Privacy Policy

When you sign in with your TeamSport login code, we retrieve and store:

• Your name and alias, home venue, and TeamSport membership/rebrief expiry dates.
• Your race history: dates, venues, finishing positions, lap times, and (when you view a race's detail) per-lap times and other participants' names and finishing positions in that same race.
• Race vouchers (name, redemption code, deposit/expiry details) and loyalty points, if you have any.
• Anything you submit yourself: bug reports, and rival links you create by exchanging invite codes with other KartStats users.

Your TeamSport login code itself is never stored in plain text. We store a one-way, salted hash of it (used only to recognise you on your next login) and, separately, an encrypted copy tied to your browser session — this is what lets your data keep updating in the background without you needing to stay signed in on a browser tab. Nothing about how the code is stored lets us or anyone else recover the original code from it.

We don't generate your racing data — it already exists in TeamSport's own systems. When you enter your login code, we use it to authenticate to TeamSport's systems on your behalf (the same way the official TeamSport app does) and copy your results into our own database, so KartStats can show you faster, richer views of your own history than the official app does. We only ever access data your own login code is entitled to see.

KartStats uses one strictly necessary cookie to keep you signed in (and a second, separate one if you're an admin). These aren't optional — the app can't function without them — and don't require consent under UK law.

If enabled, we also use Google Analytics to understand overall usage: pages and features used; broad outcomes such as successful or failed sign-ins, syncs, race-detail views, live-timing use, rival and voucher actions, and bug-report submission; session length; Core Web Vitals; non-sensitive error categories; and technical context such as browser, operating system, device category, screen size, language, approximate location, app display mode, and coarse network/hardware capability bands. We never send Google your name, alias, TeamSport login code, voucher or rival invite codes, race or lap data, bug-report text, user/admin IDs, raw error messages, or stack traces.

We use Google's Consent Mode: no analytics cookie is set, and no pseudonymous analytics identifier or detailed interaction telemetry is collected unless you actively accept itvia the cookie banner shown on your first visit. Before you accept (or if you decline), only limited, cookieless signals that Google states don't use persistent identifiers may be sent. You can change your choice anytime using the "Cookie settings" link in the footer. When accepted, Google processes this data under its own privacy terms, which may involve servers outside the UK.

Nobody, except: TeamSport/sms-timing (whose data this already is), Google Analytics (pseudonymous usage and technical analytics as described above, never your race data or submitted content), and our hosting provider, who stores the database on our behalf and has no independent use of it. We do not sell your data or share it with advertisers.

The one exception is rivals: if you link accounts with another KartStats user (by exchanging an invite code — this never happens automatically), you each see the races you've run against each other and each other's personal best at venues you've both raced at. You can unlink at any time from the Rivals page.

We keep your data for as long as your account exists, so your history stays available whenever you sign back in. If you'd like your account and data deleted, contact us (below) and we'll remove it — this is currently a manual process on our end, not an automated one, so please allow a few days.

Under UK GDPR, you can ask us to:

• Tell you what data we hold about you.
• Correct anything that's wrong.
• Delete your account and data.
• Stop processing your data, or hand you a copy of it.
• Withdraw analytics consent at any time (see "Cookies and analytics" above).

To exercise any of these, email [email protected]. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've handled your data wrongly, though we'd appreciate the chance to sort it out directly first.

KartStats is intended for use by TeamSport account holders. If you're under 18, please only use it with a parent or guardian's involvement, in line with TeamSport's own policies for younger racers.

If this policy changes materially, we'll update the date at the top. Significant changes (e.g. adding a new use of your data) will be called out on the Updates page.

Questions, requests, or concerns about your data: [email protected].