Privacy Policy

What we collect

• Account details. Your name and email address. If you sign in with a password, it is stored only as a secure hash by our authentication provider; we never see it. If you sign in with Google, we receive your name and email address from Google.
• Onboarding answers. Your goal, years racing, how you log setups today, the disciplines you race, and how often you race. We use these to set up the app for you and to understand who uses Stint.
• What you log. Cars, events, tracks you add, sessions, setup values, lap times, results, track conditions, driver feedback, and notes.
• Location, only when you ask. When you tap “Use my location,” your browser shares your position so we can sort tracks by distance or save a new track's location. We save coordinates only for a track you add. We never request location in the background or on page load.
• Team information. If you join or run a team, its name, its members' names and email addresses, and pending invitations.
• Billing information. Payments are handled by Stripe. We never receive or store your full card number. We keep your plan, billing status, renewal dates, and loyalty months, plus the identifiers Stripe gives us.
• Product usage. Which features are used (for example, that a session was saved or two sessions were compared), linked to your account. These events are sent from our servers, not from scripts in your browser, and don't include your notes or setup values.
• Error reports. When something breaks, technical details about the error so we can fix it.

How we use it

• To provide Stint: store your setups, show your history, compare sessions, and fill in weather.
• To run your subscription, including trials, loyalty pricing, pauses, and cancellations.
• To send service emails: confirming your account, resetting your password, team invitations, trial reminders, price changes, and receipts.
• To send occasional product updates to subscribers. You can unsubscribe from these at any time using the link in the email; service emails will still arrive.
• To understand how Stint is used, fix problems, and decide what to build next.
• To prevent abuse and keep the service secure.

Who can see your data

Everything you log belongs to the team it was logged in. Every member of that team can view and edit the team's cars, events, and sessions, and sees who made each change. Team owners can see the names and email addresses of members and people they've invited. Nothing is public.

Services that help us run Stint

We share data with these providers only so they can run parts of Stint for us. They are not allowed to use it for their own purposes.

• Supabase: database and sign-in (data stored in the United States).
• Vercel: hosting the app.
• Stripe: payments and subscriptions.
• Resend: sending email. For subscribers, Resend also holds a contact record with your name, email, plan, price, renewal date, and team name, so we can send service and product updates.
• PostHog: product usage analytics.
• Sentry: error reports.
• Open-Meteo: weather. We send only a track's coordinates and the session time, never who you are.
• Google: only if you choose “Continue with Google” to sign in.

We may also disclose information if the law requires it, to protect people's safety, or as part of a sale or merger of Stint, in which case this policy would continue to apply to your information.

We do not sell your personal information and we do not share it for advertising.

Cookies and browser storage

Stint uses only the cookies it needs to work: to keep you signed in and to carry your onboarding answers or an invitation through sign-up. Your browser also stores your theme choice and unsaved session drafts, so nothing you've typed is lost if your connection drops. We don't use advertising cookies or third-party trackers.

How long we keep it

We keep your data while your account exists. If your subscription ends or is paused, your history stays available to view; we don't delete it because you stopped paying. Things you delete in the app are hidden from you and your team; we permanently remove them when you ask us to delete your account.

To delete your account and personal information, email support@stintracing.app from the address on your account. Sessions you logged in someone else's team stay with that team, without your account attached. Copies in our database backups disappear as those backups expire, and we keep billing records as long as tax law requires.

Your choices and rights

• Update your name and theme in Settings at any time.
• Ask us for a copy of your data, to correct it, or to delete it by emailing support@stintracing.app. Team-plan owners can also export their team's sessions to CSV.
• Unsubscribe from product updates with the link in any of those emails.
• Turn off location for Stint in your browser settings; you can still pick tracks from the list.

Depending on where you live, you may have additional rights under local law. We'll honor them, and we won't treat you differently for using them.

Security

Your data travels over encrypted connections. Sign-in sessions are kept in secure cookies that page scripts can't read, and the app sends no API keys to your browser. Access to your team's data is enforced by the database itself. No system is perfectly secure, but we work to keep yours safe and will tell you if a breach affects you.

Children

Stint isn't meant for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has an account, email support@stintracing.app and we'll delete it.

Changes to this policy

If we make a significant change, we'll email account holders or show a notice in the app before it takes effect. The effective date at the top always shows the latest version.

Contact

Questions or requests about your privacy: support@stintracing.app. Stint is operated from the United States.