Privacy policy

The controller for the processing of personal data on digitaldrivers.club, in the desktop app and on the game servers of Digital Drivers is:

DigitalDrivers - Jörn Szech Rombecker Weg 60 45470 Mülheim an der Ruhr Germany E-mail: [email protected]

We have not appointed a data protection officer, as there is no legal obligation to do so. Please send questions about data protection to the e-mail address above.

We only process the data we need for the club: your Steam account for signing in, your laps on our servers for the lap records and, if you take out a supporter subscription, the data of that contract.

We only receive telemetry from the desktop app with your express consent, and you can withdraw it at any time.

There is no tracking, no analytics, no advertising and no sharing with advertising partners. We do not sell data.

The website, the database and our game servers run on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centres in Germany. Hetzner processes the data on our behalf (Art. 28 GDPR).

With every request the server processes technically necessary data: your IP address, date and time, the address requested, the status code, the amount of data transferred and details of your browser and operating system (user agent). We need them to deliver the pages, find faults and fend off abuse, for example by limiting the requests per IP address.

The legal basis is our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR). The website's logs are deleted after 14 days.

We only set cookies that the website technically needs:

nuxt-session keeps you signed in after you sign in. The cookie is encrypted, holds your SteamID, your Steam name, the address of your profile picture and your role, and lasts 30 days or until you sign out.

dd_locale remembers the language you chose.

The website also keeps a few settings in your browser's local storage, for example that you hid the news bar or which updates the desktop app should install by itself. These entries do not leave your device.

The legal basis for storing on your device is § 25(2) no. 2 TDDDG, as it is strictly necessary for the service you asked for; for the processing that goes with it, Art. 6(1)(b) and (f) GDPR. No consent is needed for this. There are no third-party cookies.

You sign in through Steam, a service of Valve Corporation, USA. You enter your password only at Steam; we never see it. Steam confirms your SteamID to us, and through the Steam Web API we read your public profile name and your profile picture.

We store your SteamID, your Steam name, the address of your profile picture, your role in the club (driver, steward or admin), the time of your first and last sign-in and your settings. With these we keep your account, show your name with your laps and give you access to what is there for signed-in drivers, such as the setups and the desktop app. The legal basis is the user relationship (Art. 6(1)(b) GDPR).

When you download cars or setups or install them through the app, we store who got which version when, for the counters on the website and the admins' statistics. If you use the desktop app signed in, we store the app's version per day, so we know which versions are still in use. The legal basis is our legitimate interest in running and developing the service (Art. 6(1)(f) GDPR).

You can delete your account yourself at any time on the "My account" page. We then delete the account with Steam name and profile picture, your telemetry, your settings and your supporter subscription. Your laps stay in the lap records as "Deleted driver", as do the counters of the downloads and the app, each without any link to your SteamID.

Our AC EVO servers are public: you join them through the game's lobby, without an account with us. The game server logs your SteamID, your Steam name, the car and every valid lap with its time and when it was driven. We get this data from the server's log, not from you directly.

The laps make up the public lap records on the website, with Steam name, car, track and time; we do not show the SteamID publicly. The server cards on the website show who is driving right now, and a chat bot names the ten best times in the server's chat when you join.

The legal basis is our legitimate interest in keeping lap records for the drivers on our servers, the core of a sim racing club (Art. 6(1)(f) GDPR). You can object to this at any time (see "Your rights"); we then take your laps out of the lap records. We keep the laps and the game servers' logs as long as the lap records exist.

The desktop app for Windows installs the club cars and setups, starts the game and keeps everything up to date. To do so it loads the website and talks to our platform; what is stored about sign-in and downloads is described above.

The app only sends telemetry if you switch it on on the "Settings" page, for each kind separately:

Live map: while you drive online on our servers, the app sends the positions of the cars your game sees once a second. The live map shows them publicly with the drivers' names, just as every driver sees them in the game. The positions stay in memory for seconds only; the shape of the track learnt from them holds no driver.

Lap summaries: after every lap, lap time, tyre pressures, tyre and brake temperatures, ride heights, fuel use and top speed, plus the name of the loaded setup and, for our cars, their version. Kept 12 months.

MoTeC files: the telemetry files the game writes of your sessions, one per session. Kept until we have evaluated them, 30 days at most.

We use this data only to tune cars and setups. The legal basis is your consent (Art. 6(1)(a) GDPR; for reading data on your device, § 25(1) TDDDG). You can withdraw it at any time with effect for the future by switching it off; "Delete my data" also removes what was already sent. Never sent: anything about your PC, other games, your setup files or your chat.

The AI race engineer (page "Race engineer" in the desktop app) briefs you on a session and answers your questions. Your app works out the report on your PC from the game's MoTeC files; it stays there. Only when you ask for a briefing or a question, and only if you switched on "AI evaluation" on the "Settings" page, does the page send the numbers of that session to our platform: car, track, lap and corner times, brake points, speeds, tyre pressures and temperatures, brake temperatures, fuel, and the best laps of your earlier sessions with the same car on the same track. No name, no SteamID and no raw telemetry are sent.

Our platform passes these numbers, your question and the race engineer's notes on you to Anthropic PBC, USA, which runs the AI model on our behalf (Art. 28 GDPR). Anthropic is certified under the EU-U.S. Data Privacy Framework; under its commercial terms it does not use the data to train its models and keeps API requests only for a limited time to run the service and prevent abuse.

We store the conversation (the session's numbers and what was said), the tokens and cost of each call with the litres it took from your tank, and the race engineer's notes on you (your profile and work items, which you can see, edit and delete on the page). The legal basis is your consent (Art. 6(1)(a) GDPR), which you withdraw at any time by switching "AI evaluation" off. "Delete my data" removes the conversations, their usage and the notes; the litres taken stay in your tank's ledger, as the contract of the tank needs them.

The coach (page "Coach" in the desktop app) shows your driver profile from the evaluated sessions; it is worked out on your PC. Only if you switch on "Coach history" on the "Settings" page does the page upload a summary of about 1 KB to our platform after every session: car, stage, track, time, laps, best lap and theoretical best, coasting, lock-ups and wheelspin, tyre pressures at the end, the highest brake temperature, the fuel at the start and the numbers of the corners where most of it happened, stored under your SteamID. No curves over the lap and no raw data. Purpose: your history on every PC and, later, the comparison with the club. The legal basis is your consent (Art. 6(1)(a) GDPR); switching off stops new uploads, "Delete my data" or deleting your account removes the summaries.

Your browser loads profile pictures and the pictures in the AC EVO news directly from Steam's servers (Valve Corporation, USA). Valve receives your IP address and which picture was requested; Valve may process this data in the USA. The news bar shows Kunos' official announcements for AC EVO; our server fetches the texts from Steam without passing on any data about you.

If a news post contains a video, it is embedded in YouTube's privacy-enhanced mode (youtube-nocookie.com), a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The video is only loaded when you open the post. Google then receives your IP address and technical details of your browser, possibly also in the USA; Google is certified under the EU-U.S. Data Privacy Framework.

The legal basis is our legitimate interest in showing profile pictures and the news about the game without copying them (Art. 6(1)(f) GDPR).

If you take out a supporter subscription, we process the data the contract needs: your SteamID, the tier and billing period you chose, the status of the subscription, its start and the end of the paid period, whether you cancelled, the identifiers of your customer and subscription records at Stripe, and the e-mail address you give when paying.

Payment is handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. You enter your payment details (such as card or account number), your name, your billing address and your e-mail address directly at Stripe; we do not receive complete payment details. Stripe processes this data to handle the payment, send receipts and invoices and prevent fraud, and is partly a controller in its own right, for example for fraud prevention and its own legal obligations. Stripe may also transfer data to Stripe, Inc. in the USA, which is certified under the EU-U.S. Data Privacy Framework. Details are in Stripe's privacy policy: https://stripe.com/privacy

The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and, for keeping accounting records, our legal obligation (Art. 6(1)(c) GDPR together with § 147 AO).

If you buy a tank for the AI race engineer, we process the purchase (pack, amount, date, the identifiers of the payment and of the checkout at Stripe) and the ledger of your litres: every purchase, use, refund and chargeback with its litres and date, as the contract and the accounting need it.

If you cancel or withdraw from the subscription, we confirm it to you by e-mail straight away, as the law requires (§ 312k and § 356a BGB). For this we use the e-mail address of your subscription or the address you enter in the cancellation form. We send the e-mails through the delivery service Resend (Resend, Inc., USA) as a processor under Art. 28 GDPR; where data is processed in the USA, this rests on the EU standard contractual clauses. Resend receives your e-mail address and the content of the confirmation. The legal basis is Art. 6(1)(b) and (c) GDPR. We do not send advertising.

If you write to us at [email protected], we process your e-mail address, your name if you give it, and the content of your message to answer your request. Incoming e-mails are forwarded by Cloudflare (Cloudflare, Inc., USA) to our mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); both may also process data in the USA and are certified under the EU-U.S. Data Privacy Framework.

If you write to us on our Discord server (https://discord.gg/n6SU7WRUrE), we see your Discord name, your profile picture and your messages. Discord is operated by Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA, which processes your data as a controller in its own right, also in the USA; details are in Discord's privacy policy: https://discord.com/privacy. The Discord server is a voluntary offer; you can reach us about everything by e-mail as well.

The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract, otherwise our legitimate interest in answering requests (Art. 6(1)(f) GDPR). We delete messages once your request is settled, unless we have to keep them, for example as evidence about a contract.

The supporter badge next to your name is part of what the subscription provides (Art. 6(1)(b) GDPR). Admins can also list drivers as supporters by hand, for example for their help with the club; they carry the badge too (Art. 6(1)(f) GDPR).

On the thank-you page we name supporters with Steam name, profile picture and the month since which they have supported the club; the listing is part of what the subscription provides (Art. 6(1)(b) GDPR) and starts with the subscription. You can switch it off on the "My account" page at any time (Art. 21 GDPR); it then disappears at once.

In the "Cancel contracts here" form we process the e-mail address you enter to find your subscription, carry out the cancellation and confirm it to you. We record cancellations and withdrawals with date and time so we can prove them. To prevent abuse we limit the number of requests per IP address; for this the IP address is held in memory only and not stored permanently. The legal basis is Art. 6(1)(c) GDPR together with § 312k and § 356a BGB, and Art. 6(1)(f) GDPR.

We delete data as soon as we no longer need it for its purpose and no legal obligation to keep it applies:

Account and settings: until you delete the account. Lap records: as long as the lap records exist; after an account is deleted, without any link to your SteamID. Lap summaries: 12 months. MoTeC files: 30 days at most. Live map positions: a few seconds. Coach history summaries: until you withdraw and choose "Delete my data" or delete the account. Website logs: 14 days. Supporter subscription: until the subscription ends and afterwards as long as claims from the contract can become time-barred, as a rule three years to the end of the year. We keep accounting records such as invoices as long as tax law requires, up to ten years (§ 147 AO). Tanks: the ledger of your litres as long as you have an account, and afterwards as the subscription above. Cancellations and withdrawals: three years to the end of the year in which they were received.

You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object: where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

Just write to [email protected]. Much of it you can also do yourself: switch telemetry off and delete it, switch off the listing on the thank-you page, and delete your account.

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

You are not obliged to give us any data. Without signing in with Steam, however, you cannot use what is there for signed-in drivers, and without an e-mail address and payment details you cannot take out a subscription.

We do not use automated decision-making, including profiling (Art. 22 GDPR). Stripe checks payments for fraud automatically; Stripe is responsible for that.

We update this policy when our service or the law changes. The version on this page applies; you can see its date above.