Privacy Policy

Last updated: May 2026

1. Data We Collect
  • Account information: email address, display name, and Google account identifier (via Google OAuth).
  • Telemetry data: GPS coordinates, speed, acceleration, and other sensor data from uploaded CSV files or GoPro videos.
  • Track definitions: coordinates, corner positions, and start/finish gate locations you define.
2. How We Use Your Data

Your data is used solely to provide telemetry analysis, lap timing, performance visualisations, and leaderboard rankings within BoxBox. We do not use your data for advertising, profiling, or any purpose beyond the service itself.

3. Data Sharing

We do not sell, rent, or share your personal data with third parties. When you share a session dashboard via a share link, only the data for that specific session is accessible through the unique token.

Leaderboards: when your sessions appear on a leaderboard, other users with access can see your best lap time, session date, data source, and session labels. Your name is displayed to other users as “FirstName L.” (first name and last initial only). Who can see this data depends on the leaderboard’s visibility: only you (personal), specific users you share with (shared), or all BoxBox users (official, set by an admin).

4. Third-Party Services
  • Google OAuth: used for authentication. Google receives your authentication request but BoxBox does not share telemetry data with Google.
  • Open-Meteo: used to fetch weather data for your sessions. Only track coordinates and session dates are sent — no personal information.
  • Apple MapKit: used to render maps. Map tile requests are handled by Apple — no personal or telemetry data is sent.
5. Cookies

BoxBox uses a single session cookie for authentication. We do not use analytics cookies, tracking pixels, or any third-party tracking.

6. Data Storage

Your data is stored in a PostgreSQL database. Original telemetry files are stored in compressed form for re-processing. All data is stored on infrastructure managed by the BoxBox team.

7. Data Retention

During the beta period, data may be purged without notice. You can delete your account and all associated data at any time from your profile page. Deletion is immediate and irreversible.

8. Your Rights
  • Access: you can view all your data through the BoxBox interface.
  • Deletion: you can delete your account and all data from your profile page.
  • Portability: your original uploaded files are preserved and can be re-downloaded in the future.
9. Contact

For privacy-related questions, please open an issue on GitHub.