Privacy policy
How GoKart Crew handles your personal data, and what you can ask us to do with it.
Last updated: 22 September 2026
Who we are
GoKart Crew is operated by Roadtrip Technologies Limited, registered with the Companies Registration Office (Ireland), no. 616164, registered office 142 Charlotte, Honey Park, Dún Laoghaire, Co. Dublin, A96 HX8K, Ireland. We are the data controller for the personal data described here. For anything about your data, write to privacy@gokartcrew.com.
What we collect
| Data | What it is |
|---|---|
| Account | Email address, display name, handle, country, avatar, and whether your profile is public. From Google sign-in we receive your name, email address and profile picture. |
| Phone number | Required before you join a race, so the organiser can add you to the race's WhatsApp group. Stored apart from your public profile and never shown to other members on the site. |
| Racing | Races you join, confirm or leave, results, finishing positions, lap times, points and podiums. |
| Karma and lifts | Lifts you offer or accept, the town you set off from, karma earned and spent, and the cosmetic items you unlock. |
| Membership | Invites you create or redeem, and access requests, including the member who vouches for you and any message you write. |
| Payments | Stripe processes your card. We store the Stripe customer and payment identifiers, the amount, currency and status. We never see or store your full card number. |
| Technical | Sign-in cookies, and the usual server logs (IP address, browser, pages requested) kept for security and troubleshooting. To rate-limit the public access-request form we store a salted hash of the IP address, never the address itself. |
We do not use advertising or analytics cookies. The only cookies we set are the ones that keep you signed in and remember the invite you arrived with.
Why we use it, and on what legal basis
- To run your membership and your races — creating your account, holding your place on a grid, charging your card when you confirm, refunding you when a race is called off, and showing results and leaderboards. Legal basis: performance of our contract with you.
- To keep the community working — invites, vouching, karma, lifts, preventing abuse of the public forms, and keeping the platform secure. Legal basis: our legitimate interest in a community that stays civil and safe.
- To meet our legal duties — keeping records of payments for tax and accounting. Legal basis: legal obligation.
- To send you anything optional, such as a newsletter, only if you ask for it. Legal basis: consent, which you can withdraw at any time.
What other members can see
Your handle, display name, avatar and racing record (races, positions, best laps, karma and unlocked items) are visible to other members, and are public on the web if you switch your profile to public in your account settings. Your email address and phone number are never shown on the site. When you join a confirmed race, the organiser can see your phone number so they can add you to that race's WhatsApp group; if you join that group, WhatsApp and the people in it will see your number, under WhatsApp's own terms.
Who we share it with
| Service | What it does for us |
|---|---|
| Supabase | Database, accounts and sign-in emails. Hosted in Ireland. |
| Vercel | Website hosting. Our server code runs in Dublin. |
| Stripe | Card payments and refunds. Stripe is the controller of your card data. |
| Resend | Sending our emails (invites, seat offers, confirmations). |
| Only if you choose to sign in with Google. | |
| OpenStreetMap | Circuit maps. Loading a map sends your IP address to OpenStreetMap. |
These providers act on our instructions, except Stripe, Google, WhatsApp and OpenStreetMap, which decide for themselves how they use the data you give them. Some of them are outside the European Economic Area; where that happens, the transfer relies on the European Commission's standard contractual clauses or an adequacy decision. We never sell your personal data.
How long we keep it
Your account and racing history stay until you ask us to delete them. Payment and accounting records are kept for six years, as Irish tax law requires. Server logs are kept for a short period, and the hashed rate-limit records for one day. Results already published on a leaderboard may stay as part of the race record, with your handle removed if you delete your account.
Your rights
Under the GDPR you can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. Write to privacy@gokartcrew.com and we will answer within one month. If you are not happy with our answer, you can complain to the Irish Data Protection Commission at dataprotection.ie.
Children
GoKart Crew is for adults. You must be 18 or over to be a member, because joining a race means paying for it. Circuits apply their own age, height and safety rules on the day.
Changes
If we change this policy we will update the date at the top of this page, and tell members by email when the change matters.