Privacy Policy

AssettoGrid is a community calendar for Assetto Corsa races. We try to keep data collection to the minimum needed to make the site work. We do not run analytics, advertising, or third-party tracking scripts.

What we store

• Anonymous session. The first time you visit, we create an anonymous account (a random user ID) so your schedule can be saved. No email or personal info is involved.
• Account info, if you sign up. If you create an account with email and password, we store your email and a hashed password. If you sign in with Google or Discord, we receive the basic profile info those providers return (typically email and a provider user ID).
• Schedule data. The leagues and championships you subscribe to, and any individual events you pin or unpin, are stored against your user ID so they sync across devices when you're signed in.
• Feedback you send us. If you use the Contact / Suggest form, we store the message and any optional name and images you attach. For bug reports, if you leave the "attach diagnostics" toggle on, we also store your browser user-agent string and the page URL you were on. You can turn that toggle off before sending.
• Local preferences. Filter selections and the calendar view you last used are saved in your browser's localStorage. They never leave your device.

What we do not store

• No analytics events, page-view tracking, or session replay.
• No advertising cookies or marketing pixels.
• No location data beyond what's inherent in any HTTP request (IP).
• No fingerprinting beyond standard browser request headers.

Cookies and local storage

We use the cookies that Supabase sets for authentication. They are required for sign-in and to keep your anonymous session attached to your schedule. localStorage is used only to remember your filter and view choices.

Third parties we rely on

• Supabase hosts our database and handles authentication. Account info, schedule data, and feedback submissions are stored there.
• Vercel hosts the site. As with any web host, request metadata (IP address, user-agent, timing) passes through Vercel's infrastructure as part of normal serving.
• Google and Discord are involved only if you choose to sign in with them. Standard OAuth applies.

We do not sell your data and we do not share it with third parties beyond the infrastructure providers above.

Deleting your data

If you'd like your account and associated schedule deleted, send a request through the Contact / Suggest form on the calendar page and include the email address tied to your account. We'll remove the account and the rows linked to its user ID.

Children

The site isn't aimed at children under 13. We don't knowingly collect data from them.

Changes to this policy

If we change what we collect, we'll update this page and bump the date at the top. Material changes will also be called out on the calendar page where reasonable.

Contact

Questions about privacy? Use the Contact / Suggest button on the calendar page.