Privacy Policy

Last updated: July 25, 2026

What We Do

Lap Time Tracker ("we", "our", "the app") helps kart racers track their race results. When you sign in with Google, we access your Gmail to find and import your kart racing result emails automatically.

Information We Collect

• Google Account Info: Your name and email address (from Google Sign-In)
• Race Data: Location, date, lap times, position, and score extracted from your kart race emails
• Gmail Access: We use read-only access to search for emails containing your kart race results. We do not read, store, or access any other emails.

How We Use Gmail Data

Our use of Gmail data is limited to:

• Searching for kart race result emails
• Extracting race results (lap times, positions, scores) from those emails
• Displaying your race data in your personal dashboard

We do not:

• Read any emails other than kart race results
• Store raw email content
• Share your email data with third parties
• Use your email data for advertising
• Allow any human to read your emails

Data Storage & Protection

Your race data is stored securely in our database (powered by Supabase), hosted on secure cloud infrastructure with the following protections:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2/1.3 (HTTPS).
• Encryption at rest: All stored data is encrypted at rest using AES-256 encryption provided by our database infrastructure (Supabase/AWS).
• Row-Level Security (RLS): Database-level access controls ensure each user can only access their own data. No user can view, modify, or delete another user's records.
• Access tokens: Your Google OAuth access token is used only during your active browser session to search for race result emails. Tokens are never stored on our servers or in our database. Tokens are transmitted only over encrypted connections.
• Minimal data retention: We only extract and store race result data (lap times, dates, locations, positions). We do not store raw email content, email metadata, or any other Gmail data.
• No third-party access: Your data is never shared with, sold to, or accessed by any third party. No analytics services, advertising networks, or data brokers receive your information.

Data Sharing

We do not sell or share your personal data. The only data visible to other users is your best lap time per track on the community leaderboard (displayed with your name).

Data Deletion

You can delete your race data at any time from the dashboard. To delete your account entirely, contact us at support@laptimetracker.com. You can also revoke our Gmail access at any time from your Google Account permissions.

Google API Services User Data Policy

Lap Time Tracker's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Gmail data to provide the race result import feature directly to the user.
• We do not transfer Gmail data to any third parties unless necessary to provide or improve user-facing features, with user consent, or for security/legal compliance.
• We do not use Gmail data for serving advertisements.
• We do not allow humans to read user Gmail data unless with explicit user consent, for security purposes, or legal compliance.

Security Incident Response

In the event of a data breach or security incident affecting user data, we will notify affected users via email within 72 hours and take immediate steps to contain and remediate the issue.

Contact

Questions about this privacy policy? Email us at support@laptimetracker.com

← Back to Lap Time Tracker