Privacy Policy

Account email (FASTLAP account)
When you create a FASTLAP account on the sign-in page, we collect your email address. We use a passwordless “magic link” flow: you enter your email, we send you a one-time link, you click it to sign in. Authentication is handled by Supabase Auth, which stores your email and a session record. We do not collect, store, or accept passwords. If you also tick the newsletter checkbox at sign-in, your email is additionally sent to Kit (see below).

Analytics data (Google Analytics 4)
We use Google Analytics to understand how visitors use the site. GA4 automatically collects: pages visited, time on site, general geographic region (country/city), device and browser type, and referring website. Your IP address is anonymized before storage. This data is aggregate and not linked to your account.

Email address (optional — Kit newsletter)
If you choose to subscribe via any newsletter sign-up form (or the opt-in checkbox on the sign-in page), your email address is sent directly to Kit (formerly ConvertKit), our email marketing provider. We use this solely to send you FASTLAP updates and NASCAR content. You can unsubscribe at any time via the link in any email.

Contact form submissions
When you use the contact form, we collect your name, email address, subject, and message. The submission is delivered to us by Resend, our transactional email provider, and lands in our inbox. We use it solely to respond to you.

What we do NOT collect
We do not collect or store passwords, payment information, government identifiers, precise location, or any other personally identifiable information beyond what is described above. We do not share or sell any of it.

Authentication cookies
If you sign in to a FASTLAP account, Supabase Auth sets an HTTP-only, secure session cookie (typically prefixed sb-) so we can keep you signed in across page loads. The cookie contains an opaque session token, not your email. It is cleared when you sign out.

Analytics cookies
Google Analytics sets first-party cookies (e.g. _ga, _ga_*) to distinguish visitors and sessions. These cookies persist for up to 2 years. Kit may set cookies if you interact with a newsletter sign-up form. We do not use any other tracking cookies or third-party ad networks.

Local storage
We use your browser's local storage to remember small UI preferences — e.g., whether you have dismissed the simulator tutorial or the email-capture banner. No personal data is stored in local storage. You can clear it at any time via your browser settings.

You can disable cookies in your browser settings or use a browser extension such as uBlock Origin to opt out of analytics tracking. Note that disabling the auth cookie will sign you out.

• To authenticate your FASTLAP account via magic link and keep you signed in
• To send you NASCAR research updates if you subscribed to the newsletter
• To respond to messages you send via the contact form
• To understand which pages and features are most useful (analytics)
• We do not sell, rent, or share your data with third parties beyond the services listed above
• We do not use your data for advertising, behavioral profiling, or training AI models

Depending on your location you may have rights under GDPR (EU/UK) or CCPA (California), including the right to access, correct, or delete your personal data.

• Account & data deletion: email us at info@fastlap.io from the address tied to your account and we will delete your account and any associated data within 30 days.
• Sign out: use the menu in the top-right of the site to end your session.
• Newsletter unsubscribe: click the unsubscribe link in any email, or contact us.
• Analytics opt-out: use the Google Analytics opt-out browser add-on.
• Cookie removal: clear cookies in your browser settings at any time.

• Account email & session: retained in Supabase Auth until you request deletion. Sessions auto-expire and are refreshed while you remain signed in.
• Newsletter email: retained by Kit until you unsubscribe or request deletion.
• Contact-form messages: delivered to our inbox by Resend; we keep correspondence only as long as needed to address your question.
• Analytics: Google Analytics retains event data for 14 months by default.

FASTLAP is not directed at children under 13. We do not knowingly collect personal information from children.

We may update this policy occasionally. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.

Questions about this privacy policy? Reach us at info@fastlap.io