Privacy Policy

Racera (“Racera”, “we”, “us”) is operated by SUG Labs. We are the data controller for the personal data described here. For any privacy question or to exercise your rights, contact us at dennis@suglabs.com.

Racera is an information and reminder service for hard-to-enter races. It shows legitimate entry routes, tracks deadlines, and suggests alternative races. Racera does not process race entries, sell bibs, or guarantee a place — it links out to official organisers and providers.

We collect only what the service needs:

• Account data — your email address and optional display name, when you sign in (via magic link or Google).
• Goal profiles and watchlist — the race goals you save (distance, terrain, dates, an optional search location as coordinates, and budget) and the races you track.
• Premium campaign data — target and backup races, selected entry routes, application state, and any private notes you choose to save in My Entry Season.
• Notification data — your reminder lead-time preferences, generated alerts and weekly entry briefs, and, if you enable browser notifications, your push subscription.
• Usage & attribution — when you consent, we record outbound clicks to providers (to measure referrals) and a first-party identifier cookie, plus product analytics.
• Billing data — if you subscribe to Premium, our payment processor (Stripe) handles your card details; we store only your subscription status and Stripe customer reference, never card numbers.

• Essential — a session cookie that keeps you signed in, and a cookie that stores your consent choice. These are always active and do not require consent.
• Analytics & attribution — product analytics (PostHog) and a first-party attribution identifier (“racera_aid”) run only after you accept. If you decline, they are never set, and outbound clicks are not recorded.

You can change your choice at any time using the cookie controls on the site.

• To provide the service (performance of a contract) — accounts, watchlists, goal profiles, reminders, private Premium campaigns, weekly briefs, and billing.
• With your consent — analytics, attribution cookies, and any marketing email. You may withdraw consent at any time.
• Legitimate interests — keeping the service secure, preventing abuse, and diagnosing errors.

We use trusted providers who process data on our behalf under agreements that protect it:

• Supabase — database and authentication (hosted in the EU).
• Resend — transactional email (reminders, sign-in links).
• Stripe — subscription payments.
• PostHog — product analytics (consent-gated).
• Sentry — error monitoring.
• Inngest — background job processing.
• Vercel — application hosting.

We do not sell your personal data. Some providers may process data outside the EEA under appropriate safeguards (such as Standard Contractual Clauses).

We keep account and profile data while your account is active. If you delete your account, we remove your personal data within a reasonable period, except where we must retain limited records (for example, billing records) to meet legal obligations.

Under the GDPR and similar laws you can request access to, correction of, or deletion of your data; object to or restrict certain processing; receive a portable copy; and withdraw consent. To exercise any of these, email dennis@suglabs.com. You also have the right to complain to your local data protection authority.

We may update this policy as the service evolves. Material changes will be reflected in the “last updated” date above. See also our Terms of Service.