Última atualização: 4 November 2026
Este documento é publicado em inglês, e a versão em inglês é a que vale.
This policy explains what personal data TheTenths collects, why, who it is shared with, how long it is kept and what rights you have. It is written to meet the EU and UK General Data Protection Regulation (GDPR) and US privacy laws, including the California Consumer Privacy Act (CCPA/CPRA) and the California Online Privacy Protection Act (CalOPPA).
The controller of your personal data is the operator of TheTenths. You can reach us about anything in this policy through Support & Feedback.
Email address, name or display name, password (stored only as a BCrypt hash), and — if you sign in with them — your Google account ID and picture or your Steam ID, persona name and avatar. Anything you add on your profile: country, location, favourite simulator, contact email, unit and privacy preferences.
Only if you install the telemetry client and pair it with your account: the simulator, car and track, lap times and validity, the lap trace (position on track, speed, steering, pedals, gear, G-forces), tyre, fuel and car settings, weather, session type, incidents (spins, off-tracks), driving patterns the coach detects, the client version and your connection's ping. Sharing it is voluntary and you can stop at any time.
When you use the site or the client: your IP address, browser or client user agent, the page or endpoint requested, the referring page, and the time. We look up which country your latest IP address belongs to (not your precise location).
Support and feedback messages, with any files you attach, and your event registrations.
Only if you tick "Send logs anonymously" in the client: crash reports and session logs, with your Windows account name, token and email addresses removed. They are not linked to your account.
Your microphone is recorded only while you hold the push-to-talk button, and the audio is recognised on your own computer — it is never sent to us. In the "Speech + AI" mode, the words recognised (text only) may be sent to us to work out which command you meant.
We do not sell your personal information, do not "share" it for cross-context behavioural advertising as the CCPA defines it, and do not make decisions with legal or similarly significant effects about you by automated means.
Your display name, your valid laps and their times appear on the public leaderboards and event results, and other drivers may compare against your laps. Your driver profile is hidden unless you choose to show it, and only you see your incidents and driving patterns.
Only with service providers that process data for us under contract, and only what each one needs:
We may also disclose data where the law requires it, or to protect our rights or someone's safety.
Some of these providers are in the United States. Where personal data from the EU, EEA or UK goes to a country without an adequacy decision, the transfer relies on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
To reduce latency we may run the Service from servers in several regions, so your data may be stored or processed in the region nearest to you as well as in the United States. The same safeguards apply wherever it is.
When an account is deleted, its laps, telemetry, setups, achievements and registrations are deleted. What stays is what no longer identifies you: lap counts and times in the community statistics under an account number only, and your support messages with your name and email removed.
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent. You can delete your account yourself on your profile, and delete single laps from your lap list; for anything else, contact us. You also have the right to complain to a data protection supervisory authority, in particular in the country where you live.
If you live in California or another US state with a privacy law, you have the right to know what personal information we collect and how we use it, to access, correct and delete it, to opt out of its sale or sharing (we do neither), and not to be treated differently for using these rights.
We answer requests within one month (45 days under US law), and may need to confirm that the request comes from you.
We use cookies that are necessary for the site to work: your session, staying signed in ("remember me", up to one year), and security tokens. These need no consent. Google Analytics cookies are set only if you accept them in the cookie banner; you can change your choice at any time with "Cookie settings" at the foot of every page. If your browser sends a Global Privacy Control signal, we treat it as a refusal of analytics cookies unless you accept them yourself. We do not otherwise respond to "Do Not Track" signals, as there is no common standard for them.
The Service is for drivers aged 16 and over, and we do not knowingly collect personal data from anyone younger. If you believe someone under 16 has given us data, contact us and we will delete it.
Traffic is encrypted with HTTPS, passwords are stored only as hashes, and access to the data is limited to what running the Service needs. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the authorities as the law requires.
We will update this policy when what we do changes. The date at the top says when; for a material change we will tell signed-in users on the site or by email.