Privacy policy

Last updated 29 September 2026.

This policy says what RacingLogs.online keeps about you, why, where it is, and how to get it changed or removed. It covers the website, the web app and the RacingLogs desktop app. It is written to match what the software actually does; when the software changes, so does this page, and the date above moves.

Who is responsible

The controller of your data is Igniware Oy, a Finnish company, business ID 3014330-1, c/o Petteri Antila, Lehtolantie 17, 29570 Söörmarkku, Finland. For anything about your data write to petteri.antila@igniware.fi.

What we keep, and why

Your account

Your email address, a display name if you set one, and either a hash of your password or nothing at all if you sign in with mailed codes, and when you agreed to the terms and this policy, and to which version of them, and when you confirmed your email address with the code we sent to it. We need these to run an account for you (the basis is the contract between us). Signing in sets one cookie, which keeps you signed in for 30 days. The desktop app instead keeps a sign-in token on the machine you signed in from; each machine can be signed out from the web app.

Your content

The datalogs you upload, in our own format and, when uploaded from the browser, the original file as well; the cars you file them under, their names and pictures; and the notes, math channels, tracks, layouts and settings you make around them. We store and process these to show them to you and to the people you share them with, and for nothing else.

A datalog can be personal data. Many contain a GPS trace, which shows where a car was driven and, often, where it is kept. We treat every log as personal data of its owner. The coordinates in your logs are not sent to any third party.

Notes carry your email. A note you write on a log is signed with the email address of your account, and everyone who can open that car sees it. If you write a note on someone else's shared log, the owner of that log sees your email as the author. If you delete your account, such notes stay on the owner's log, signed as written by a deleted account instead of by your email.

Files you send us for support. When the web app cannot read a file and you press Request support, we keep that file, with your account, the car you tried it on, and what you wrote about it, privately, to build a reader for it. It may contain positions and times from your session. It is not shared with anyone. It is kept also after you delete your account, with the account detached from it, because the reader it helps build outlives both; write to us and we remove it.

Share links

A share link opens one log, read-only, to anyone who has the link; it needs no account. For each link we count how many times it was opened and how many different visitors opened it. Visitors are told apart without being identified: no address is stored, no cookie is set on a visitor, and nothing we keep can be traced back to a person. The owner of a log can see these counts, turn a link off or delete it.

Security records

Actions taken by site administrators are recorded with the administrator's network address and browser identification, and kept for as long as the service runs, so that what was done to whose data can always be answered. The same record notes the security-relevant things an account does to itself — such as signing in with a mailed code, setting or resetting a password, changing its email address, signing out everywhere, making or changing a share link, downloading its data, agreeing to the terms or deleting itself — with the network address and browser they came from, kept on the same terms and for the same reason. Failed sign-in attempts are counted briefly to slow down guessing and are not kept. Server error logs may include a network address next to the error; only a small, fixed amount of them is kept, and the oldest are overwritten as new ones arrive.

Email we send

Sign-in codes, password reset codes, codes that confirm your email address, a new email address or the deletion of an account, invitations, and notices about your account, such as a note to your old address when the address changes. If you choose to in your preferences, we also email you before logs on your account are due to be removed: at most one email a week, listing what is due in the next two weeks. That is off unless you turn it on. If you send us a file for support, we email you once when that logger works. We do not use a mailing service, and we do not send marketing mail.

Analytics

We count visits with analytics software that we run on our own server; nothing goes to an analytics company. It sets no cookies, uses no cross-site identifiers, honours your browser's Do Not Track setting, records each visit under a value that changes every day and cannot be linked back to you, and reports counts of pages, browsers and countries. It also records how quickly pages and logs loaded and, when something on the site fails, a short technical description of the fault, so that we can find and fix it; neither contains your name, your address, the names of your files or anything you typed. Sign-in and reset codes never reach it. Which shared log a visit was to is recorded, because share links are public and that is how one shared log is told apart from another. This is done on the basis of our legitimate interest in knowing whether the site is used and whether it works.

If you leave your address on the pricing page

We keep the address, which plan you asked about and anything you wrote beside it, and we use it to write to you once about exactly that. It is not added to any list and not used for anything else, and it is removed when you ask.

What we do not do

No advertising, no selling or renting of data, no third-party trackers, no social-media buttons, no profiling. We do not look at your logs except to operate the service, to diagnose a problem you have asked us to look at, or where the law requires it.

Where your data is

Everything stays inside the EU. The service runs on servers rented from a European hosting provider in the EU, and nightly backups are copied to equipment under Igniware Oy's control in Finland. Nothing is transferred outside the EU or the EEA. If we add paid plans, payment will be handled by a payment provider, and this policy will name it before that happens.

How long we keep things

• Your account and everything in it: until you delete it.
• Sessions: 30 days from sign-in, or until you sign out. A signed-in machine: until you sign it out.
• Logs on the free tier may be removed 90 days after they were last opened by anyone, you or a visitor with a share link. You can choose, in your preferences, to be emailed before logs are due to go; otherwise they go quietly. The original file is kept for 30 days after upload. The Terms have the details. Your own copy of the file on your computer is unaffected: the service is a viewer, not a backup.
• Backups: daily copies are kept for 30 days and monthly copies for 12 months. Something you delete is gone from the live service at once but can remain in a backup for up to 12 months. Backups are only ever restored whole, to recover from a disaster, never to bring back one account's data.
• Files you sent us for support: until we have no more use for them in building and testing readers, or until you ask us to remove them; deleting your account detaches them from it but does not remove them.
• Security records, of administrators' actions and of the account actions listed above: for the life of the service. Deleting your account leaves the record that it was deleted.
• Server error logs: a small, fixed amount, the oldest overwritten by the newest.
• Analytics counts: indefinitely; they contain no personal data.

Your rights

You can ask to see what we hold about you, have it corrected, have it deleted, have it handed over in a machine-readable form, or have its use restricted or objected to. Write to petteri.antila@igniware.fi from the address on your account; we answer within a month.

Most of this you can also do yourself, at any time, in the web app. Preferences corrects your name and your email address (a new address takes effect once you confirm a code we send to it), and hands you everything the account holds as one machine-readable file; each log's page hands you the log itself, as the original file you uploaded where we keep it, or otherwise in our own format. You can delete individual logs from the Logs page, and the whole account from Preferences: that removes, at once, your cars, every log in them with its original file, their notes, share links and settings, and everything else the account holds, except files you sent us for support (above).

If you think we have handled your data wrongly, you can complain to the Finnish supervisory authority, the Office of the Data Protection Ombudsman, tietosuoja.fi.

Cookies and browser storage

One cookie, the sign-in cookie above, and only once you sign in. The web app also remembers a few preferences in your browser, such as the date format you chose. None of these identify you, none leave your browser, and none require consent, so there is no cookie banner.

Changes

When this policy changes, the new version is published here with a new date. If a change matters to what we do with your data, we tell you by email first.