Privacy
This translation is for your convenience; the German version is legally binding.
Controller
Stefan Theisen, Wilhelmstr. 37, 52349 Düren, Germany
Email: support@trackheroapp.com
This website
This site sets no cookies, uses no analytics or tracking tools and loads no content from third-party servers. Fonts and images are on our own server.
Server logs
When you visit, the web server stores your IP address, date and time, the address requested, the browser type and the referring page in log files for technical reasons. This serves secure operation (Art. 6 (1) (f) GDPR). The logs are deleted after 14 days at the latest.
Hosting
The site runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in Germany. A data processing agreement with Hetzner is in place.
Track Hero Live (live.trackheroapp.com)
Sign-in for drivers. You sign in either with Discord (Discord Inc., 444 De Haro Street, San Francisco, USA) or Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The chosen service only sends us your account number with that service and your name, no email address and no password. We store these two items, the time of sign-in and the spotter links you create for as long as your account exists (Art. 6 (1) (b) GDPR). “Delete account” removes everything immediately. Discord’s and Google’s own privacy policies apply to them.
Cookie. After sign-in we set one single, technically necessary cookie that keeps you signed in for 30 days (§ 25 (2) TDDDG). Spotters get no cookie.
Driving data. While you drive, Track Hero sends driving data from iRacing (position, times, pedals, fuel, standings) to our server. It is only passed on to your spotters and not stored.
Laps for the Telemetry View. When “Allow spotters” is on, Track Hero uploads every lap you drive with its readings from iRacing (among them speed, pedals, steering, gear, rpm, accelerations, shock travel, fuel, and after the session also tyre temperatures and pressures) together with car, track, lap time and time of day to our server. You and your spotters see them in the Telemetry View. We delete the laps of a session as soon as your next session begins; laps that you or a spotter keep with ★ stay until you remove the star or delete your account (Art. 6 (1) (b) GDPR).
Free trial time. For the free trial, Track Hero counts the time driven on track and sends it together with an identifier of your computer. The identifier is a non-reversible hash of the Windows device ID; neither the computer nor a person can be identified from it. For each identifier we only store the time driven, so the trial applies once per computer, also with a new account (Art. 6 (1) (f) GDPR; legitimate interest: protecting the free trial against misuse). Identifiers for which no driving time has been reported for two years are deleted.
iRacing member ID. While you drive, Track Hero sends the iRacing member ID that iRacing reports for the driver at this computer. We store it with your account the first time you drive with it: a licence is for one driver, and with another member ID Track Hero stays off (Art. 6 (1) (b) GDPR, performance of the contract). We also count the free trial per member ID so that it applies only once (Art. 6 (1) (f) GDPR; legitimate interest: protection against misuse). The member ID stored with the account is deleted with the account, the trial time for a member ID two years after the last reported driving time.
Logs for support. Track Hero writes logs for troubleshooting on your computer (among other things values from iRacing, wheel button presses, the state of the radio and the connection). They stay on your computer and are deleted automatically after 14 days. We only receive them if you send them to us yourself by e-mail via “Send logs to support”. We then use them solely to handle your request and delete them once it is closed (Art. 6 (1) (b) GDPR).
Radio. Voice radio runs encrypted directly between driver and spotter (WebRTC). Where that is technically not possible, our own server relays the encrypted data. Nothing is recorded.
Messages. Text messages from spotters stay in memory at most until the next server restart and are not stored permanently.
Payment. You pay for the subscription through Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). You enter your email address and payment details directly with Stripe on the payment page; they never reach us. Stripe only tells us whether your subscription is running. For this we store Stripe’s IDs of the subscription and the customer, the state of the subscription (running, paid until, cancelled) with times, for earlier one-time purchases Stripe’s ID of the payment, and the time of your consent to the immediate unlock for as long as your account exists (Art. 6 (1) (b) GDPR). We keep the payment records at Stripe as required by commercial and tax law (Art. 6 (1) (c) GDPR). Stripe may also transfer data to the USA and relies on the EU-US Data Privacy Framework and standard contractual clauses; details at stripe.com/privacy. On the payment page Stripe may set technically necessary cookies.
Fonts are on our own server; no content is loaded from Google or other third-party servers.
Your rights
You have the right to access, rectification, erasure, restriction of processing, objection and data portability, and the right to lodge a complaint with a data protection supervisory authority.