Privacy Policy

We collect the minimum data necessary to run the platform:

• Account information — name, email, country, and stance when you create an account (via Google or email sign-up).
• Profile data — avatar photo, birth date, and modality preferences you choose to add.
• Race data — event registrations, qualifying times, bracket results, and championship standings generated through your participation.
• Technical data — basic server logs (IP address, browser type) processed by our hosting provider for security and reliability.

Your data is used exclusively to operate the platform:

• Authenticate your account and maintain your session.
• Display your rider profile, race history, and statistics.
• Run events — registrations, qualifying, brackets, results, and championship standings.
• We do not send marketing emails. We may contact you for account-related issues only.

r4wRun uses only essential cookies required for the application to function:

• Authentication cookies — session tokens set by Supabase to keep you logged in. These are strictly necessary and cannot be disabled.
• We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.

Because we only use strictly necessary cookies, no cookie consent banner is required under EU ePrivacy regulations.

We rely on the following services to operate the platform:

• Supabase — authentication, database, and file storage. Your account data and race data are stored in Supabase's infrastructure.
• Cloudflare — hosting and content delivery. Cloudflare processes requests to serve the application and may set a technical cookie for bot protection.
• Google OAuth — if you choose to sign in with Google, Google processes your authentication. We only receive your name and email.

We do not sell, share, or provide your data to any other third parties.

We retain your data as follows:

• Account and profile data is kept as long as your account exists.
• Race results and event data are kept indefinitely as part of the competition record.
• You can request deletion of your account and personal data at any time by contacting us.
• Server logs are automatically rotated and deleted by our hosting providers within their standard retention periods.

If you are in the European Economic Area (EEA), you have the following rights under GDPR:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct any inaccurate personal data (you can also edit your profile directly).
• Erasure — request deletion of your personal data and account.
• Portability — request your data in a machine-readable format.
• Objection — object to processing of your personal data.

To exercise any of these rights, contact us at the email below.

For any privacy-related questions or requests:

Email: info@r4wrun.com