Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

• 1B RACE SAS
• SIREN: 945 025 286
• SIRET: 945 025 286 00010
• RCS Nimes
• Email: [email protected]

2. Data We Collect

We may collect the following categories of personal data:

• Account data — email address, display name, and authentication credentials when you create an account (via Firebase Authentication).
• Usage data — pages visited, features used, timestamps, IP address, browser type, device information, and referring URL.
• Cookies & analytics data — data collected through cookies and similar technologies including Google Analytics identifiers.
• Communication data — information you provide when contacting us (name, email, message content).

3. Purpose of Processing

• To provide and maintain our services
• To authenticate users and manage accounts
• To analyse usage patterns and improve the platform
• To send service-related communications
• To comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

• Consent — for cookies and analytics (Article 6(1)(a)).
• Contract performance — to provide our services when you create an account (Article 6(1)(b)).
• Legitimate interest — to improve our platform and ensure security (Article 6(1)(f)).
• Legal obligation — to comply with applicable laws (Article 6(1)(c)).

5. Data Retention

We retain personal data only for as long as necessary for the purposes described above. Account data is retained for the duration of your account and up to 3 years after account deletion. Analytics data is retained for 14 months. Communication data is retained for up to 3 years.

6. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access — obtain a copy of your personal data.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data.
• Right to restriction — restrict processing of your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the French data protection authority (CNIL).

7. Cookies

We use the following cookies:

• Essential cookies — required for authentication and basic site functionality (Firebase Auth session tokens).
• Analytics cookies — Google Analytics (_ga, _gid) to understand how visitors use our site.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect site functionality.

8. Third-Party Services

We use the following third-party services that may process your data:

• Google Cloud Platform (Google Ireland Limited) — hosting, database, and AI services.
• Firebase Authentication (Google) — user authentication.
• Google Analytics — website analytics.
• Cloudflare — CDN and security services.

These providers process data in accordance with their own privacy policies and are GDPR compliant. Data may be transferred outside the EU under appropriate safeguards (Standard Contractual Clauses).

9. Data Protection Contact

For any questions regarding this privacy policy or data protection matters, contact our data protection officer at: [email protected].