Privacy Policy

1 Information We Collect

Ultimate Timing collects only the information strictly necessary to provide real-time lap timing, automated heat scoring, championship management, and event pre-registration:

• Account & Racer Identity: When you sign in using Google or email, we receive your name, email address, and profile photo avatar to authenticate your account and display your driver profile.
• Telemetry & Garage Information: Personal transponder numbers, chassis nicknames, car classes, lap times, timestamps, stint history, heat assignments, qualifying times, and championship points.
• Track & Club Details: For track owners, we store track names, layouts, rulesets, schedule entries, and optional peer-to-peer payment handles (Venmo, PayPal, Cash App) you provide for pre-registration.
• Local Diagnostics & Cache: USB decoder connectivity logs, baud rate settings, and local offline cache tokens stored on your browser to support offline race timing.

2 Google User Data & Limited Use Commitment

Ultimate Timing's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:

3 Infrastructure & Cloud Sub-Processors

To ensure low-latency timing synchronization, bank-grade encryption, and offline-first reliability, Ultimate Timing utilizes the following certified cloud providers:

• Google Cloud & Firebase: Encrypted database persistence (Cloud Firestore), user identity authentication (Firebase Auth), and media hosting (Firebase Storage). Data is encrypted in transit via TLS 1.3 and at rest via AES-256.
• Firebase App Check & reCAPTCHA: Defends track infrastructure and race scoring servers against automated scrapers, denial-of-service attempts, and malicious bots.
• Local Device Storage: Browser LocalStorage and IndexedDB are used on your device to store temporary lap records and track configurations so races can proceed without interruption if internet drops.

4 Your Privacy Rights & Permanent Account Deletion (GDPR & CCPA)

Under applicable data protection laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you retain complete control over your data:

• Right to Access: You may request an export of your personal racing history, lap charts, and profile records.
• Right to Rectification: You can edit and correct your driver profile, vehicle roster, and transponder mappings at any time in the app.
• Right to Erasure (Total Account Deletion): You have the absolute right to permanently delete your account, tracks, and personal telemetry.

5 Children & Youth Racers (COPPA)

Radio-controlled racing is an inclusive, family-friendly motorsport that welcomes junior competitors. Drivers under 13 years of age (or under 16 in the European Economic Area) may use Ultimate Timing only under the direct supervision and consent of a parent, legal guardian, or authorized track director. We do not knowingly solicit personal marketing data from children.

6 Data Security & Retention

We implement robust administrative, technical, and physical safeguards to protect your information against unauthorized access, loss, or alteration. We retain racing telemetry and lap histories for historical leaderboard viewing until a track owner or racer explicitly initiates a deletion request.