Skip to content

Privacy Policy

Effective 27 October 2026

This policy explains what personal information Pitwall collects when you use Pitwall, why, who else handles it and what you can do about it. We are responsible for this information.

It covers people with a Pitwall account, drivers who race on servers hosted with Pitwall (even if they never sign in), and visitors to our website.

What we collect

  • Account: when you sign in with Discord we receive your Discord user ID, username, display name, avatar and email address. We also store your language and time zone settings.
  • Steam, if you link it: your SteamID and your public Steam name and avatar. You sign in on Steam's own page; we never see your Steam password.
  • Racing on a Pitwall server: your in-game name, SteamID and country as the game reports them, your car, lap and sector times, positions, penalties, incidents and collisions, in-game chat messages and connection quality. When telemetry is on for that server, also car data such as position on track, speed, throttle, brake, steering and gear.
  • Billing: Polar tells us your subscription status, plan and billing email. Polar handles your card; we never see card numbers.
  • Security: the IP address and browser of each signed-in session, the IP address behind staff actions in our audit log, a one-way hash of the IP address of anyone who reports a community, and service logs that can include IP addresses.
  • Community content you add, such as community names, descriptions, images and events, and anything you send to support.
  • Website analytics: see Cookies and analytics.

How we use it

  • To run your account, your servers and your community pages.
  • To show live timing, results, leaderboards and driver pages, as each community's settings allow.
  • To post results and reminders to Discord channels a community has connected.
  • To bill you (through Polar), give support and keep Pitwall secure, for example to stop abuse and investigate problems.
  • To understand, in aggregate, how the website is used so we can improve it.

We do not sell personal information and we do not use it for advertising.

If you are in the EU or UK, our legal bases are: performing our contract with you (your account and servers), our legitimate interests (showing race results to the communities drivers race with, security, aggregate analytics), your consent (linking Steam) and legal obligations (tax and accounting records).

What is public

A community that its owner makes public shows results with drivers' in-game names, lap times and incidents, and a page for each driver with their history in that community. Results posted to Discord show the same. Public pages and downloads never show SteamIDs.

Community pages are hidden from search engines unless the community owner turns that on. Driver pages are never shown to search engines unless the driver opts in.

If you link your Steam account you can make your driver profile private: public results then show "Private driver" instead of your name.

How long we keep it

  • Account details: until you delete your account (Account settings). Deleting it removes your Discord details, email address, Steam link and sessions. You cannot delete it while it still pays for a server or is the only owner of an organisation with other members.
  • Race data (results, laps, telemetry, chat): kept with the community it was recorded for, including after a server is removed or a subscription ends, so league history stays intact. We delete it on request: write to [email protected].
  • Sign-in sessions expire after 30 days.
  • Billing records: as long as tax and accounting law requires.
  • Audit and security records: as long as needed to keep Pitwall secure and resolve disputes.
  • Backups: deleted data can remain in our encrypted backups for up to 14 days.

Who handles it for us

We use these providers to run Pitwall. They only get what they need for their part.

ProviderWhat for
Polar (polar.sh)Reseller and Merchant of Record: checkout, payments, tax, receipts and invoices
CloudflareWebsite delivery, caching and protection; all website traffic passes through it
Grafana Labs (Grafana Cloud)Service metrics and logs, which can include IP addresses, SteamIDs and in-game names
DiscordSign-in, the Pitwall bot that posts to community channels, and our internal alerts
Valve (Steam)Linking your Steam account and reading your public Steam profile
Infrastructure providers in France, Australia and the United StatesThe servers that run Pitwall, its databases and the game servers

We may also share information when the law requires it, or to protect people from harm.

Where it is stored

Our main databases are in France. Game servers run in the region you choose, and some of the providers above process data in the United States and elsewhere. Where the law requires it, we rely on safeguards such as standard contractual clauses for these transfers.

Cookies and analytics

We only use cookies that Pitwall needs to work. There are no advertising or tracking cookies, so there is no cookie banner.

CookiePurposeLasts
pitwall_sessionKeeps you signed in30 days
pitwall_csrfProtects forms against cross-site request forgeryUntil you close the browser
pitwall_langRemembers the language you picked1 year
slp_oauth_state, pw_discord_stateSecures Discord sign-in and connecting the Discord bot15 minutes or less
pitwall_session_previewOnly set by a preview link we send to testers90 days

Your browser also stores a few settings locally, such as light or dark theme and your preferred form layout. They never leave your device.

For website statistics we use Plausible Analytics, running on our own server. It sets no cookies and stores no personal information: visits are counted with a daily-changing anonymous identifier. It runs only on public pages, not in the server manager.

Your choices and rights

You can see and change most of your information in Account settings, unlink Steam, make your driver profile private, turn telemetry off for your servers and delete your account.

You can also ask us for a copy of your information, to correct it, to delete it (including race data recorded about you as a driver) or to stop using it. Write to [email protected]. We may need to confirm it is you, and we reply within 30 days.

If you are unhappy with our answer you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). In the EU or UK you can complain to your local data protection authority.

Children

Pitwall is not meant for children under 13, and we do not knowingly collect their information. If you think a child has given us information, write to [email protected] and we will delete it.

Changes to this policy

We will update this policy when what we collect or how we use it changes. The date at the top shows when it last changed, and we will tell account holders about significant changes in the panel and on the Pitwall Discord.

Contact

Contact:[email protected]