Cookie Preferences

We use cookies to keep you signed in and understand how you use the site. Privacy Policy

Legal

Privacy Policy

How we collect, use, and protect your personal information.

Last updated September 26, 2026

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal information by Fastlytics ("we," "us," or "our") in connection with your use of our web application, community features, and associated services (collectively, the "Services").

By accessing or using the Services — including browsing race data, participating in discussions, saving charts, or creating a profile — you acknowledge that you have read, understood, and agree to be bound by this Policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address and authentication credentials
  • Username and display name
  • Profile information (bio, website, avatar)
  • Preferences (favorite driver, favorite team)

2.2 Community & User-Generated Content

When you participate in community features, we collect and store:

  • Comments and replies posted in news discussions
  • Votes (upvotes/downvotes) on articles and comments
  • Saved charts and folder organization (including public/private settings)
  • Notification preferences and read states

2.3 Technical & Device Information

We automatically collect:

  • Browser type, version, and configuration
  • Operating system and device information
  • IP address and approximate geographic location
  • Language and locale settings

2.4 Usage & Behavioral Data

We collect information about how you interact with the platform:

  • Pages visited, features accessed, and session duration
  • Race data viewed, drivers compared, and charts generated
  • Navigation patterns and engagement metrics
  • Referring URLs and exit points

3. How We Use Your Data

We process your information for the following purposes:

  • Service delivery: Providing race analytics, telemetry data, session replay, and personalized dashboards.
  • Personalization: Tailoring your news feed based on your favorite driver and team preferences, and delivering relevant notifications.
  • Community features: Enabling discussions, comments, voting, public profiles, and saved chart sharing.
  • Account management: Authentication, subscription billing, and account settings.
  • Platform improvement: Analytics to understand usage patterns and improve features.
  • Security: Fraud prevention, abuse detection, and protecting the integrity of community features.

4. Community & Social Features

Fastlytics includes community features that involve sharing information with other users. Please be aware of the following:

Public Profiles

Your username, avatar, bio, favorite driver/team, and join date are visible to other users. Comments you post and charts you mark as public appear on your profile.

Discussions & Comments

Comments posted in news discussions are public and associated with your username. You can delete your own comments at any time.

Saved Charts & Folders

Charts and folders you save can be set to public or private. Public charts are visible on your profile. Private charts are only visible to you.

Notifications

We send notifications when news matches your favorites or when someone replies to your comments. You can manage notification preferences in settings.

5. Data Storage & Security

Your data is stored on infrastructure operated by Supabase, Inc. All data is encrypted at rest and in transit using industry-standard cryptographic protocols.

We implement appropriate technical and organizational measures to safeguard your information against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is entirely secure.

6. Third-Party Services

We use the following third-party services:

ServicePurpose
SupabaseAuthentication, database, storage
Dodo PaymentsPayment processing
SentryError tracking and performance monitoring
Umami (self-hosted)Privacy-focused analytics
PostHog (self-hosted)Product analytics and feature flags
CloudflareCDN, DDoS protection, API proxy
GoogleIdentity provider for optional "Continue with Google" sign-in

Our analytics services (Umami and PostHog) are self-hosted and do not transmit data to third-party advertising networks or external data brokers.

7. Google Sign-In and Google User Data

Fastlytics lets you create an account with an email address and password, or with "Continue with Google". This section explains exactly what we receive when you choose Google sign-in, what we do with it, and what we never do with it.

What we receive from Google

We request only the basic OpenID Connect scopes openid, email and profile. Google therefore shares:

  • your Google account email address and whether it is verified;
  • your name, display name and profile picture URL;
  • your Google account identifier, so we can recognise you on future sign-ins.

We do not request or receive access to Gmail, Google Drive, Google Calendar, Google Contacts, YouTube, or any other Google product, and no Google API scope beyond the three listed above is requested.

How we use it

  • to create and authenticate your Fastlytics account and keep you signed in;
  • to pre-fill your profile name and avatar;
  • to send you account and security notices (for example sign-in or billing related messages) to that email address.

That is the entire purpose. We do not use Google user data for advertising; we do not sell, rent or share it with data brokers; we do not use it to determine creditworthiness or for lending purposes; we do not use it to train, fine-tune or improve any machine learning or artificial intelligence model; and no human reads it except where you ask us to, where it is necessary for security or abuse investigation, where it is necessary to comply with applicable law, or as part of a merger or acquisition as described in the Google API Services User Data Policy.

Who else can see it

Google user data is stored with our authentication, database and storage provider (Supabase) and delivered through our CDN and API proxy (Cloudflare). Both process it on our behalf, under contract, and are not permitted to use it for their own purposes. We do not transfer Google user data to anyone else.

Google API Services User Data Policy

Fastlytics' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Turning it off

You can revoke Fastlytics' access at any time from your Google account permissions, or by disconnecting the linked account in Settings. Revoking access stops future Google sign-ins. Deleting your Fastlytics account removes the Google profile data we store (name, avatar, email address and account identifier) from our systems.

Questions about Google user data can be sent to contact@fastlytics.app.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

  • Account data: Retained while your account is active. Deleted upon account deletion request.
  • Community content: Comments and votes are retained while your account is active. Deleted comments are removed immediately.
  • Usage analytics: Aggregated and anonymized after 90 days.
  • Payment records: Retained as required by applicable tax and accounting laws.

9. Your Rights & Choices

Subject to applicable data protection laws, you have the following rights:

  • Access personal information we hold about you
  • Request correction of inaccurate personal data
  • Request deletion of your account and associated data
  • Object to processing based on legitimate interests
  • Export your data (data portability)
  • Withdraw consent where processing is consent-based

You can exercise most of these rights directly from your account settings. For deletion requests or data exports, contact us at contact@fastlytics.app.

10. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Services, you consent to such transfers.

11. Changes to This Policy

We may update this Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top of this page indicates when the Policy was last revised.

12. Contact Information

For questions or requests regarding this Policy or your personal data: