← Racetrack – Legal Notice

1. Data controller

I am responsible for the processing of data on this website within the meaning of the General Data Protection Regulation (GDPR):

Gerhard Widmayer
1230 Vienna, Austria
Email: Please enable JavaScript to see the address.

2. General information on data processing

I process personal data only to the extent necessary to provide a functioning website and the game features you use. Depending on the processing activity, the legal basis is Art. 6(1)(b) GDPR (performing the function you requested) or Art. 6(1)(f) GDPR (legitimate interest, e.g. operational security).

3. Your rights

In principle, you have the following rights regarding your personal data:

4. Server log files

Every time this website is accessed, the following data is automatically recorded:

This data is used to ensure smooth operation, detect misuse (e.g. automated access), and analyze errors. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).

Entries are stored alternately in two files of up to 2000 lines each: once one file is full, logging switches to the other and its previous contents are overwritten. There is therefore no indefinite storage, but automatic overwriting after a certain number of accesses (currently around 4000 entries in total).

Access to this log data is protected by a login and available only to me. If needed, individual IP addresses can also be looked up via an external geolocation service (country, region, provider), for example to help classify access patterns.

5. Hosting

This website is operated by an external hosting provider. The server log data mentioned above is processed on its servers. A data processing agreement under Art. 28 GDPR is in place with the hosting provider.

6. Game features

When creating or joining a race, I process the player name you chose, an access token to match your moves to you, and the game history (position, speed, times) for the duration of the game. The legal basis is Art. 6(1)(b) GDPR.

When a race finishes, the time achieved is stored together with the chosen name in a publicly visible leaderboard for that track – regardless of whether it is a standard track or a custom track. Bots, ghosts, and games marked as practice runs are excluded. Since the name can be freely chosen, you can use a pseudonym if you don't want to provide your real name.

7. Local storage in the browser

Certain data is stored exclusively locally in your browser (localStorage), such as a list of recently visited races, the access tokens for the players you control, and your chosen color scheme. This data does not leave your device unless it is actively sent along for a specific action – such as a game move. You can delete it at any time using the corresponding function on the page or via your browser settings.

8. Cookies

A technically necessary session cookie is set for the security check (arithmetic challenge when creating a race or saving a track). It serves solely to identify the session and is automatically deleted at the end of the browser session. The legal basis is Art. 6(1)(f) GDPR; no consent is required for technically necessary cookies.

When you switch languages using the DE/EN toggle, an additional technically necessary cookie is set that stores your language choice for one year, so the page is shown in the selected language on your next visit. It is only set when you actively click the language toggle; no cookie is stored when the language is detected automatically from your browser settings. Here too, the legal basis is Art. 6(1)(f) GDPR, and no consent is required.

9. Embedded fonts

The fonts used are delivered from my own server. There is no connection to Google servers or other external font providers.

10. Changes to this privacy policy

I reserve the right to amend this privacy policy so that it always complies with current legal requirements.