Privacy Policy
Last updated: 11 October 2026
PITWALL (“we”) is a small project. This page says what we store when you sign in, why, who else is involved, and how you delete it. We do not sell your data and we do not run advertising or analytics trackers.
1. Without an account
You can watch replays without signing in. Your layout and settings are kept only in your own browser (local storage) and never sent to us. Our web server keeps ordinary access logs (IP address, time, requested address) for security and debugging.
2. What we store when you sign in
- Sign in with Discord: we ask Discord for your identify and email scopes only. We store your Discord user ID, display name, avatar link and — only if Discord says it is verified — your email address. We do not ask for your servers or friends, and we do not keep Discord’s access token after sign-in.
- Email and password: your email address and a salted hash of your password (never the password itself). We send you one-time 6-digit codes to verify your email and to reset your password, and a notice when your password changes.
- Your settings: the layout of your windows, pinned drivers, pit-loss values and a few display options, so they follow you between devices.
- Security records: sign-in, sign-up and password-reset events with time and IP address, to detect abuse.
3. Why
Only to let you sign in, keep your account secure and sync your settings. We do not use your data for marketing, profiling or advertising.
4. Cookies and local storage
One cookie keeps you signed in (pw_session, HttpOnly, up to 7 days of inactivity) and one short-lived cookie protects the Discord sign-in step (pw_oauth, 10 minutes). Both are strictly necessary. Local storage holds your layout, settings and language choice. There are no analytics or advertising cookies.
5. Who else is involved
- Discord — if you choose Discord sign-in (their privacy policy applies to what they hold).
- Resend — sends our verification and notice emails; it sees your email address and the message.
- Zeabur — hosts the website and the database.
- Google Fonts — the home page loads its typefaces from Google, which receives your IP address when you open it.
6. Anonymous survey
The home page may show a short survey about a live version of PITWALL. It needs no account and no email. If you answer, we store: your answers (whether you want a live version, whether you have F1 TV Pro, how often you would open it per race weekend, the features you pick, and an optional free-text note of up to 200 characters), the page language, the time you sent it, and a random ID that your browser generated and keeps in local storage so that one browser answers once. The random ID is not linked to you or to any account. We do not store your IP address or your email address. To limit abuse, a one-way hash of your IP address is kept in the server's memory for up to an hour and is never written to the database; restarting the server clears it. The answers are used only to decide what to build next. We only look at totals, and we do not share individual answers. To have your answer deleted, write to support@pitwall.info; because the survey is anonymous, tell us roughly when you sent it (date and time) so that we can find it.
7. Keeping and deleting
We keep your account until you delete it. You can delete it yourself in the account menu (“Delete account”), which removes your account, sign-ins, saved settings and security records from our database right away; backups are overwritten within a short time. You can also write to us. Settings stored in your own browser are not affected; clear them with “Sign out and clear this browser”.
8. Your rights, children, changes
You can ask to see, correct or delete what we hold about you. PITWALL is not meant for children under 13. If this policy changes in a way that matters we will update the date above and tell signed-in users in the app.
9. Contact
support@pitwall.info. See also our Terms of Service.