Privacy
Last updated
FurmulaWAN is a private F1 fantasy game for invited members. This page says what we keep about you, who can see it, and who helps us run the site.
What we keep
We keep the email address you sign in with, the name and avatar you choose, and your game activity (teams, chips, reactions).
If you ask to join, we also keep the request: your email address, the name and note you typed, and how you asked (the join form, a member referral, or Google).
Who can see it
Other members of your league can see your name, avatar, team name (after the lock), kart, points and rank, and your lineup after each qualifying lock.
Nobody but the administrators can see your email address.
Signing in with Google
If you sign in with Google we use your Google account only to confirm your email address and to suggest a name. We ask Google for your email address and basic profile (the openid, email and profile permissions) and nothing else, so we cannot read your mail, files, contacts or calendar.
We keep the identifier Google gives us for your account so we recognise you next time. We do not show your Google picture to anyone, and we do not sell or share what Google tells us.
Cookies
We use a cookie to keep you signed in, and a second one that lasts five minutes to protect Google sign-in from forgery. We use no advertising or analytics cookies and no trackers.
Who helps us run the site
We use a small number of services, and each one sees only what its job needs:
- Hosting: Hostinger runs the server the site lives on.
- Accounts and data: Supabase holds the database and handles sign-in.
- Sign-in email: Resend delivers the link we email you.
- Bot check: Cloudflare Turnstile checks that the join form is filled in by a person.
- Google sign-in: Google, only if you choose it.
If you ask to join
A request nobody reviews expires after 60 days. A request that is rejected or expired is deleted 90 days after that decision.
To spot floods of fake requests we also keep a scrambled (hashed) fingerprint of the network address and browser behind a request. No screen shows it, and it is cleared 30 days after the request.
Your choices
You can ask an administrator to delete your account and data at any time. Ask the person who invited you or any league administrator.
Changes
If we change what we keep or who sees it, we will update this page and the date at the top.