Privacy Policy
Last updated: September 26, 2026
Hyper Red, operated by Brandon Van Zyl in South Africa, runs this community racing sign-up and roster site. This policy explains how we handle personal information when you visit, sign up or contact us.
What we collect
- Sign-up details — your in-game name (IGN), car class, race day and time slot, Discord username and optional Steam friend code. Your IGN, class, day and time appear on the public roster; Discord and Steam details are stored separately for event coordination.
- A device/session identifier — every visitor is automatically signed in anonymously (via Firebase Authentication) so we can tell "your" entries apart from everyone else's and enforce the per-person weekly entry cap. This identifier is not tied to your name or email unless you separately create an admin account.
- Optional usage analytics — after you accept analytics, Google Analytics collects traffic information such as pages viewed, device/browser information and approximate geographic location derived from IP address. We do not request your device's precise location.
- Security signals — Firebase App Check uses Google reCAPTCHA v3 and technical browser signals to help protect the sign-up service from automated abuse.
- Organiser accounts — administrators sign in with an email address and password through Firebase Authentication; administrative activity can be recorded in an audit log.
What we don't collect
The public sign-up form does not ask for your legal name, email address, payment card information or postal address. We do not sell driver details.
Your browser calculates your local display time without sending your precise location to us. The site does not access your microphone or camera.
Why we use information
We use sign-up details to run events and publish the race roster, contact drivers about their entries, prevent duplicate or abusive submissions, maintain the schedule and administer the site. We use optional analytics to understand site traffic. We process information as needed to provide the service you request, protect the site and, for analytics, based on your choice. Where applicable, we also comply with legal obligations.
Who can see it
The weekly grid (IGN, class, day, time) is public by design so other drivers and admins can see who's racing. The underlying public entry record also contains its anonymous account identifier and creation time. Anyone visiting the site can see the grid.
Your Discord username and Steam friend code are not public. They're stored separately from the public roster entry. The site is designed to let the entry owner using the same anonymous sign-in and authorised Hyper Red admins view them. Your local browser also remembers details you entered to refill the form. Other visitors are not shown these contact details on the public grid.
Service providers and transfers
We use Google Firebase for authentication, database storage and App Check, Google reCAPTCHA for abuse prevention, Google Analytics if you accept it, and Cloudflare Pages to deliver the site. These providers process technical information to provide their services. Information may be processed outside South Africa, subject to the safeguards and requirements that apply to the relevant transfer.
How long we keep it
Entries are tied to a race week. Older entries can remain in the database for historical roster purposes until an admin removes them. We have not set a fixed automatic deletion period. Browser data remains until you clear it or the browser removes it; Google controls its own service data under its applicable settings. Contact us if you want an entry or your driver details reviewed or removed.
Security
The site uses HTTPS, Firebase Authentication, App Check and database access rules to protect information. No online service can guarantee absolute security. If we become aware of a security compromise affecting personal information, we will respond and notify affected people and authorities when required.
Cookies and browser storage
Your browser stores a few small values for this site: your cookie choice, display preferences, your most recently entered IGN, Discord username and optional Steam friend code (so the form is filled in next time), and a copy of the season schedule. These stay on your device. If you accept analytics, Google Analytics may also set cookies, and reCAPTCHA/App Check may set cookies needed for the anti-bot check. The Cookie Policy explains this storage. You can clear these at any time in your browser settings, or with "Not you? Clear details" on the entry form.
Your choices
- You can decline analytics cookies via the banner shown on your first visit, and change that choice later with the Cookie Settings control in the main-site footer.
- You may request access to, correction of or deletion of information we hold about you by emailing us. We may need enough information to verify your identity and locate your entry. Some requests are subject to applicable legal limits.
- You can ask an admin to remove your sign-up entry or driver data from the roster.
- You can stop using the site at any time — nothing here requires an account beyond the automatic anonymous sign-in.