Privacy

What stays in your browser

Your settings, controls, car setups, saved laps, race history and driver name are kept in your browser's own storage on your device. So is a driver key: a random code that proves a name on the lap boards is yours. None of it leaves your device except as described below, and clearing this site's data in your browser removes all of it.

What goes online, and when

• Lap boards. When a lap is posted, the board stores your driver name and three-letter code, the lap (times, circuit, car, assists, realism, tyre) and a recording of it that others can race as a ghost. It also stores a scrambled form of your driver key, which can't be turned back into the key. Names and laps on a board are public. Laps are posted only once you have chosen a name of your own, and you can switch off "Post my best laps online" in the settings.
• Open races. The race server passes each car's position to the others while a race runs, and stores the result: the name you raced under, your place, times and best lap. The week's standings list a name only when its driver key proved it.
• Rooms with friends. The site pairs the players of a room code. After that the cars' data goes straight between your browsers, so, as in any game that connects players directly, the other players' devices can see your IP address. To find that direct route your browser asks public connection servers run by Google, which see your IP address and nothing else. Where no direct route exists, the data passes through a relay run by Cloudflare. If the site's own pairing is switched off, a public pairing service (PeerJS) pairs the room instead and sees your IP address too. Nothing from a room is stored.
• Usage totals. When a stretch of driving ends, the game reports the circuit, the car, the mode and the minutes driven. The site adds them to that day's totals, by country. It also says what you drove with (keyboard, controller, wheel or touch screen), on what (desktop, tablet or phone), whether the track was wet, which assists were on and which version of the game you had. Each of these is counted on its own, never combined with another or with the circuit or country. The report carries no name, key or id, and it can't be tied to you or to your other sessions.

IP addresses and logs

The site is served by Cloudflare, which handles your IP address to deliver the pages, to work out the country for the usage totals, and to limit how often one address can post. Cloudflare keeps request logs for a few days. The site's own database stores no IP address. To limit lap uploads it keeps a scrambled form of the address for up to two hours and then deletes it.

How long it is kept

• Laps and race results stay for as long as the boards exist, or until you ask for them to be removed.
• A driver name stays yours while you use it. After six months without a lap it can be claimed by someone else.
• The usage totals are kept as daily totals. They hold nothing about any one player.

Your choices

You can play without a name, switch off posting laps, and clear the browser's storage at any time. To see what is stored under your driver name, or to have your name, laps and race results deleted, email me at alpyalay@gmail.com or open an issue on GitHub. Tell me the driver name; I will ask you to confirm it is yours.

LibreCorsa is made and run by Alp Yalay. The code that does everything described here is open: the game and its online side are in the same repository. This page changes whenever what the site keeps changes.