Privacy Policy

Effective date: June 18, 2026. This Privacy Policy explains what information Forza Drags League (“we,” “us,” “our,” operating forzadrags.com) collects from visitors and members, how we use it, who we share it with, how long we keep it, and the choices you have. By using the site you agree to this policy.

1. Information we collect

We collect the following categories of information:

• Account & profile: email, display name, gamer tag, platform, region, time zone, preferred class, optional phone number, optional Discord username, and any preferences you save.
• Contact form submissions: name, email, phone, message body, and the page you submitted from.
• Phone numbers & email addresses used for verification, account notifications, and (if you opt in) marketing.
• Location: coarse country/region derived from your IP address; precise location is not collected.
• Device & technical data: IP address, user agent, browser, operating system, device type, screen size, language, time zone, referrer, and approximate performance metrics.
• Cookies & similar technologies: see Section 3.
• Analytics: page views, clicks, scroll depth, form interactions, and session replays of UI (with input fields masked).
• Marketing pixels: events fired by ad platforms (e.g. Meta, TikTok, Google) when you visit, only with your consent.
• Payment data: handled by Stripe — we receive a payment token, subscription status, last 4 digits of the card, and billing country. We never receive full card numbers.
• Race submissions & proof: screenshots, video URLs, telemetry, and times you submit to tournaments.

2. How we use information

• Operate the site, accounts, and tournaments.
• Verify identity, prevent bots, fraud, cheating, and abuse.
• Send transactional messages (verification, registration, results, billing).
• Send marketing email/SMS only with your separate opt-in consent.
• Measure how the site performs and improve it.
• Comply with legal obligations and enforce our Terms.

3. Cookies & tracking technologies

We use five categories of cookies: strictly necessary, functional, analytics, marketing, and advertising. Only strictly necessary cookies load before you make a choice. You can change your choice at any time by clicking Cookie Settings in the footer. We store an anonymized record of each choice (preferences, version, timestamp) for audit purposes.

4. Data retention

• Account data: while your account is active and up to 24 months after deletion request, unless longer retention is required by law.
• Race submissions & results: retained for the lifetime of the league for leaderboard integrity.
• Analytics events: up to 90 days at the raw event level; aggregates may be kept longer.
• Consent records: kept for as long as required to evidence compliance.
• Payment records: as required by Stripe and applicable tax/financial law.

5. Third-party service providers

We share information only with vendors that help us operate the service. Each acts on our instructions under a written agreement:

• Google — analytics, fonts, reCAPTCHA, optional sign-in.
• Meta — optional advertising pixel and conversion measurement.
• Stripe — payment processing and subscription billing.
• PayPal — alternative payment processing where offered.
• Twilio — SMS verification and transactional SMS delivery.
• OpenAI — assistive AI features (no training on your data).
• Anthropic — assistive AI features (no training on your data).
• Google Maps — embedded maps where used.
• YouTube — embedded videos (loaded only with functional consent).
• Cloudflare — DNS, CDN, DDoS protection.
• Hosting provider — site hosting and database (Supabase / Lovable Cloud).

6. Your rights

You can, at any time:

• View and edit your account information from your profile.
• Export your data via your account or by emailing us.
• Withdraw marketing consent (unsubscribe link in every marketing email; reply STOP to SMS).
• Request deletion of your account and associated personal data.
• Adjust your cookie preferences via Cookie Settings.

Residents of California, Colorado, Connecticut, Virginia, Utah, and other US states with privacy laws, as well as residents of the EU, UK, and other regions, may have additional rights (access, portability, correction, deletion, restriction of processing, objection, and the right to lodge a complaint with a supervisory authority). To exercise any of these, email privacy@forzadrags.com.

7. Sale or sharing of personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under US state privacy laws. If we ever choose to participate in lawful data partnerships (for example, hashed-email audience matching with advertising platforms), we will update this policy, present a clear opt-in to affected users, and provide a “Do Not Sell or Share My Personal Information” link before any such sharing begins.

8. Children

The service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.

9. International transfers

Forza Drags League is operated from the United States. If you access the service from outside the US, your information will be processed in the US. We rely on appropriate safeguards (such as Standard Contractual Clauses) when required.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” at the top reflects the most recent revision. Material changes will be notified by email or in-app notice.

11. Contact

Questions or requests: privacy@forzadrags.com.