Controller
The controller responsible for personal data processed via this website within the meaning of GDPR Art. 4(7) is:
Contact: hendrik.voss.burbecke@gmail.com
For all requests concerning your personal data — access, correction, erasure, restriction, portability, or objection — please contact us by email. We respond within one month as required by GDPR Art. 12(3).
Data we process
We process only what is necessary to operate the Service and never sell your data. The categories of personal data processed are:
- Server log data. When you visit the Service, our hosting provider (Vercel Inc.) automatically receives and stores HTTP request metadata: IP address, user-agent string, requested URL, referrer, response status, and timestamp. Logs are retained by the hosting provider for a limited period for security and operational purposes.
- Anonymous analytics. We use Vercel Web Analytics. It records aggregate page-view counts and basic device information (country, device type, browser) without cookies and without persistent identifiers. IP addresses are not stored by Vercel Analytics — they are hashed for a short window and then discarded.
- Leaderboard entries. If you submit a score in the “Catch” mini-game at /catch, we store the display name you enter, your score, combo, level and a timestamp. Name and score are public. We also store two pseudonymous identifiers derived from your IP address with a one-way hash: one to limit submissions, and a pilot ID that groups your entries on a public pilot profile page. The IP address itself is not stored. Don't use your real name if you don't want it to be public. Before a name is published on either leaderboard it is sent to Groq, Inc. for the same automated moderation as comments; the result is cached for up to 30 days, keyed by a hash of the name.
- Roadster Run leaderboard. If you submit a run in the “Roadster Run” game at /roadster, we store the display name you enter, your score, distance, number of rolls, game mode (and passengers in Joaquin mode) and a timestamp in Upstash Redis. Name and score are public. No IP address or other identifier is stored with the entry; only the best 100 entries are kept, older ones are deleted automatically. So that each run is saved only once, the game fetches a random run token when you start; it holds only the start time and expires after 24 hours.
- Roadster Run races (multiplayer). If you create or join a race room, we store in Upstash Redis the display name you enter (moderated like leaderboard names), your vehicle, a random player id and a hashed access token, and during a race your car's position, distance, score and status. Other players in the same room see your name, position and result. Chat messages you send in a room (with your room name and a timestamp; the latest 40 are kept) are visible to everyone in that room. No IP address is stored with it; the whole room is deleted automatically two hours after the last start or join, or when the last player leaves. Your browser keeps the room code and access token in
sessionStorageuntil you close the tab, so a reload rejoins the race. - Joaquin mode purchase. If you buy Joaquin mode, you pay via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A. processes that payment under its own privacy policy), enter your first name, last name and where you're from, and upload a screenshot of the payment receipt. The screenshot may show your name, e-mail address and the payment details. We store these in Upstash Redis together with a random claim id and a hashed access token, only so the site owner can match the payment with the PayPal account; none of it is public. The screenshot is deleted as soon as the payment is approved or rejected; the claim with your name and place is deleted after 30 days. No IP address is stored with it. Your browser keeps the claim id and token in
localStorageto ask for the result. Legal basis: Art. 6(1)(b) GDPR (performing the purchase). - Joaquin mode chat. Messages you send in the game chat are stored in Upstash Redis with the display name you enter and a timestamp, and are shown to everyone who opens the chat. No IP address is stored with them. Messages are deleted automatically after 24 hours (only the latest 100 are kept); the site owner can delete any message earlier. To limit spam we keep a short-lived hashed counter per IP address for one minute.
- Likes. When you like a leaderboard entry we store a pseudonymous identifier derived from your IP address, so each visitor can like an entry only once.
- Pilot Lounge comments. We store your display name, the comment, a timestamp, the moderation result and the pseudonymous identifiers described above. Before publication, name and comment are sent to Groq, Inc. for automated moderation. Approved comments are public; rejected comments are not shown and are kept to detect abuse.
- Feedback. The feedback form stores your message, the page you sent it from, a pseudonymous identifier derived from your IP address (spam protection) and, if you provide them, your name and email address. We use the email only to reply. Feedback we approve may be shown publicly on /feedback together with your name, never with your email address.
- Nova AI chat. Messages you type into the chat on /insights are sent, together with the recent conversation, to Groq, Inc. to generate the answer. We do not store chat conversations. Please do not enter personal data.
- Map tiles. The map on /map loads its map tiles from OpenFreeMap, which receives your IP address to deliver them. OpenFreeMap sets no cookies.
- Rate-limit counters. To prevent abuse we keep short-lived request counters in Upstash Redis, keyed by the pseudonymous identifiers above. They expire automatically after at most one hour.
- Local browser storage. The Service stores small values in your browser's
localStorage: your privacy choice, your last entered game name and your best Catch and Roadster Run scores, and the name and email you last used in the feedback form (so you don't have to type them again). These values stay on your device and are only sent to us when you submit a form. You can clear them at any time via your browser settings.
Purposes and legal bases (GDPR Art. 6)
| Purpose | Legal basis | Retention |
|---|---|---|
| Delivering the website and protecting against abuse | Legitimate interest (Art. 6(1)(f)) | Until end of hosting log retention period |
| Anonymous reach measurement (Vercel Analytics) | Legitimate interest (Art. 6(1)(f)) — no cookies, no identifiers | Aggregate counts only |
| Public leaderboards (Catch, Roadster Run), likes and pilot profiles | Consent (Art. 6(1)(a)) — given by voluntary submission | Until you request deletion |
| Pilot Lounge comments incl. AI moderation (Groq) | Consent (Art. 6(1)(a)) for publishing; legitimate interest (Art. 6(1)(f)) in moderation and abuse prevention | Until you request deletion |
| Feedback and replying to it | Consent (Art. 6(1)(a)) — given by voluntary submission | Until you request deletion |
| Nova AI chat answers (Groq) | Legitimate interest (Art. 6(1)(f)) in answering your request | Not stored by us |
| Map tiles (OpenFreeMap) | Legitimate interest (Art. 6(1)(f)) in displaying the map | Not stored by us |
| Rate limiting the public APIs | Legitimate interest (Art. 6(1)(f)) | At most one hour — automatically purged |
| Error reports (Sentry), without session replay | Legitimate interest (Art. 6(1)(f)) — keeping the Service working | Per Sentry plan, at most 90 days |
| Session replay (Sentry) | Consent (Art. 6(1)(a); TDDDG § 25(1)) | Per Sentry plan, at most 90 days |
| Embedded YouTube video and TradingView quote | Consent (Art. 6(1)(a); TDDDG § 25(1)) | Controlled by the provider |
Embedded third-party content
Some pages embed live video from YouTube (Google Ireland Ltd.), and the /stock page embeds a live quote from TradingView, Inc. When such an embed loads, your browser connects directly to the provider's servers, which receive your IP address and may set cookies on your device. We have no control over what the provider stores once that connection is made.
Nothing is loaded without your consent. Until you allow “External media” in the privacy settings, embeds show a placeholder and no request — not even a preview image — goes to YouTube or TradingView. You can instead load a single embed by clicking it; that click is your consent for that one embed. YouTube videos use the privacy-enhanced mode (youtube-nocookie.com). See Google's Privacy Policy for details on what they process.
See also the TradingView Privacy Policy.
Recipients and data processors
We use the following processors (Auftragsverarbeiter, GDPR Art. 28) to operate the Service. Each is bound by a data processing agreement:
- Vercel Inc. — hosting, CDN, serverless functions and analytics. Servers may be in the EU or USA. Transfers outside the EU are covered by the EU Standard Contractual Clauses. Vercel Privacy Policy
- Neon, Inc. (Databricks) — managed Postgres database holding leaderboard entries, comments and feedback. Transfers to the USA covered by the EU Standard Contractual Clauses. Neon Privacy Policy
- Groq, Inc. — AI inference for comment and leaderboard-name moderation and the Nova AI chat. Receives the text you submit there. Servers in the USA; transfers covered by the EU Standard Contractual Clauses. Groq Privacy Policy
- Upstash, Inc. — managed Redis used for short-lived rate-limit counters, caching, the Roadster Run leaderboard, race rooms, Joaquin mode payment receipts and chat. EU/US transfers governed by SCCs. Upstash Privacy Policy
- Functional Software, Inc. (Sentry) — error monitoring. Receives technical data about errors (browser, page, stack trace, IP address). With your consent it also receives session replays: a recording of page content and interactions. Form inputs are masked. Servers in the USA; transfers covered by Sentry's data processing agreement including the EU Standard Contractual Clauses. Sentry Privacy Policy
- Google Ireland Ltd. (YouTube) and TradingView, Inc. Independent recipients when you load an embed — see Section 04.
- OpenFreeMap — free public map tile service used on /map. Receives your IP address to deliver map tiles; no cookies. OpenFreeMap Privacy
We do not sell or rent personal data, and we do not share it with advertisers.
Cookies and consent
The Service sets no advertising or tracking cookies. Storage on your device falls into two groups:
- Strictly necessary (no consent required, TDDDG § 25(2)). Your privacy choice (
sx.consent), your game name and best Catch score, the name and email you entered in the feedback form, and the admin login cookie. All of these exist only to provide a function you actively use. - Consent-based (TDDDG § 25(1)). Cookies that YouTube or TradingView may set when an embed is loaded, and the session storage Sentry uses for session replay.
On your first visit a banner asks for your choice. You can accept or reject all optional categories with one click each, or choose per category. Nothing optional loads before you decide. You can change or withdraw your consent at any time via “Privacy settings” in the footer; withdrawal does not affect processing that took place before (Art. 7(3) GDPR). Your choice is stored on your device only and is asked again when we add a new third-party service.
International data transfers
Our processors may transfer data to servers outside the European Economic Area, in particular to the United States. We rely on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where applicable, the EU–US Data Privacy Framework as the legal basis for these transfers.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (Art. 15)
- Have inaccurate data corrected (Art. 16)
- Request deletion of your data (Art. 17)
- Restrict processing (Art. 18)
- Receive your data in a portable format (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Withdraw any consent you have given, at any time, with effect for the future (Art. 7(3))
We make no automated decisions with legal or similarly significant effects on you (Art. 22). Pilot Lounge comments are checked by an automated AI moderator before they are published; if you think a comment was rejected wrongly, email us and we will review it by hand.
To exercise any of these rights, email hendrik.voss.burbecke@gmail.com. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR) — for users in Germany, that is your respective state DPA; the list is available at bfdi.bund.de.
Security
We use TLS encryption for all traffic, rely on managed infrastructure with security best practices (Vercel, Neon, Upstash), store IP-derived identifiers only as one-way hashes instead of IP addresses, and limit access to operational data to the controller named above. No system is ever fully secure, and we cannot guarantee absolute protection — but we follow the state of the art as required by GDPR Art. 32.
Changes to this policy
We may update this Privacy Policy from time to time, for example when we add a feature that changes how data is processed. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be announced on the homepage.