RACEWEEK

Privacy Policy

Last updated: 5 September 2026

race-week.com is a personal, non-commercial project. This page describes exactly what happens to data when you visit, and is written to match what the site's code actually does.

No cookies, no accounts

The site sets no cookies of any kind — neither the page nor the analytics request. There is no registration, no login, and no form to submit.

What the analytics record

Analytics are self-hosted on stats.vasaas1.com, a server run by the same person as this site. No third-party analytics product is involved. Each page view stores one row containing:

  • a timestamp;
  • the site name and the page path — the path only, so query strings such as ?series=f2 are never recorded;
  • a two-letter country code derived from your IP address by Cloudflare;
  • your browser name (for example "Firefox"), derived from the user-agent string;
  • a visitor hash, described below.

Your referrer is not collected, and your full IP address is never stored.

The visitor hash

To count visitors without identifying them, each view stores a short irreversible hash of your IP address and browser, combined with a secret salt that changes every day. Because the salt rotates, the same visitor produces a different value the next day, so views cannot be linked together over time and the hash cannot be reversed into an IP address.

This is the same approach used by privacy-focused analytics tools such as Plausible and Fathom. Within a single day the value is pseudonymous rather than strictly anonymous, which is why it is described here explicitly.

Retention

Analytics rows are automatically deleted after 90 days by a job that runs daily. Cloudflare's own connection logs are retained under Cloudflare's policy (typically around 24 hours on free plans).

Cloudflare

The site is served through Cloudflare, which processes connection metadata (IP address, TLS version, HTTP headers) to deliver pages and protect against abuse. Cloudflare acts as a data processor. See Cloudflare's Privacy Policy.

No third-party tracking

No resources are loaded from Google, Meta, ad networks, or any other third-party tracking service. Fonts and all other assets are served from this domain. The only external request the page makes is to the self-hosted analytics endpoint above.

Your timezone

The site reads your browser's timezone to show session times in your local time. This happens entirely in your browser and is never sent to the server.

Legal basis (GDPR Art. 6)

Processing rests on legitimate interest (Art. 6(1)(f)) in operating the site, understanding aggregate usage, and protecting against abuse. Given that no full IP address is retained, no cookie is set, no cross-site tracking occurs, and identifiers cannot be linked across days, this processing is not considered to override your rights.

Your rights

Under GDPR you may request access, rectification, erasure, restriction, objection, and portability. Because no directly identifying information is stored and visitor hashes cannot be traced back to a person, most of these are satisfied by design — a request to access or erase "your" data cannot be matched to a specific individual, as there is nothing linking a stored row to you.

Contact

Privacy questions: [email protected]

← Back to Race Week