time you change one.

What we do not store

  • No analytics events, page-view tracking, or session replay.
  • No advertising cookies or marketing pixels.
  • No location data beyond what's inherent in any HTTP request (IP).
  • No fingerprinting beyond standard browser request headers.

Driver and leaderboard data

The Drivers, Leaderboards, and Hall of Fame pages show lap times and related driver information that we aggregate from publicly available race results published by third-party platforms (Server Manager v2 hosts, LeagueFM, World Sim Series, and similar). For each driver this can include a display name and any alternate names used across sources, a country, and the lap times, cars, tracks, and session details attached to their public results.

This data is collected and shown whether or not the driver has an account here. It is sourced from results the original platforms already make public. We do not attach a driver's Steam ID, avatar, or any account details to these public pages unless that person signs in here and links their own driver record.

If you are a driver and want your information corrected or removed from these pages, send a request through the Contact / Suggest button and tell us which name or results to remove.

Cookies and local storage

We use the cookies that Supabase sets for authentication. They are required for sign-in and to keep your anonymous session attached to your schedule and preferences. During Steam sign-in and when linking a provider, we set short-lived cookies (a few minutes) to protect those flows against cross-site request forgery; they are cleared once the flow finishes. A small cookie also remembers your chosen language. localStorage is used for lightweight UI state only, such as remembering that you have seen the welcome dialog and holding unsaved Strategy Calculator drafts and column settings on your device.

Third parties we rely on

  • Supabase hosts our database and handles authentication. Account info, schedule data, and feedback submissions are stored there.
  • Cloudflare hosts the site. As with any web host, request metadata (IP address, user-agent, timing) passes through Cloudflare's infrastructure as part of normal serving.
  • Google, Discord, and Steam are involved only if you choose to sign in with or link them. Standard OAuth (or, for Steam, OpenID) applies, and we receive only the basic profile information described above.

We do not sell your data and we do not share it with third parties beyond the infrastructure providers above.

Deleting your data

If you'd like your account and associated schedule deleted, send a request through the Contact / Suggest form on the calendar page and include the email address tied to your account. We'll remove the account and the rows linked to its user ID.

Children

The site isn't aimed at children under 13. We don't knowingly collect data from them.

Changes to this policy

If we change what we collect, we'll update this page and bump the date at the top. Material changes will also be called out on the calendar page where reasonable.

Contact

Questions about privacy? Use the Contact / Suggest button on the calendar page.