Privacy Policy

1. Introduction

Welcome to Last Lap Trivia.

Last Lap Trivia (“we,” “us,” “our”) is a daily motorsport geography trivia game available at lastlaptrivia.com (the “Site”). The Site is operated by Morgan Rand, an individual based in Florida, United States. For purposes of privacy laws such as the GDPR, we are the “controller” of the personal information described in this policy, meaning we decide why and how it is used.

For privacy questions or requests, contact us at support@lastlaptrivia.com.

This policy explains what information we collect when you use the Site, how we use it, who we share it with, and the choices you have. By using the Site, you acknowledge the practices described in this policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

2. Summary

• You can play our trivia game without signing in. Signing in is optional to save your scores.
• Your game answers are map pins on a trivia map. They are not your device's GPS location. We never ask for your device location.
• Your display name, saved scores, lap distances and streaks are public. Choose a display name you are comfortable making public.
• We use Google Analytics to understand how the Site is used, and Google AdSense to show ads.
• If you sign up for an optional paid subscription account, payment is handled by Stripe. We do not see or store your full card number.
• We do not sell your personal information.

3. Information we collect

3.1 Game and gameplay information

When you play, even without signing in, we store on our servers:

• A random game-session identifier
• The puzzle date
• Your progress through the puzzle
• Your map-pin answers
• Hint usage
• Scores and the distances between your answers and the correct answers

Your browser also stores a random device identifier and a copy of your completed scorecard so the Site can recover your result.

3.2 Account information (optional Google sign-in)

If you choose to sign in, Google sign-in is processed by Google, and account and authentication services are provided by Supabase Auth. Google can provide us basic profile information, such as:

• A Google account identifier
• Your email address
• Your name
• Your profile picture

We do not receive your Google password.

We use this to associate an account with your saved scores and streaks, so you can keep them across devices. Your game display name is separate from your Google profile name. Your account link, email address and sign-in credentials are not exposed by the public player and score endpoints.

3.3 Public profile and score information

Your display name, saved scores, lap distances and streaks are publicly readable, even before a leaderboard page is available. Anyone who can access our public endpoints may be able to see this information. Please do not use your real name, email address or other personal details as a display name if you do not want them public.

3.4 Payment and subscriptions

We may provide paid products and/or subscriptions on our Site. In that case, we use third-party services for payment processing (e.g. payment processors).

We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The payment processors we work with are:

Stripe

Their Privacy Policy can be viewed at: https://stripe.com/us/privacy

3.5 Technical and network information

When your browser connects to the Site or to the services that power it, those services receive network information such as your IP address, browser and device type, operating system, language, referring page and the pages or resources requested. This happens with our host (Vercel), our database provider (Supabase), Google (analytics and ads), our payment processor (Stripe) when you use paid features, and the map imagery provider (Esri/ArcGIS), which serves satellite map imagery directly to your browser.

3.6 Analytics information

We use Google Analytics to measure things like:

• Visits and traffic sources (referrals)
• Game completion
• Question difficulty
• Sharing of results
• Return visits

Google Analytics may collect identifiers such as cookie or device IDs, approximate location derived from your IP address, browser and device information, and interaction events.

3.7 Advertising information

We use Google AdSense to display ads. Google and its partners may use cookies and similar technologies, and may collect information such as your IP address, device identifiers and ad interaction, to serve, measure and (where permitted) personalize ads. See Section 7.

3.8 Emails and communications

We use Resend to send transactional emails (for example, sign-in, account and billing-related messages). If you contact us at support@lastlaptrivia.com, we receive your email address and whatever you include in your message.

4. Cookies and browser storage

Essential cookie. The last-lap-session cookie keeps your game associated with your browser. It is set for seven days and is renewed whenever the game API responds. It is strictly necessary for the game to function.

Local storage. Your browser's local storage keeps:

• The random device identifier
• Your completed scorecard
• Streak-notice state
• When you sign in, Supabase authentication state

Local storage remains until you, your browser or the application clears it. Signing out does not erase the local scorecard. Cookie expiry does not delete server-side records.

Analytics, advertising and payment cookies. Google Analytics and Google AdSense may set their own cookies or use local storage or similar technologies. Stripe may also set cookies or use similar technologies on pages where its payment tools are loaded, to process payments and prevent fraud.

Your controls. You can clear cookies and local storage in your browser settings. Doing so can remove local progress and sign you out. If you are signed in, you can recover account-linked scores by signing in again. Where required by law (for example in the EEA, UK and Switzerland), we ask for your consent before using non-essential analytics or advertising cookies, using the European regulations message provided through Google AdSense, and you can change your choice at any time through the privacy settings.

5. How we use information

We use game and account information to:

• Deliver the daily puzzle
• Calculate scores and distances
• Prevent duplicate daily score entries
• Recover your progress
• Maintain streaks across devices for signed-in players
• Display your display name and scores publicly as described above
• Send transactional emails
• Investigate failures, abuse and security issues

We use payment and subscription information to process payments, activate and manage paid accounts, send receipts and billing notices, prevent fraud, and keep tax and accounting records.

We use analytics information to understand how the Site is used, improve gameplay and question quality, and measure the effectiveness of sharing and referrals. We use advertising information to show and measure ads that help fund the Site. We may also use information to comply with law and enforce our terms.

6. Legal bases (EEA, UK and similar regions)

If you are in a region with laws like the GDPR, our legal bases are:

• Performance of a contract / providing the service: delivering the game, saving scores and streaks, managing your account, and processing paid account purchases.
• Legitimate interests: security, fraud and abuse prevention, fixing failures, and basic Site improvement, balanced against your rights.
• Consent: non-essential cookies and similar technologies used for analytics and advertising, where required. You can withdraw consent at any time.
• Legal obligation: where we must retain or disclose information by law, such as tax and accounting records.

7. Advertising

We use Google AdSense. Google, as a third-party vendor, uses cookies and similar technologies to serve ads based on your visits to this and other sites. Depending on your location and choices, ads may be personalized or non-personalized.

For visitors in the EEA, the UK and Switzerland, we use the European regulations consent message provided through Google AdSense so you can choose whether to allow cookies and personalized ads. If you do not consent, the ads you see may be limited or non-personalized, meaning they are based on page content rather than your past behavior.

• Learn how Google uses information from sites that use its services: policies.google.com/technologies/partner-sites
• Manage Google ad personalization: adssettings.google.com
• You may also opt out of some third-party ad vendors via aboutads.info/choices (US) or youronlinechoices.eu (EU).

The ad providers we use are responsible for their own data practices.

Pro accounts do not see third-party ads. While you are signed in with an active Pro account, we do not show you ads from our advertising provider. Sponsorship notices shown to all users may still appear. Analytics may still measure how you use the Site.

8. Who we share information with

We share information with service providers that help us run the Site. Providers that process information on our behalf may use it only to perform services for us. Some providers, such as Google and Stripe, also use certain information under their own privacy policies:

• Vercel, which hosts the application.
• Supabase, which provides our database and authentication services.
• Google, which processes optional Google sign-in, and also provides Google Analytics and AdSense.
• Stripe, which processes payments for paid accounts.
• Esri/ArcGIS, which supplies satellite map imagery that your browser requests directly, so Esri receives your IP address and related request data.
• Resend, which delivers transactional emails.

We may also disclose information if required by law or legal process, including valid requests from public authorities, to protect rights, safety or security, or in connection with a business transfer such as a sale or merger. Information you make public (display name, scores, lap distances, streaks) can be seen by anyone.

We do not sell your personal information for money. Note that sharing data with advertising and analytics partners may count as “sharing” for targeted advertising or a “sale” under some US state laws; see Section 11.

9. Transfer of data

Your information, including personal data, may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States and process it there.

Your consent to this Privacy Policy, followed by your submission of such information, represents your agreement to that transfer.

Last Lap Trivia will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy, and no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.

10. Retention of data

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

We will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Site, or we are legally obligated to retain this data for longer time periods.

11. Your data protection rights

Depending on where you live, you may have specific rights over your personal information. This section explains those rights and how to use them.

11.1 Choices available to everyone

You can clear local storage and cookies, choose a display name that does not identify you, avoid signing in, adjust your Google ad settings, and contact us to ask about, correct or delete your data.

11.2 Your rights under the General Data Protection Regulation (GDPR)

If you are in the European Union (EU), the European Economic Area (EEA), the United Kingdom or Switzerland, you have data protection rights under the General Data Protection Regulation (GDPR) or similar laws. You can read the GDPR at eur-lex.europa.eu/eli/reg/2016/679/oj.

We aim to take reasonable steps to let you correct, amend, delete or limit the use of your personal data. You may have the right to:

• Access, update or delete the personal data we hold about you
• Have inaccurate or incomplete data corrected
• Object to our processing of your personal data
• Ask us to restrict our processing of your personal data
• Receive a copy of your data in a structured, machine-readable and commonly used format (data portability)
• Withdraw your consent at any time where we rely on it
• Lodge a complaint with your local data protection authority

To find out what personal data we hold about you, or to have it removed from our systems, email us at support@lastlaptrivia.com. We may ask you to verify your identity before responding, and we may not be able to provide some features of the Site without certain necessary data.

11.3 Your rights under the California Online Privacy Protection Act (CalOPPA)

The California Online Privacy Protection Act (CalOPPA) requires websites that collect personal information from California residents to post a privacy policy that says what is collected and with whom it is shared. In line with CalOPPA:

• You can visit our Site anonymously. You do not need to sign in to play.
• Our Privacy Policy link includes the word “Privacy” and can be found on our home page.
• We will notify you of any changes to this policy by posting them on this page.
• You can change your personal information by emailing us at support@lastlaptrivia.com.

Third parties such as Google may collect information about your online activities over time and across different sites when you use the Site. See Section 7.

Do Not Track and Global Privacy Control. Browsers offer “Do Not Track” and “Global Privacy Control” settings, but there is no common standard for responding to Do Not Track, so the Site does not currently respond to Do Not Track signals. We do not currently respond to Global Privacy Control signals, but you can opt out of personalized ads atadssettings.google.com.

11.4 Your rights under the CCPA and other US state laws

If you are a California resident (or live in another US state with a similar privacy law), you may have the right to:

• Know what personal information we collect, use and disclose
• Access the specific pieces of personal information we hold about you (up to twice in a rolling 12-month period)
• Correct inaccurate personal information
• Delete your personal information, subject to legal exceptions
• Opt out of the “sale” or “sharing” of your personal information for targeted advertising
• Not be discriminated against for exercising these rights

In the past 12 months we have collected these categories of personal information:

• Identifiers, such as display name, email address, Google account identifier, device and session identifiers, and IP address
• Commercial information, such as paid account purchase details
• Internet or network activity, such as gameplay, usage and analytics data
• Approximate location derived from your IP address (not GPS)

We collect this information from you, from Google when you sign in, from your browser, and from our service providers. We use and disclose it as described in Sections 5 and 8. We do not sell your personal information for money, although sharing data with advertising and analytics partners may count as “sharing” under some state laws.

11.5 How to make a request

Email support@lastlaptrivia.com. We may need to verify your identity, for example by confirming control of the signed-in account. California residents may use an authorized agent, and we may ask for proof of authorization. Because anonymous play uses random identifiers, we may not be able to link a request to your data unless you can provide the relevant identifier. We will respond within the time required by applicable law.

11.6 Deleting your account

You can delete your account from your account page, or you can ask us to delete your account and associated personal data by emailing us at support@lastlaptrivia.com. Deletion removes your saved scores, streaks and history, and your display name from public score data. We may keep records we are legally required to keep, such as billing records, and anonymized game data that no longer identifies you, subject to technical and legal limits.

12. Children's Privacy

Last Lap Trivia's content is designed to be appropriate for general and family audiences. The Site is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at support@lastlaptrivia.com and we will delete it promptly. Where required by local law, users under the age of 18, or under the age of digital consent in their country, should have a parent or guardian's permission to use the Site.

13. Security

The security of your data is important to us. We use reasonable technical and organizational measures, including encrypted (HTTPS) connections and the security features of our hosting, database and payment providers, to protect your information. No method of transmission or storage is 100% secure, so we cannot guarantee its absolute security.

14. Third-party links and services

The Site may link to or load content from third parties, including map imagery and ads, that are not operated by us. If you click a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

15. Changes to this policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page, with a new “Last updated” date, and will give additional notice where the law requires it.

You are advised to review this policy periodically. Changes are effective when they are posted on this page.

16. Contact us

If you have any questions about this policy, please contact us:

By email: support@lastlaptrivia.com