Legal
Privacy Policy
How we handle your data.
The short version
We collect the data you give us (your account info and the runs you log), plus the minimum technical data we need to keep the service running and improving. We don't sell your data. You can export or delete your data at any time. We use a small number of trusted vendors to run things like billing, email, and AI extraction — each one is contractually bound to protect your information.
1. Who we are
Drag Race Logbook Pro ("we," "us," or "the Service") is a web-based application for logging, analyzing, and predicting drag racing performance. Contact: privacy@dragracelogbook.com.
2. What we collect
Account information
Email address, display name, password (stored as a salted hash — we never see your plaintext password), and optional profile fields like competition number and avatar.
Racing data you create
Cars, tracks (custom ones you add), individual run records (ET, MPH, reaction time, weather, notes), uploaded photos (time slips, weather readouts, gauge clusters), and AI-extracted values from those photos.
Billing information
If you subscribe to a paid plan, payment is processed by Stripe. We receive a Stripe customer ID, subscription status, and the plan you're on. We never see or store your card details — those live only with Stripe (PCI DSS Level 1 certified).
Technical data
Standard server logs (IP address, user agent, requested URL, timestamp) and basic analytics (which pages are visited, how the app is used). We use this to keep the service running and to fix bugs.
3. How we use your data
- To run the Service: show you your runs, generate predictions, calculate density altitude, etc.
- To communicate: transactional emails (account verification, password resets, billing receipts). We do not send marketing emails unless you opt in.
- To improve the Service: aggregate, de-identified usage patterns help us improve AI extraction accuracy and the user experience.
- To prevent abuse: rate limiting, fraud detection, and security monitoring.
4. Service providers we use
We use the following processors to operate the Service. Each one receives only the data needed for their function and is bound by their own privacy commitments.
- Stripe — payment processing and subscription management.
- Blink Platform — application hosting, authentication, database, and storage.
- OpenAI — AI extraction of time slips, logbook pages, weather photos, and gauge readings. Uploaded images are sent to OpenAI for extraction; OpenAI does not train on data submitted through their API.
- NOAA / National Weather Service and Open-Meteo — public weather observations and historical data. We send the track's coordinates only; no personal data is shared.
- Email delivery vendor — for transactional email (verification, receipts, password resets).
5. What we don't do
- We do not sell your personal data to anyone.
- We do not share your run data with advertisers.
- We do not use your logged runs to train third-party AI models.
- We do not track you across other websites for advertising purposes.
6. Your rights
Regardless of where you live, you can:
- Access — see all data we hold about you (Profile → Account).
- Export — download your full run history as CSV at any time (Runs → Export).
- Correct — edit any field on any run, car, or track.
- Delete — request account deletion via privacy@dragracelogbook.com. We will delete your account and associated data within 30 days, except where retention is legally required (e.g. financial records for tax purposes).
- Object / restrict / port — if you're in the EU/UK, you have additional rights under GDPR. Email us to exercise them.
- California residents — under CCPA, you have the right to know, delete, and opt out of sale. We do not sell personal data.
7. Data retention
We keep your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except for billing records (kept up to 7 years for tax compliance) and minimal logs needed to prevent abuse.
8. Children
The Service is not directed at children under 13. We do not knowingly collect data from anyone under 13. Junior dragster racers under 13 should use the Service through a parent or guardian's account.
9. International transfers
The Service is operated from the United States. If you access the Service from elsewhere, your data is transferred to and stored in the United States. By using the Service, you consent to this transfer.
10. Security
We use industry-standard security practices: TLS for all data in transit, encryption at rest, password hashing with modern KDFs, and regular security review. No system is perfectly secure, but we work hard to protect your data.
11. Cookies
We use a small number of essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking. By using the Service you accept our use of these essential cookies.
12. Changes to this policy
We may update this policy from time to time. If we make material changes, we'll notify you by email at least 30 days before they take effect. The "Last updated" date at the top will always reflect the current version.
13. Contact
Questions about this policy or how we handle your data? Email privacy@dragracelogbook.com.