1. Who we are
Grid to Podium is an independent career mode app for people who race in iRacing. It is run by Grid to Podium Team, a team based in India (“we”, “us”). We decide how your information is used, which makes us the controller of it.
Grid to Podium is a fan project. It is not made, endorsed or supported by iRacing.com Motorsport Simulations, LLC, and we don't share your information with iRacing.
Questions or requests: hello@gridtopodium.com.
2. The short version
- We collect what we need to run your account, your careers and the waitlist.
- We never ask for your iRacing login and we don't connect to your iRacing account.
- Results files you upload are read in your browser. The file itself never reaches us.
- No advertising, no analytics, no tracking cookies, and we don't sell or share your information.
- You can delete a career at any time, and ask us to delete everything else.
3. What we collect, why, and for how long
| What | Where it comes from | Why we use it | Legal basis (UK and EU) | How long we keep it |
|---|---|---|---|---|
| Your name, email address, Google account ID and the link to your Google profile picture | Where it comes fromGoogle, when you sign in | Why we use itTo create your account, sign you in and keep your careers linked to you | Legal basis (UK and EU)Performing our agreement with you | How long we keep itUntil you delete your account |
| Careers: career name, driver name, date of birth, home region, discipline, the tracks you own, and everything that happens in your career (results, standings, money, messages from your manager) | Where it comes fromYou, and the app | Why we use itTo run and save your careers | Legal basis (UK and EU)Performing our agreement with you | How long we keep itUntil you delete the career or your account |
| Your own results from uploaded iRacing results files: finishing position, starting position, incidents, laps completed, whether you set the fastest lap, and points | Where it comes fromFiles you choose to upload | Why we use itTo record your race in your career | Legal basis (UK and EU)Performing our agreement with you | How long we keep itAs part of the career |
| Bug reports: what you write, your account ID and, if you leave them ticked, technical details (page, browser, screen size, theme, app version, career, series and the date in your career) | Where it comes fromYou | Why we use itTo find and fix problems | Legal basis (UK and EU)Our legitimate interest in keeping the app working | How long we keep itUp to 24 months after you send it |
| Waitlist: email address, how you heard about us (optional), when you joined and which version of this policy you saw | Where it comes fromYou | Why we use itTo tell you when there's a place for you, and to let you sign in once you're invited | Legal basis (UK and EU)Your consent | How long we keep itUntil you've been invited and had the chance to set up an account, you ask us to remove it, or we close the waitlist, and no longer than 24 months |
| Access: your email address, whether you asked for access (by joining the waitlist or trying to sign in), whether it was approved, rejected or revoked, when, and which of our admins decided, whether and when we emailed you that you were approved, and when you last used the app | Where it comes fromYou, when you join the waitlist or sign in, and us | Why we use itTo decide who can sign in during the invite-only test, and to see how many people are using the app | Legal basis (UK and EU)Our legitimate interest in running a small, invite-only test | How long we keep itWhile you have access. A request that isn't approved is deleted no later than 24 months after your latest request or our decision |
| Admin log: a record of each change our admins make to access and admin rights, with the email or account it applied to | Where it comes fromUs | Why we use itTo keep track of who changed what, and to keep the service secure | Legal basis (UK and EU)Our legitimate interest in protecting the service | How long we keep itUp to 24 months after the change |
| Abuse protection: a scrambled form of your network address (for the waitlist) and a count of recent reports per account (for bug reports) | Where it comes fromYour browser's connection | Why we use itTo stop spam and automated sign-ups | Legal basis (UK and EU)Our legitimate interest in protecting the service | How long we keep itDeleted automatically within 24 hours |
| Request logs: network address, browser type, the page requested, time, and errors. Our own logs record account and career IDs, but never your email | Where it comes fromYour browser's connection | Why we use itTo run, secure and debug the service | Legal basis (UK and EU)Our legitimate interest in running a secure service | How long we keep itUp to 30 days |
Driver name and date of birth. The app asks for your iRacing display name, so AI races feel like your own career, and for your date of birth, so your driver ages realistically. Both stay in your career. Neither is shown publicly.
Uploaded results files. iRacing results files list every driver in the session. Your browser reads the file. We keep only your own row, plus updated points for the AI drivers already in your career. Other drivers' names may appear on your screen while you match your result, but they are not saved or sent to us. Please only upload results from your own sessions.
Bug reports and GitHub. We store each bug report and also send a copy to a private GitHub repository, where we track fixes. The GitHub copy never includes your name, email or account ID. It uses a scrambled reference that can't be turned back into your account ID. Please don't put personal details in a bug report.
The email when you're approved. When we approve your access, we email you once to say you can sign in, and again only if one of our admins resends it. We send it through Resend, our email provider, and keep a record that it was sent (or couldn't be) with your access record. We don't send newsletters or marketing email, and the email has no tracking.
What we don't collect. We don't collect your iRacing password, iRacing customer ID, payment details, precise location, contacts or advertising identifiers.
4. Cookies and storage in your browser
We only use what the service needs to work. There are no analytics, advertising or third-party cookies, so we don't show a cookie banner.
| Name | Type | Purpose | How long |
|---|---|---|---|
| next-auth session token | TypeCookie | PurposeKeeps you signed in | How long30 days, renewed as you use the app |
| next-auth CSRF, callback, PKCE and state cookies | TypeCookies | PurposeProtect sign-in against forgery | How longUntil you close the browser, or 15 minutes |
| gtp-theme | TypeLocal storage | PurposeRemembers light or dark mode | How longUntil you clear it |
| gtp-active-career | TypeSession storage | PurposeRemembers which career is open | How longUntil you close the tab |
5. Who else handles your information
We use these providers to run Grid to Podium. They process information only on our instructions:
- Vercel Inc. (United States): hosts the website and keeps request logs.
- MongoDB, Inc. (MongoDB Atlas, hosted on Amazon Web Services in the United States): our database.
- Google LLC (United States): sign-in. Google's own privacy policy covers your Google account.
- GitHub, Inc. (United States): private bug tracker. It receives bug reports without your name, email or account ID.
- Resend (United States): sends the email telling you your access is approved. It receives your email address and that message, stored in the United States.
We may also share information if the law requires it, to protect people's safety or our rights, or as part of selling or reorganising the project. In a sale, we would tell you first.
We don't sell your personal information, we don't share it for advertising, and we don't use it to build profiles for automated decisions about you.
6. International transfers
Our team is based in India, and our providers store information in the United States. Wherever you use Grid to Podium from, your information is stored in the United States and may be accessed from India, where data protection law may differ from yours. Where our providers move information between countries, they use recognised safeguards such as the EU Standard Contractual Clauses, the UK addendum or the EU-US Data Privacy Framework.
7. Your rights
Depending on where you live, you can ask us to:
- give you a copy of your information, in a portable format;
- correct it;
- delete it;
- restrict or object to how we use it;
- withdraw your consent at any time (for example, to leave the waitlist).
You can delete a career yourself from the Careers screen. For anything else, email hello@gridtopodium.com. We may ask you to confirm the request from the email address on your account. We reply within one month, and we don't charge for this.
If you're in the UK, the EU or the EEA, you can also complain to your data protection authority. We'd appreciate the chance to sort it out first.
United States. We don't sell or share personal information as defined by California and other state privacy laws, and we don't use sensitive personal information to infer things about you. You have the rights above whichever state you live in, and we won't treat you differently for using them. We don't respond to “Do Not Track” signals, because we don't track you across sites in the first place.
8. Age
Grid to Podium is for people aged 16 and over. We don't knowingly collect information from anyone younger. If you think a child under 16 has given us information, email hello@gridtopodium.com and we'll delete it.
9. Security
We use HTTPS throughout, limit who can reach the database, keep secrets out of our code, and store network addresses only in scrambled form. No service is perfectly secure. If a breach affects your information, we'll tell you and the authorities where the law requires.
10. Changes to this policy
If we change this policy, we'll update the date at the top. For important changes, we'll tell you in the app or by email before they take effect.
11. Contact
Grid to Podium Team. Email: hello@gridtopodium.com.
See also our Terms of Service.