Privacy Policy

Last updated: March 27, 2026

1. Introduction

RaceTagger ("we," "our," or "us") is an AI-powered race photography analysis service operated by Federico Pasinetti, based in Italy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at racetagger.cloud, our desktop application for Windows and macOS, and any related services (collectively, the "Service").

We are committed to protecting your privacy and complying with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Italian data protection laws (D.Lgs. 196/2003 as amended by D.Lgs. 101/2018).

Data Controller: Federico Pasinetti, operating as RaceTagger. Contact: privacy@racetagger.cloud

2. Information We Collect

2.1 Account Information

When you register for our Service, we collect:

• Email address (required for account creation and authentication)
• Name (if provided)
• Password (stored as a secure hash, never in plain text)
• Account creation date and last sign-in timestamp
• Communication and marketing preferences

2.2 Payment Information

When you purchase token packages, we collect billing information through our payment processor, Stripe, Inc. We do not store credit card numbers or full payment details on our servers. We retain:

• Transaction records (amount, date, token package purchased)
• Billing country and tax identification details (for VAT/tax compliance via Stripe Tax)
• Stripe customer and payment identifiers

2.3 Image and Photography Data

Our core service processes your photographs for race number detection and participant identification. When you use our analysis features:

• Desktop App (Local Processing): When using local ONNX models, image processing occurs on your device. However, cropped image regions may be uploaded to our cloud infrastructure for AI analysis via Google Vertex AI (Gemini models).
• Desktop App (Cloud Processing): When using Gemini cloud models, image crops and contextual regions are transmitted to Google Vertex AI for analysis. Full-resolution originals are not uploaded unless you explicitly use the Training Upload feature.
• Image Metadata: We read EXIF/IPTC metadata from your photos (camera model, date taken, GPS if present) to support analysis. We can write metadata back to your files (race number, participant name) at your request.
• Analysis Results: Race numbers detected, confidence scores, participant matches, scene classifications, and visual tags are stored in our database linked to your account.

2.4 Biometric Data (Face Recognition)

For supported sport categories (currently IMSA WeatherTech), our Service includes an optional face recognition feature that identifies drivers from facial features in photographs. Under GDPR Article 9, facial recognition data constitutes special category (biometric) data and requires explicit consent for processing.

Face recognition is performed using on-device ONNX models and does not transmit biometric data to external servers. You can disable this feature per-analysis in the desktop app settings. Facial feature vectors are not stored persistently; they are computed at analysis time and discarded after matching.

2.5 Desktop Application Telemetry

Our desktop application collects the following technical data to improve performance and diagnose issues:

• Application usage: App launches, session duration, feature usage, application version, OS platform and version
• System information: CPU architecture, available RAM, hostname (first 20 characters), OS username (first 15 characters)
• Device identifier: A SHA-256 hashed machine ID derived from your hardware. We do not store the raw hardware identifier.
• Error reports: When errors occur, we collect sanitized stack traces, error messages, and diagnostic context. File paths, email addresses, and usernames are automatically stripped from error data before transmission.
• Execution telemetry: Analysis settings, model selected, number of images processed, processing duration, and token consumption per execution.

You can disable non-essential telemetry in the desktop app settings. Error reporting that is essential for service stability cannot be fully disabled but is always sanitized.

2.6 Website Analytics and Cookies

Our website uses the following analytics and tracking technologies, subject to your consent:

• Google Analytics 4: Page views, sessions, and user engagement metrics. Configured with IP anonymization enabled and ad personalization signals disabled.
• Microsoft Clarity: Session recordings, heatmaps, and click tracking for UX improvement. May record mouse movements, scrolls, and clicks on our website.
• Meta Pixel: Conversion tracking for advertising campaigns. We apply PII sanitization to prevent transmission of personal data (emails, phone numbers, names) to Meta.

These technologies are loaded only after you provide consent through our cookie banner. You can change your preferences at any time via the cookie settings on our website.

2.7 Marketing and Communication Data

If you subscribe to our newsletter or marketing communications, we collect:

• Your email address and consent status
• Email engagement metrics (opens, clicks) via our email service provider, Brevo
• UTM parameters from your signup (source, medium, campaign) for attribution purposes

3. How We Use Your Information

3.1 Legal Bases for Processing (GDPR Article 6)

We process your personal data on the following legal bases:

3.2 Service Delivery

We use your data to provide, maintain, and improve the Service, including: analyzing your photographs using AI models, matching detected race numbers to participant databases, generating analysis results and visual tags, managing your token balance and purchase history, and delivering email notifications about your analysis results.

3.3 AI Model Improvement

With your consent, we may use anonymized analysis data and image crops to train and improve our AI models for race number detection, scene classification, and related features. This processing is governed by the training consent toggle in your account settings. You may withdraw consent at any time, and we will cease using your data for training purposes going forward.

3.4 Security and Abuse Prevention

We monitor for abusive use of our Service, including device fingerprinting for rate limiting and fraud prevention. This processing is based on our legitimate interest in maintaining service integrity and protecting our users.

4. Data Sharing and Third-Party Processors

We do not sell, rent, or trade your personal data. We share data with the following categories of processors, each bound by data processing agreements:

4.1 Sub-Processors

4.2 International Data Transfers

Where data is transferred outside the European Economic Area (EEA), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or the data processor's adherence to an adequate level of protection as determined by the Commission. You may request a copy of the applicable safeguards by contacting us.

4.3 Legal Disclosures

We may disclose your data if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of RaceTagger, our users, or the public.

5. Data Retention

We retain your data for the following periods:

• Account data: For the duration of your account, plus 30 days after deletion request to allow for recovery.
• Analysis results and execution logs: For the duration of your account. Deleted upon account deletion.
• Payment and transaction records: 10 years from the date of transaction, as required by Italian tax law (D.P.R. 600/1973).
• Error reports and telemetry: 12 months from the date of collection, then automatically purged.
• Website analytics data: 14 months (Google Analytics default retention), 30 days (Microsoft Clarity).
• Marketing consent records: For the duration of your subscription, plus 3 years as proof of consent.
• Image uploads for AI training: Retained only for the period necessary to complete model training. Deleted within 90 days of training completion or upon withdrawal of consent.

6. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR. You may exercise these rights by contacting us at privacy@racetagger.cloud or through your account settings where applicable:

6.1 Right of Access (Article 15)

You have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data. We will respond to your request within 30 days.

6.2 Right to Rectification (Article 16)

You may request correction of inaccurate personal data or completion of incomplete data. You can update your email and profile information directly in your account settings.

6.3 Right to Erasure (Article 17)

You may request deletion of your personal data. Upon receiving a valid erasure request, we will delete your account and associated data within 30 days, except where retention is required by law (e.g., tax records). Account deletion can be initiated through your account settings or by contacting us.

6.4 Right to Restriction of Processing (Article 18)

You may request that we restrict processing of your data in certain circumstances, such as while we verify the accuracy of contested data or assess whether our legitimate interests override your rights.

6.5 Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON or CSV). This includes your account information, analysis results, and execution history. You can export your data through your account settings.

6.6 Right to Object (Article 21)

You may object to processing based on legitimate interests (such as telemetry collection). We will cease processing unless we demonstrate compelling legitimate grounds. You may also object to direct marketing at any time, and we will comply without exception.

6.7 Right to Withdraw Consent (Article 7)

Where processing is based on consent (analytics cookies, marketing emails, AI training), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it, or with the supervisory authority in your EU Member State of residence.

7. Cookies and Tracking Technologies

7.1 Essential Cookies

These cookies are strictly necessary for the operation of our website and cannot be disabled:

• Authentication session cookies (Supabase Auth)
• Cookie consent preferences (racetagger_consent in localStorage)

7.2 Analytics Cookies (Require Consent)

These cookies help us understand how visitors interact with our website:

• Google Analytics (_ga, _ga_*): Measures page views, sessions, and user engagement. IP anonymization is enabled. Duration: up to 14 months.
• Microsoft Clarity (_clck, _clsk, CLID): Records session replays, heatmaps, and click behavior. Duration: up to 1 year.

7.3 Marketing Cookies (Require Consent)

• Meta Pixel (_fbp, _fbc): Tracks conversions from Facebook/Instagram advertising. PII is sanitized before transmission. Duration: 90 days.

7.4 Managing Your Preferences

You can manage your cookie preferences at any time through the cookie settings banner on our website. You may also configure your browser to block or delete cookies, although this may affect website functionality.

8. Desktop Application Specific Provisions

8.1 Local Data Storage

The desktop application stores the following data locally on your device:

• Authentication tokens for maintaining your login session
• Application settings and preferences
• Cached analysis configurations and participant presets
• JSONL log files for debugging purposes (stored locally, not transmitted unless you submit an error report)

8.2 Network Communications

The desktop application communicates with our servers for the following purposes:

• User authentication and session management
• Token balance checks and consumption tracking
• Image analysis via cloud AI models (Vertex AI)
• Downloading sport category configurations and participant presets
• Application update checks
• Telemetry and error report submission

8.3 Offline Capability

When using local ONNX models for analysis, the desktop app can function partially offline. However, token authorization, result storage, and certain features require an active internet connection.

9. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Row-Level Security (RLS) policies on all database tables
• SHA-256 hashing of device identifiers
• Automatic PII sanitization in error reports and analytics
• Role-based access control for administrative functions
• Regular security reviews and dependency updates

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email if the changes are significant
• Display a prominent notice on our website and/or desktop application

We encourage you to review this Privacy Policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data practices:

This Privacy Policy is effective as of March 27, 2026.