Race Stencil
Privacy Policy
This document is a draft. The operator details and governing law have not been filled in yet, and it has not been reviewed by a lawyer.
Effective date: 2026-08-17
This policy explains what [legal entity name] ("we", "us") collects when you use Race Stencil, why, and what you can do about it. It covers both the organizations that hold accounts and the drivers who use a shared link without one.
The short version
Drivers do not need an account and we do not build profiles of them. A livery you upload is deleted as soon as the finished file has been produced, and the finished file itself is deleted automatically about 60 minutes later. We do not sell data to anyone, and we do not use it for advertising.
Who controls your data
[legal entity name] is the data controller for this service.
- Postal address: [registered address]
- Email: support@racestencil.com
If you are a driver, note that the organization running your championship is a separate controller for anything you send them directly. This policy covers only what happens on Race Stencil.
What we collect, and why
If you create an organization account
| Data | Why we need it |
|---|---|
| Name and email address | To identify your account, sign you in, and contact you about the service |
| Password | Stored only as a one-way hash — we cannot read it |
| Organization name, URL name, description, logo, banner, website and Instagram links | These make up your public profile, which you choose to publish |
| Sign-in records: IP address, browser user agent, time, and whether the attempt succeeded | To protect accounts against password guessing, and to help you and us investigate suspicious access |
If you are a driver using a shared link
| Data | Why we need it |
|---|---|
| The livery file you upload | Solely to apply the organization's overlay to it |
| The finished file | So you can download it |
| Your IP address, and which design you generated | To rate-limit abuse of an endpoint that is open to anyone, and to give organizations a count of how many liveries were produced |
We do not ask drivers for a name, an email address, or an account, and we do not link generations to any identity.
How long we keep things
- Uploaded liveries are deleted as soon as the finished file exists.
- Generated files are deleted automatically, roughly 60 minutes after they are created. Download and keep your own copy.
- Generation records (timestamp, IP address, which design) are kept while the organization's catalog exists, and are deleted with it.
- Sign-in records are kept while the account exists.
- Account and organization data is kept until the account is closed, then deleted.
Cookies and local storage
We use a session cookie to keep you signed in, and a "remember me" cookie if you tick that box. Both are strictly necessary for the service to work and are not used for tracking.
We also store small preferences in your browser's local storage — whether the dashboard sidebar is collapsed, and whether you have dismissed an explanatory dialog. These never leave your device and are not sent to us.
We do not use analytics or advertising cookies.
Services we rely on
Using Race Stencil means your browser also contacts these third parties, which will see your IP address:
- Cloudflare Turnstile — the human check on the registration form only. Cloudflare's privacy terms apply to that interaction.
- Google Fonts — the site's typeface is loaded from Google's servers.
- jsDelivr and the Tailwind CDN — the site's stylesheet and interactive scripts.
We do not send them any of your account data. Links out to a simulator's own tools, such as Trading Paints, are ordinary external links; once you follow one, that site's policy applies.
Where your data is processed
Our servers and the services listed above may process data outside your country, including in the United States. Where that applies to personal data protected under EU or UK law, we rely on the standard contractual clauses those providers publish.
Your rights
Depending on where you live, you may have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. You also have the right to complain to your local data protection authority.
Write to support@racestencil.com and we will respond. If you hold an account, you can already edit most of your data yourself in Settings.
Drivers: because a generation record holds only an IP address and no identity, we may not be able to locate your records from an email request alone.
Children
Race Stencil is intended for adults organizing and taking part in sim racing. It is not directed at children, and we do not knowingly collect data from anyone under 16.
Security
Passwords are hashed. Uploaded files are stored outside the public web root and served only through the application. Sign-in attempts are rate-limited and logged. No system is perfectly secure, but we take reasonable measures appropriate to the data we hold.
Changes
If we change this policy we will update the effective date above, and for anything significant we will tell account holders by email.
Contact
Questions about this policy: support@racestencil.com