Legal
Privacy Policy
Effective date: 1 January 2026 · Track Impulse is operated by Dennis Marinos trading as Track Impulse (ABN 22 384 472 747), Australia.
1. Overview
Track Impulse collects minimal personal data — only what is necessary to provide the service. We do not sell your data, serve ads, or share your information with third parties except as described in this policy.
This policy applies to the Track Impulse website (track-impulse.com), the desktop application, and all associated backend services.
2. What we collect and why
| Data | Why we collect it | Where it's stored |
|---|---|---|
| Email address | Account creation, verification, and licence management | Supabase (Sydney, AU) |
| Machine ID | Hashed device fingerprint used to enforce the 3-machine licence limit. Not linked to any personal identifier beyond your account. | Supabase (Sydney, AU) |
| Licence status & validation logs | Validating active access; detecting abuse. Logs retained for 90 days. | Supabase (Sydney, AU) |
| Payment data | Subscription billing. We never see or store card details — all payment data is handled entirely by Paddle. | Paddle (Merchant of Record) |
| Website analytics | Aggregate traffic metrics via Cloudflare. No cookies, no individual tracking. | Cloudflare |
The desktop application does not collect or transmit iRacing telemetry data, sim session data, or any gameplay information. All telemetry processing happens locally on your machine.
3. How we use your data
- To create and manage your Track Impulse account
- To send your email verification link and account-related emails
- To validate your licence on application launch
- To enforce the 3-machine limit per licence
- To contact you about service changes or the end of the beta period
We do not use your data for marketing to third parties, advertising, or profiling.
4. Third-party processors
We use the following sub-processors to deliver the service:
- Supabase — database and backend functions. Data hosted in Sydney, Australia. Privacy policy.
- Resend — transactional email delivery (verification emails only). Privacy policy.
- Paddle — payment processing and subscription management for paid plans. Acts as Merchant of Record. Privacy policy.
- Cloudflare — website hosting, CDN, and aggregate analytics. Privacy policy.
5. Data retention
- Account data (email, machine IDs, licence status) is retained while your account is active and for 12 months after deletion request
- Validation logs are automatically deleted after 90 days
- If you request account deletion, we will remove your personal data within 30 days
6. Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, email support@track-impulse.com. We will respond within 30 days.
7. Security
Licence data stored on your machine is XOR-obfuscated with a machine-specific key. All data in transit uses TLS. We do not store passwords. Access to backend systems is restricted to the service account and the operator.
8. Children
Track Impulse is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.
9. Australian Privacy Act
We handle personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles. If you have a complaint about our handling of your personal information, contact us first. If unresolved, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
10. Changes to this policy
We may update this policy from time to time. We will notify registered users by email of material changes. The effective date at the top of this page will always reflect the most recent version.
11. Contact
Privacy questions or data requests: support@track-impulse.com