Data controller
Cedrick Le Guen processes your data to run Outlap Racing. Contact: cedrick.leguen@gmail.com. No data protection officer is appointed at this stage: GDPR requests go to this address.
Data collected
Depending on how you use the service:
- Account: Discord ID, Discord name, Discord email (if provided), profile picture
- Driver profile: Discord ID (or a provisional name before sign-in), game IDs (EA, PlayStation, Xbox)
- Leagues: name, description, rules, Discord link, members, roles, join requests
- Championships: calendar, entries, attendance, results, protests
- Technical data: session cookies, host technical logs (IP address, date, user agent)
Provisional profiles (created by a league admin, without an account) exist until the person links Discord through an invitation link.
Purposes and legal bases
- Provide the service (account, leagues, championships) — performance of the contract (terms)
- Show public leagues in the explorer — legitimate interest
- Secure the service and prevent abuse — legitimate interest
- Meet a legal obligation (limited log retention, requests from authorities)
EA, PlayStation and Xbox IDs are optional: you add them if you want the matching icon to appear in the league. The Discord ID comes from Discord sign-in.
Recipients
Your data is visible to members of the leagues you join (name, badges, results). A league’s title and description can be seen without an account via the explorer.
Providers:
- Discord — OAuth sign-in
- Vercel Inc. — application hosting
- Neon, Inc. — database storage
No sale of data, no targeted advertising, no customer file sent to marketing partners.
Transfers outside the EU
Discord and Vercel Inc. are established in the United States. These transfers rely on their standard contractual clauses and the transfer framework in force. The Neon, Inc. database may be located in the region chosen for the project.
Retention
- Account and driver profile: for as long as the account exists
- Leagues and championships: until the league is deleted
- Session: until sign-out or cookie expiry
- Technical logs: the host’s usual period (a few weeks at most)
Your rights
You can request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interest. You can also withdraw consent for optional fields by clearing them in your profile.
Write to cedrick.leguen@gmail.com. Proof of identity may be requested if there is doubt. You can also lodge a complaint with the CNIL (cnil.fr).
Some of this data can be managed directly in your profile, or through the league admin tools (removing a driver).
Security
Authenticated access, encrypted connections (HTTPS), a hosted remote database, and application secrets not exposed to the browser. No system is infallible: report an incident to cedrick.leguen@gmail.com.
Cookies
See the cookie policy. Only cookies strictly necessary for the session are used: there is no advertising consent banner.