Privacy Policy
Every competitive sim racer knows that telemetry and car setup data are sacred. Your braking points, throttle traces, driving style — and especially your setups — are the difference between winning and losing a race. They are yours and yours alone.
AB Racing Line analyses everything locally on your own PC. Your telemetry files (.ibt) and your setup files are never uploaded, never stored on our servers, and never seen by anyone — including us.
Three things do leave your PC, and we would rather tell you plainly than make a promise that sounds better than it is:
- To write your coaching in plain English, a short summary of the session is sent to our server, which passes it to Anthropic to generate the text. It contains your lap time and scores, your driving-style profile and per-corner statistics; any requests you made at a corner or for the whole car, any settings you asked us to keep and anything you told us about the car; the setup changes the app is recommending for your next run, and why each one is there; and a short history of your earlier sessions with the same car at the same track — your lap-time and score trends, the coaching you were given, and the setup changes we recommended (for example “Rear ARB: 4 → 6”). It never contains a telemetry file or your setup file. We do not store that summary, and it is not shown to anyone.
- To understand what you type about the car — only when you press Save in a corner box, or send what you typed in the box on Your Car Setup where you tell us how the car felt — your words, the names and current values of your car's setup settings (so we can tell what “keep TC at 3” refers to) and this session's list of corners are sent to our server, which passes them to Anthropic to turn them into requests. Nothing is saved until you confirm it on screen, and the requests you confirm are stored on your PC. We keep a count of how many messages you send, for the monthly allowance in our Terms — never the words. Your setup file itself is never sent, only the names and values of its settings, for that one message.
- To draw the map under your track map, the app downloads map pictures from Esri the first time a circuit is shown (from OpenTopoMap instead, if you choose the Terrain style) and keeps them on your PC after that. Like any download, the request shows them your IP address and the piece of map asked for, so which circuit. It contains nothing about your driving, and it goes straight to the map provider, never to us.
This is not a legal technicality. It is the entire reason this app was built this way. As a sim racer myself, I would never build a product that hands your competitive advantage to anyone else.
I built AB Racing Line as a sim racer, for sim racers. I am 100% committed to protecting your privacy.
I will never sell, rent, share, or trade your personal data with any third party — not advertisers, not data brokers, not anyone. Your data exists for one purpose only: to make the app work for you. That is a personal promise, not just a legal obligation.
— Raul, Founder of AB Racing Line
Who we are
AB Racing Line is operated by Raul (trading as AlienBlade), based in the United Kingdom. We provide an AI-powered race engineering desktop application for iRacing simulator users.
For any privacy-related questions, contact us at raul@alienblade.co.uk.
What data we collect and why
We collect only the minimum data needed to provide the service. Here is exactly what we hold and why:
| Data | Why we collect it | Legal basis (GDPR Art. 6) |
|---|---|---|
| Email address | Account identity, login, billing communications from Stripe | Contract performance |
| First and last name | Personalising your account dashboard | Contract performance |
| iRacing username | Optional — for future leaderboard features | Consent (you provide it voluntarily) |
| Password (hashed) | Securing your account. Stored as a bcrypt hash only — we cannot read your password | Contract performance |
| Stripe customer ID & subscription status | Validating your subscription on app startup and managing billing | Contract performance |
| PC hardware fingerprint | One-device licence enforcement — a one-way hash of your MAC address, CPU ID, and hard drive serial. We cannot recover these values from the hash | Legitimate interest (licence protection) |
| Which car and track you analysed | Each time the app writes your coaching, or reads a message you typed about the car, we log the car, the track, which of the two it was, the size of the request and what it cost us — so we can enforce fair-use limits and know what the service costs to run. No lap times, no telemetry, no coaching text and none of your words are kept — just which car and track, and when | Legitimate interest (running and protecting the service) |
| Name and email of anyone we issue an access code to | Only if you were sent a tester or complimentary code. We keep the code, who it went to and a short note of why, so we can honour it and see whether it was used | Legitimate interest (issuing and honouring access codes) |
| Anything you send us through the feedback form, in the app or on this website | Only if you choose to use it. Sending a bug report, feature request or question emails us your message and, so we can reply to you, the name and email address on your account (from the website: the email address you give us, and your account's if you are signed in), plus the app version and your operating system — and, if you attach one, a screenshot. It arrives in our support inbox and goes nowhere else. Please note a screenshot captures whatever was on your screen at the time, so have a quick look before you attach it and leave out anything you would rather we did not see — we only need the app | Your request (we are acting on something you asked us to look at) |
| Subscriber number | Computed from your signup date — used for community status and tier pricing | Contract performance |
We do not collect your iRacing telemetry files, your setup files, your lap times or your driving data. Those live on your machine and stay there — the only record we keep of a session is the car and track named in the table above. The two exceptions that reach us are set out at the top of this page: a session summary is sent to write your coaching, and what you type about the car is sent to be understood. Neither is stored, and neither is your setup file or a telemetry file. (The third thing listed there, the map pictures, is a download straight from the map provider and never reaches us.)
Who we share data with
We never sell, rent, or share your personal data for commercial purposes. We use a small number of trusted technology providers to operate the service:
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing and subscription management | Email address, payment method (handled entirely by Stripe — we never see your card number) |
| Supabase | Secure database hosting (EU-West region, Ireland) | All account data stored in our database |
| Render.com | Backend API hosting | No personal data stored — processes requests in transit only |
| Vercel | Website hosting | IP address (standard web server logs, not retained by us) |
| Resend | Email delivery — welcome emails, billing alerts, access codes, and delivering your feedback-form messages to our support inbox | Email address and email content, including any screenshot you attach to a bug report |
| Anthropic (USA) | Writes your corner-by-corner coaching in plain English, and turns what you type about the car into requests you confirm | A summary of the session — lap time and scores, driving-style profile, per-corner statistics, your requests (at a corner or for the whole car), the settings you asked us to keep and anything you told us about the car, the setup changes the app is recommending for your next run, and a short history of your earlier sessions with the same car at the same track, including the setup changes we recommended. When you type about the car: your words, your setup's setting names and current values, and the session's corner list. No telemetry file and no setup file. We do not store any of it |
| Esri (USA) | The satellite, street and dark maps under the track map | Your IP address and the piece of map being drawn (so which circuit), the first time a circuit is shown — the pictures are kept on your PC after that. No account data and nothing about your driving |
| OpenTopoMap | The Terrain map style, only if you choose it | Your IP address and the piece of map being drawn, as above |
Your account data and everything in our database is stored in the EU (Ireland). Two providers are based in the United States. Anthropic processes your session summary and what you type on our instructions, as our processor. Their data processing addendum incorporates the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, and their terms state they do not train their models on customer content. Esri serves the map pictures; it states that it is certified under the EU-U.S. Data Privacy Framework and its UK Extension (see Esri's privacy statement).
OpenTopoMap is a volunteer-run map service that we have no contract with. If you would rather it never saw your IP address, use one of the other map styles. Every other provider is contractually bound to process your data only for the purposes listed above.
How long we keep your data
We keep your account data for as long as your account is active.
There is no grace period, no archive and no anonymised copy kept back for analytics. The moment you confirm, we erase your name, email, iRacing username, password, Stripe customer ID, your registered PC and its hardware fingerprint, the record of which cars and tracks you analysed, any laps you had chosen to share, and the name and email attached to any access code you were issued. We keep none of it, because we have no use for it.
Because it cannot be undone, the app asks you to type delete my account forever before it will go ahead.
There is one exception, and we would rather name it than let you find it. UK law requires us to keep a record of payments for 6 years, so an anonymised record of your subscription survives — amounts and dates, with no name and no email on it. Separately, Stripe keeps its own record of any payment you made, as the payment processor and under their own policy. That one is not ours to delete, and we are not going to pretend otherwise.
Two other things are on their own clock, because they are not tied to an account:
| What | How long we keep it |
|---|---|
| Name and email of anyone issued an access code | Erased 12 months after the code expires or is redeemed — and straight away if you have an account and delete it. The code and its dates stay on after that with no name or email attached, so we can still see what was issued without it identifying anyone. This one has its own clock because codes are often sent to people who never open an account at all |
| Feedback you sent us — your message and any screenshot | It lives in our support inbox while we work on what you raised, and we delete it after 12 months. Ask us at any time and we will delete yours sooner — you do not need to give a reason |
If your subscription lapses without you deleting the account, we keep your data for 12 months in case you want to come back, then delete it automatically.
Your rights under UK GDPR
You have the following rights regarding your personal data. To exercise any of them, email raul@alienblade.co.uk — we will respond within 30 days.
- Right of access (Article 15) — You can request a copy of all personal data we hold about you.
- Right to rectification (Article 16) — You can correct inaccurate data at any time via your account portal.
- Right to erasure (Article 17) — You can permanently delete your account and all associated data via your account portal or by emailing us. We action this immediately.
- Right to data portability (Article 20) — You can request your data in a structured, machine-readable format (JSON).
- Right to object (Article 21) — You can object to processing based on legitimate interest (e.g. PC fingerprinting). We will review and respond within 30 days.
- Right to restrict processing (Article 18) — You can ask us to pause processing of your data while a dispute is resolved.
- Right to lodge a complaint — You can complain to the UK Information Commissioner's Office (ICO) at any time.
How we protect your data
We take security seriously:
Passwords are hashed with bcrypt (cost factor 12) before storage. We cannot read your password — only verify it. It is never logged or transmitted in plain text.
PC fingerprints are stored as one-way SHA-256 hashes. The original hardware identifiers cannot be recovered from the stored hash.
All communication between the app, website, and our servers uses HTTPS/TLS encryption.
Database access is restricted to the backend API using row-level security. No direct public database access is possible.
Payment data is handled entirely by Stripe — we never see or store your card number, CVV, or full billing details.
Cookies and local storage
The AB Racing Line website uses no advertising cookies and no tracking pixels.
The account portal stores your login token in browser localStorage on your device so you stay signed in between visits. This token contains only your user ID — no personal data. You can clear it at any time by signing out or clearing your browser storage.
The desktop app stores your authentication token in a local config file on your PC. If you enable "Remember me" when signing in, your password is stored in Windows Credential Manager — the same OS-level encrypted store used by Chrome and Outlook. Your password is never transmitted anywhere except to our own login server over HTTPS, and is never stored on our servers. You can remove it at any time by signing out of the app.
Google Analytics
We use Google Analytics 4 to understand how visitors use our website — which pages are viewed, how long people stay, and where traffic comes from. This helps us improve the site. No personally identifiable information is collected.
Analytics cookies are only placed after you explicitly accept via the cookie consent banner. If you decline, no analytics data is collected. You can change your preference at any time by clearing your browser's localStorage (key: ab_analytics_consent).
Google Analytics data is processed by Google LLC under their own privacy policy. For more information, see Google's Privacy Policy.
Children's privacy
AB Racing Line is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it immediately.
Changes to this policy
If we make material changes to this policy, we will notify active subscribers by email before the changes take effect. The "last updated" date at the top of this page will always reflect the current version.
For any privacy questions, data requests, or to exercise your rights, contact:
Raul — AB Racing Line
raul@alienblade.co.uk
We aim to respond within 30 days. For urgent data erasure requests, we action same day.