Privacy Policy

This Privacy Policy explains how StintIQ (“we,” “us,” “our”) collects, uses, and shares information when you use the StintIQ website at stintiq.app, its associated APIs, the StintIQ Discord bot, and the StintIQ Telemetry Agent for Windows (together, the “Service”). StintIQ is a sole-proprietorship project operated by an individual based in the State of Michigan, United States.

If you have questions, email [email protected].

1. What we collect

We collect three categories of information.

Information you provide via Discord

When you sign in, Discord shares the following under your OAuth authorization:

• Your Discord user ID, username, display name, and avatar
• Your email address on file with Discord, used as a unique account identifier; we do not send marketing email

When you use the Discord-Connect flow for a team, Discord additionally shares the list of guilds you administer. We use it only to populate the guild picker and do not retain it past the connection step.

Information you generate on the Service

This includes everything you create as you plan races: race plans, stints, driver availability, team rosters, stint-mode preferences, race-day notes, and your timezone (auto-detected on first sign-in via your browser’s Intl.DateTimeFormat().resolvedOptions().timeZone API; you can change or clear it in Settings).

A team captain can also add a driver to their team by typing a name, for someone who hasn’t joined StintIQ. We store only that name, on that one team; it has no account, sign-in or Discord link. It is deleted when the captain merges it into the member it turned out to be or deletes the team. When the captain removes it from the roster, it is deleted too, unless finished races still show it in their lineups; then it stays there until the team is deleted.

The StintIQ Telemetry Agent

On your PC, the agent reads only what your racing sims make available to telemetry tools: their live session data and the results files they write. To notice when a sim starts, it checks the names of the programs running; it doesn’t record or send that list. It doesn’t read your other files, your browsing or anything else on your PC.

If you install the StintIQ Telemetry Agent on a PC and connect it to your account, we store that PC’s name (which you can change), the agent’s version, whether it’s paused, and when it last told us it was running. The agent sends nothing about your sim sessions unless they belong to one of your team’s StintIQ races. You can remove a PC at any time in Settings.

You can link your own sim identity to your account: your iRacing customer number (and your iRacing name, when the agent sees it) or your Le Mans Ultimate name. You either type it in Settings or confirm what the agent found on your PC; the agent sends nothing until you confirm. Linking needs your consent to let StintIQ record your driving in your team’s StintIQ races and show it to your team. We keep a record of that consent: when you gave it, the wording you agreed to, and when you withdrew it. Only you can see your linked identity; your team sees you by your StintIQ name. During your team’s races, your teammates’ StintIQ agents receive it so they can tell who is driving; they keep it only in memory and never show it. You can remove a link at any time in Settings or in the agent, which deletes the identity, keeps only the dates of your consent, and shows what was recorded of your driving as “Unlinked driver”.

Teammates on a race’s team see whether your StintIQ Telemetry Agent is recording, running, paused or not running around that race, and whether you’ve linked your sim identity for the race’s sim (never the identity itself).

When the StintIQ Telemetry Agent is running and a session in your sim matches one of your team’s StintIQ races, it sends that race’s data to StintIQ: the session, laps and lap times, pit stops, fuel or energy, and which team member was driving (or “Unlinked driver”). It never sends a sim name or number that hasn’t been linked, and it sends nothing for other sessions. During the beta, the raw data is kept for 7 days; lap and stint summaries are kept with the race.

Pausing the agent stops that PC from reading your sims or sending anything. Your teammates’ agents can still record your team’s car while you drive, because the team’s race data belongs to the team. To stop StintIQ recording your driving at all, remove your sim link: future and past races then show you as “Unlinked driver”. Uninstalling the agent disconnects the PC and deletes everything it stored on it.

Technical information collected automatically

When you load any page or make any API request, our servers and edge network log your IP address, your browser user-agent string, the URL you requested, the HTTP status returned, and the timestamp. These logs are used for security and operational debugging and are retained for up to 30 days.

We also use small browser cookies to keep you signed in: a short-lived access token cookie and a longer-lived opaque refresh token cookie. Both are set with Secure, HttpOnly, and SameSite=Lax attributes. Without them, you cannot remain signed in.

Which pages you use

When you open a page, the website tells StintIQ which kind of page it is (for example “Race day” or a User Guide article, never which race or team) and how long it stays open while it’s in front. If you’re signed in, it’s stored with your account so we can count how many people and teams use each page, and whether it’s used during races; StintIQ’s admin pages show only those totals, never who opened what. If you’re signed out, nothing identifies you. No cookies and no third parties are involved. We use it to decide what to improve.

2. How we use it

We use information to:

• Authenticate you and keep your session secure
• Show you your teams, plans, and the planning data your teammates have shared with you
• Send messages from the StintIQ Discord bot to channels and threads you and your team have explicitly configured
• Operate, maintain, debug, and improve the Service

We do not sell your data. We do not use your data to train AI models. We do not perform automated decision-making that produces legal or similarly significant effects on you.

3. Who we share with

We share data only with the service providers required to operate StintIQ.

We may also disclose information when required to comply with a valid legal request or to protect the rights, property, or safety of StintIQ, our users, or the public.

4. Advertising

StintIQ does not show advertisements, and no advertising network runs on the Service. The only cookies we set are the sign-in cookies described in §1.

5. Data retention

We retain your account and the data you create:

• For as long as your account exists
• When you delete your account, it is deactivated immediately and held for 14 days, during which signing in again reactivates it. After 14 days we permanently anonymize it: your personal data (Discord identity, email, avatar, timezone, and preferences) is erased, while anonymized race history remains with your teams shown as “Deleted user.”
• Residual copies may persist in encrypted database backups for up to 7 days after anonymization, after which they roll off automatically.

Operational logs (IP, user-agent, request URL) are retained for up to 30 days from the time of the request.

Records of which pages you opened are deleted after 90 days, and when your account is anonymized. Only daily totals per page, with no account attached, are kept after that.

If you stop using StintIQ but do not delete your account, we may retain your data indefinitely so that you can resume.

6. Your rights

You can:

• Access & download a copy of your personal data anytime from your Profile page (Settings → Profile → Your data). The export is a structured, machine-readable JSON file covering your account, team memberships, stint assignments, availability, race data the agent recorded of your driving, the stops you marked as extra on the race-day board, and which pages you opened in the last 90 days. You can also email [email protected]
• Correct inaccurate personal data by editing it in the Service or emailing us
• Delete your account yourself from your Profile page (Settings → Profile). Deletion deactivates immediately, reactivates if you sign in within 14 days, and permanently anonymizes after that. You can also email [email protected]

Residents of the European Economic Area, the United Kingdom, and certain US states (including California, Virginia, Colorado, Connecticut, and Utah) may have additional rights under their local laws. Email us to exercise any such right.

7. Children

StintIQ is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. (Discord’s own Terms of Service require users to be at least 13, so Discord OAuth provides a practical floor.) If you believe a child under 13 has provided us with information, email [email protected] and we will delete it.

8. International users

StintIQ is operated from the United States. If you use the Service from outside the United States, your data will be transferred to, stored, and processed in the United States and in the regions where our service providers operate (see §3).

9. Security

We use industry-standard security measures including TLS (Cloudflare Full strict mode), HttpOnly secure cookies, password-less authentication via Discord OAuth, and a role-of-least-privilege model on the database. No service can guarantee perfect security; if we discover a breach involving your data we will notify you as required by law.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. If the changes are significant, we will provide additional notice (such as a notice in the web app on your next sign-in).

11. Contact

For privacy questions, data requests, or anything else covered by this policy:

Email: [email protected]

12. Governing law

This Privacy Policy is governed by the laws of the State of Michigan, United States, without regard to its conflict of law principles.