Data we collect
If you sign in with Google, we store:
- your name, email address and profile picture URL, as provided by Google;
- your Google account identifier and the authentication tokens issued by Google for your sign-in;
- your role on the site (regular user or administrator) and, if applicable, a ban status;
- for each session: a session token, its expiry date, your IP address and your browser's user agent.
Data that stays in your browser
The “My list” feature (saved vehicles and parts) is stored only in your browser's local storage. It is not sent to or stored on our servers, and it is not linked to your account. Clearing your browser data removes it.
Your language choice is stored in a cookie and in local storage in your browser.
Why we use it, and on what legal basis
We do not sell your data, do not use it for advertising or profiling, and do not send you marketing emails.
- Signing you in and keeping you signed in — performance of the service you request (GDPR Art. 6(1)(b)).
- Securing the service, preventing abuse and debugging (session IP address and user agent, server logs) — our legitimate interest (Art. 6(1)(f)).
- Remembering your language — strictly necessary for the feature you ask for.
Cookies
We only use cookies that are strictly necessary: the authentication session cookie (HTTP-only, set when you sign in) and a language preference cookie. For this reason we do not show a cookie consent banner. We do not use advertising or analytics cookies.
Retention
- Account data is kept until you ask us to delete your account.
- Sessions expire automatically and are deleted together with your account.
- Server logs are kept only as long as needed for security and debugging.
Who processes your data
The site and its database are hosted on a self-managed server in the European Union. Images (brand, model and document pictures) and imported PDF manuals are stored in S3-compatible object storage at Scaleway, in Paris (fr-par, EU). Images are served through the site itself (under /media), so your browser does not contact a third party to load them.
Imported manuals are processed by Pitlane's own self-hosted processing worker, using local AI models (text extraction, OCR and translation). No third-party AI service is used, and only the content of the manuals is processed, never user data.
Your account data is not shared with anyone else, except:
- Google, which authenticates you when you choose “Sign in with Google” and is subject to its own privacy policy. We only receive basic profile information (name, email, picture).
- Google Fonts, from which the site's fonts are loaded; your browser therefore contacts Google's font servers and your IP address is visible to them.
- Cloudflare (DNS, and cookie-free aggregated audience statistics via Cloudflare Web Analytics).
Your rights
Under the GDPR you have the right to access your data, correct it, have it deleted, restrict or object to its processing, and receive a copy of it. To exercise these rights, or to have your account deleted, email contact@pitlane-rc.com. We will answer within one month.
You may also lodge a complaint with your data protection authority (in France, the CNIL).
Changes
We may update this policy when the service changes. The date of the latest revision is shown at the top of this page.
Contact
For any question about your personal data: contact@pitlane-rc.com.