Privacy Policy

1. Data controller

F1 Legend Sim is a personal fan project, not affiliated with Formula 1® or the FIA. For any privacy enquiry, write to danielcangomez@gmail.com.

2. Data we collect

• Authentication data: when you sign in with Google or GitHub we receive your email address and profile name. We never store passwords.
• Simulation history: the simulations you run (drivers picked, season, results) are stored against your account for the leaderboard and the achievements.
• Technical data: IP address (for rate limiting, not persisted), browser and operating system (in Railway server logs).

3. Cookies

We use the following kinds of cookies:

• Session cookies: an encrypted session cookie keeps you signed in. Without it the service does not work.
• Preference cookies: we keep your language choice (ES/EN) in the browser’s localStorage.
• Advertising cookies (Google AdSense): third-party vendors, including Google, use cookies to serve ads based on your prior visits to this or other websites. Google uses advertising cookies — among them the DoubleClick (DART) cookie — which enable it and its partners to serve you ads based on your browsing.
• How to opt out: you can refuse them from this site’s consent banner, turn off Google’s personalised advertising at adssettings.google.com or opt out of other third-party vendors’ cookies at aboutads.info/choices.

4. Purpose of processing

• Providing the simulation service and managing your account.
• Computing the global leaderboard and unlocking achievements.
• Security and abuse prevention (per-IP rate limiting).
• Showing contextual advertising through Google AdSense (when active).

5. Legal basis (GDPR)

• Performance of a contract (providing the service) for account and simulation data.
• Consent for Google AdSense advertising cookies.
• Legitimate interest for technical security data (rate limiting, logs).

6. Third parties

• Google LLC — OAuth authentication and (when active) AdSense. Privacy policy: policies.google.com/privacy
• GitHub Inc. — optional OAuth authentication. Policy: GitHub Privacy Statement
• Railway — hosting infrastructure (servers in the US / EU).

7. Your rights (GDPR)

If you are an EU resident you have the right to access, rectify and erase your data, as well as to data portability and to object to processing. To exercise them, write to danielcangomez@gmail.com. We will delete your account and simulations within 30 days at the latest.

8. Data retention

Account data and simulation history are kept for as long as the account is active. Technical server logs are deleted automatically after 30 days.

9. Changes to this policy

We may update this policy occasionally. The last-updated date appears at the top of this page. Continued use of the service after any change implies acceptance.