Awesome Simracing

Privacy Policy

This privacy policy explains which personal data Awesome Simracing processes when you visit the site, log in, upload liveries or use the desktop client, why we do it and which rights you have. Personal data is all data that can be used to identify you.

1. Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

Johannes Haseitl
Frankentroster Str. 9
90574 Roßtal
Germany

Phone: +49 9127 9058001
Email: [email protected]

Awesome Simracing is a non-commercial project. There are no payments, no advertising and no analysis tools on this site.

2. Overview

  • Visiting the site: your browser sends technical data (like your IP address) that our hosting and Cloudflare need to deliver the pages. See 3 and 4.
  • Logging in: you log in with Discord. We get your Discord ID, name, email address and the list of your Discord servers. See 6.
  • Using the site: what you upload, create, follow or vote for is stored with your account. Some of it is public. See 7 to 10.
  • Deleting your account: you can delete your account at any time and restore it for 30 days. See 12.

3. Hosting and service providers

All-Inkl

The site runs on servers of ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (“All-Inkl”), which also hosts the database. See the privacy policy of All-Inkl. We have concluded a data processing agreement with All-Inkl.

Cloudflare

All requests to awesome-simracing.com go through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare delivers the pages from a server near you, keeps copies of public pages and files (caching) and protects the site against attacks. For this, Cloudflare processes your IP address, the requested address, your browser's details and the time of the request. Uploaded files (liveries, images) are stored in Cloudflare R2, Cloudflare's file storage.

We use Cloudflare based on our legitimate interest in a fast, secure and reliable site (Art. 6(1)(f) GDPR). Cloudflare processes the data on our behalf under its data processing addendum. Data may be transferred to the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework, and the EU standard contractual clauses apply as well. See the privacy policy of Cloudflare.

GitLab

We use services of GitLab Inc., 268 Bush Street #350, San Francisco, CA 94104, USA (“GitLab”) for two things:

  • Error tracking: when an error occurs on the site, a report goes to GitLab, so we can fix it. It contains the error, the requested address and technical details of the request and of your browser. We do not send your IP address, cookies or login data.
  • Download site of the desktop client: the desktop client is downloaded from GitLab Pages, and the client asks it for updates. GitLab processes your IP address and the request for this.

We use GitLab based on our legitimate interest in a working, error-free site and client (Art. 6(1)(f) GDPR). GitLab processes the data on our behalf under its data processing addendum. The data is processed in the USA; GitLab is certified under the EU-U.S. Data Privacy Framework, and the EU standard contractual clauses apply as well. See the privacy policy of GitLab.

4. Server log files

When you visit the site, the servers store the following data in log files: your IP address, the date and time, the requested address, the referrer URL, the type and version of your browser and your operating system. We need it to deliver the site, to find errors and to defend against attacks. The data is not combined with other data. The log files are deleted after seven days at the latest, unless we need them longer in a particular case, for example to clear up an attack.

Legal basis is our legitimate interest in a secure and error-free site (Art. 6(1)(f) GDPR).

5. Cookies and local storage

We only use cookies that the site needs to work:

  • Session cookie and XSRF-TOKEN: set when you log in, send a form or get a message from the site. They keep you logged in and protect forms against misuse. Guests who just read the site get no cookie. The session itself (with your IP address and browser details) is stored on our server and expires two hours after your last request.
  • Remember-me cookie: set when you log in, so you stay logged in. It is deleted when you log out, or after 400 days.

Cloudflare may set technically necessary cookies to protect the site against bots and attacks.

Your browser's local storage keeps your choice of the color scheme (light, dark or system) and which notices you have closed. This stays in your browser and is not sent to us.

Legal basis is § 25(2) no. 2 TDDDG (strictly necessary for the service you requested) and our legitimate interest in a working site (Art. 6(1)(f) GDPR). We use no tracking or advertising cookies, so we don't ask for consent. You can delete cookies in your browser at any time; you are logged out then.

6. Your account and the login with Discord

You register and log in with your Discord account, there is no password on this site. Discord is a service of Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA (“Discord”). When you log in, Discord asks you to share the following with us:

  • identify: your Discord ID and name,
  • email: your email address and whether it is verified,
  • guilds: the list of Discord servers you are on, and on which you may manage the server.

We store your Discord ID, your name, your email address and whether it is verified, the version of the terms you accepted and when, and when you last logged in and used the site. The list of your Discord servers is read again at every login: we use it to make you a member of the communities of your servers (unless you switched that off in your settings) and to let you create a community for a server you manage. The list itself is only kept in your session, the community memberships with your account. We need the verified email address to protect the site against spam accounts; we only use it to contact you about your account, not for newsletters.

In your settings you can also set your time zone, an avatar, a text about you, links and whether you are listed on the artists page. Your account gets an API key for the desktop client.

Legal basis is the contract of use you enter by accepting the terms and conditions (Art. 6(1)(b) GDPR). Discord's own processing is described in the privacy policy of Discord; Discord is located in the USA.

7. Liveries, collections and communities

What you upload or create is stored with your account: liveries with their files and images, collections, communities, liveries you add to collections, collections you follow and your community memberships. We need it to provide the site (Art. 6(1)(b) GDPR).

Liveries, collections and communities you publish can be seen and downloaded by everyone. The owner and the admins of a community see its members and can add, remove or block them. Owners of collections and community admins see who added which livery to a collection and can approve or remove it.

8. What is public

Your profile page shows your name, your avatar, the text about you and your links, and your published liveries and collections. Livery pages and cards name you as uploader, and as artist where you are credited. If you opt in, you are listed on the artists page. Your email address, your Discord ID and your API key are never shown.

9. Polls and competitions

Polls: news posts may come with a poll. Your vote is stored with your account, so you can vote only once and change your vote while the poll is running. If the poll has an “Other” option, you can add a text. Everyone sees the totals only; admins see the totals and the “Other” texts, but not who voted for what.

Competitions: when you enter a livery in a competition, the entry is stored with your account and shown with the livery. Your votes are stored with your account, so you can't vote more often than allowed or for your own liveries. Only the vote counts are public, once voting has ended; admins see the entries and their counts.

Legal basis is the contract of use (Art. 6(1)(b) GDPR). What happens to votes and entries when you delete your account is described in 12.

10. Desktop client

The desktop client installs the liveries of the collections you follow on your PC. It identifies you with the API key of your account and fetches your followed collections, their liveries and files, the cars and the news from the site. We store when your account last used the site. Your API key is shown on your dashboard and in your settings; keep it to yourself. Legal basis is the contract of use (Art. 6(1)(b) GDPR).

11. Discord server and Instagram

We announce news and new communities on our Discord server and post about the site and liveries on Instagram, a service of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. Such posts may name you as the artist or uploader of a livery, or your community. We only use what is public on the site anyway. Legal basis is our legitimate interest in presenting the site and its liveries (Art. 6(1)(f) GDPR); you can object to it at any time, see 14. The links to our Discord server and Instagram are plain links; nothing is loaded from Discord or Instagram until you click them.

12. Deleting your account and storage periods

You can delete your account under Delete account in your settings. Your account, liveries and collections are hidden at once. For 30 days, you can restore everything by logging in with Discord again. After that, your account is deleted for good:

  • your personal data (name, email address, Discord ID, profile, API key), your liveries and collections, your community memberships, followed collections, sessions and votes in competitions are deleted,
  • your votes in polls still running are deleted; votes in ended polls stay without any link to you, so the result stays the same,
  • communities you own, liveries you added to collections of others and competition entries stay on the site without owner.

Otherwise we keep your data as long as you have your account. Deleted liveries, collections and communities can be restored for 30 days and are then deleted for good. Backups of the database may still contain your data for up to 30 days, then they are deleted.

13. Transfers to the USA

Cloudflare, GitLab and Discord are US companies, so your data may be processed in the USA. The European Commission considers the USA to have an adequate level of data protection for companies certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); Cloudflare, GitLab and Discord are certified. Our service providers are additionally bound by the EU standard contractual clauses (Art. 46 GDPR).

14. Your rights

You have the right to

  • get information about your data we store (Art. 15 GDPR),
  • have wrong data corrected (Art. 16 GDPR),
  • have your data deleted (Art. 17 GDPR), which you can do yourself by deleting your account,
  • restrict the processing (Art. 18 GDPR),
  • get the data you provided in a common, machine-readable format (Art. 20 GDPR),
  • lodge a complaint with a supervisory authority (Art. 77 GDPR), for example the authority of your country or the Bavarian authority (Bayerisches Landesamt für Datenschutzaufsicht).

Right to object (Art. 21 GDPR): where we process your data based on our legitimate interest (Art. 6(1)(f) GDPR), you can object to it at any time for reasons arising from your particular situation. We then stop, unless we have compelling legitimate grounds that outweigh your interests, or the processing serves legal claims.

Just write to us at [email protected]. If you contact us by email, we use your message and address only to answer you (Art. 6(1)(f) GDPR) and delete them when your request is done, unless we have to keep them.

15. Encryption

The site is only available over an encrypted connection (TLS), recognizable by “https://” and the lock in your browser's address bar. Data you send to us can't be read by others on the way.

16. Changes

We update this privacy policy when the site changes. The current version is always on this page. Last updated: October 2026.