NBR Info – Privacy Policy

Last updated: 28 October 2026

NBR Info is a lap-timing and information app for drivers at the Nürburgring. This policy explains what personal information the app collects, why, who it is shared with, how long we keep it and what your rights are.

1. Who we are

NBR Info is run by NBR Info ("we", "us"). We are the "controller" of your personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Contact: hello@nbrinfo.app

2. What we collect

Information you give us

• Account details: your email address and a password. Passwords are stored only as a secure one-way hash by our sign-in provider, so we cannot see them.
• Sign in with Google: if you choose "Continue with Google", Google shares your email address, your name and a link to your Google profile picture with us. We use the name as your starting display name and the picture as your starting profile photo. You can change both.
• Profile: display name, username (if you set one), profile photo (if you add one), country (if you choose one; "prefer not to say" is an option), home circuit and your preferred units.
• Cars: for each car you add: make, model, year, horsepower, drivetrain, tyre category, modifications (suspension, brakes, weight reduction), colour and an optional photo.
• Support and coaching messages: the category and message you send us through the app.
• In-app feedback: when you use Send feedback (in Settings or at the bottom of a session summary), we save the type you picked (Bug, Idea or Other), your message, the screen you sent it from, the app version and your phone type (operating system and version, and screen size). It is linked to your account.
• Email choices: whether you want the weekly summary email and leaderboard alert emails (see section 5a).
• Safety acknowledgement: the date and time you confirmed you had read the app's safety notice.

Information created when you use the app

• Lap timing data: for each session: the type of session, start and end time, car used, number of laps, best lap and top speed. For each lap: lap number, lap time, sector times, top speed, start time and whether it counted as a valid lap.
• Achievements and in-app notifications that you have earned.
• Settings: whether you appear on the leaderboard and whether you appear on the live map.
• Crash reports: if the app hits an error or crashes, it sends us a short technical report so we can find and fix the problem. A report contains: the error message and the technical "stack trace" (which part of the app's code failed), whether the app crashed or recovered, which screen you were on, the app version, your phone's operating system and version and its screen size, the time, and your account ID if you are signed in (reports from before you sign in have no account ID). It does not contain your location, photos, contacts or anything you typed. If the same error happens again within 24 hours, we just add 1 to a counter instead of saving a new report. If your phone is offline, up to 10 unsent reports wait on your phone and are sent later.
• Email log: a record of each email the app sent you (type of email, your email address, subject, time and whether it was handed over for delivery), so we can check delivery problems and keep to the limits in section 5a.

Your location

• The lap timer uses your phone's GPS while a timing session is running. It works out your lap times, sector times and top speed on your phone.
• We do not upload or store your GPS route or your position. Only the results (times and speeds) are saved to your account.
• The app asks your permission before using location, and you can turn it off at any time in your phone's settings. The lap timer will not work without it.
• The app has a live map setting and a database table for live positions, but the current version of the app does not send your position to us. If we switch on live positions in a future version, we will update this policy and ask you first. Any live position would be deleted automatically if it is not updated for 1 hour.

Stored only on your phone

• Your theme (light, dark or follow phone) and your choices for spoken lap times, the timer mode and keeping the screen on. Spoken lap times are produced by your phone's own text-to-speech, and no audio is recorded or sent to us.
• Sessions waiting to upload: if you have no signal when a session ends, the session and its laps (the same details listed above, including your account ID and car) are kept on your phone and uploaded automatically when you are back online. They are removed from your phone once uploaded.
• Personal best cache: a copy of your best lap times (overall and per class) so the timer can show "new PB" straight away, even offline.
• Unsent crash reports: up to 10, as described above.

These stay on your phone until they are uploaded or replaced, or until you uninstall the app or clear its data.

What we do not collect

We do not use advertising, advertising trackers or third-party analytics tools, and we do not sell your information. Crash reports (above) are our own error reports, stored in our own database; they are not used to track you or for advertising.

3. What other drivers can see

If "Show me on the leaderboard" is switched on (it is on by default), other signed-in drivers can see the following on the leaderboard:

• your display name (or "Driver" if you have not set one)
• your country flag, if you chose a country
• your car's make, model and drivetrain
• your best lap time, the top speed on that lap and the date you set it

You can hide yourself at any time in Settings → Leaderboard. Your laps stay saved in your own history.

If you beat another driver's best time on a leaderboard, that driver may get a leaderboard alert email (section 5a) showing the same details they can already see on the leaderboard: your display name, country flag (if set) and lap time. If you hide yourself from the leaderboard, your laps do not trigger alerts.

Profile and car photos are stored at a web address that is hard to guess. Anyone who has that exact address can view the photo.

4. Why we use your information (lawful bases)

5. Who we share it with

We use these service providers to run the app. They process data only on our instructions.

• Supabase (database, sign-in and file storage). Your data is stored in Supabase's EU (Ireland) region.
• Resend (email delivery), based in the USA. Resend sends the app's emails on our behalf. For each email it receives the recipient's email address and the email's contents:
  • support and coaching messages and in-app feedback: an email to us containing your message, display name, username and email address (for feedback also the screen, app version and phone type). For feedback, the email's "reply to" is set to your email address so that we can answer you directly;
  • leaderboard alert and weekly summary emails to you: your display name, your lap times and, for alerts, the other driver's display name, country and lap time;
  • crash report summaries to us (at most one an hour): the error details listed in section 2 and your username or display name if you were signed in, but not your email address.
  • Account emails (sign-up confirmation and password reset) are also sent through Resend.
• Google, only if you choose Sign in with Google.
• OpenStreetMap, which provides the map images. Your phone downloads them directly from OpenStreetMap's servers, which receive your IP address in the same way as any website. The app does not use Google Maps.
• Sharing a lap: if you tap Share (for example to WhatsApp), only what you choose to share is sent, through the app you pick.

Where a provider handles data outside the UK, we rely on the legal safeguards the UK requires, such as the UK International Data Transfer Addendum, Standard Contractual Clauses or the UK–US "data bridge". Our providers (including Supabase and Resend) offer these safeguards in their standard data processing terms.

We will only share your information with anyone else if the law requires it.

5a. Emails from the app

Apart from account emails (sign-up confirmation and password reset), the app can send you two kinds of email. Both come from noreply@nbrinfo.app.

• Leaderboard alerts ("You've been beaten"): on by default. Sent when another driver beats your best time on the overall or a class leaderboard. You get at most one a day, and only if you appear on the leaderboard and have confirmed your email address.
• Weekly summary: off by default. If you switch it on, you get one email on Monday mornings with a summary of the previous week, and only in weeks when you drove.

You can switch either one off at any time in Settings → Emails. Every one of these emails also has an unsubscribe link (for that kind of email, or for all of them) and a link to the settings. Unsubscribing does not affect account emails, which we need to send to keep your account secure.

6. How long we keep it

• Your account and app data: until you delete your account.
• Crash reports: deleted automatically 90 days after the error was last seen.
• In-app feedback: deleted automatically after 24 months, or earlier if you delete your account.
• Email log: deleted automatically after 12 months.
• Leaderboard alert queue (the list of alerts waiting to be sent): deleted automatically after 30 days. Alerts that could not be sent within 48 hours are cancelled.
• When you delete your account: your account, profile (including your email choices and your personal unsubscribe code), cars, sessions, laps, achievements, notifications, support messages, feedback, crash reports linked to your account, your email log entries, pending leaderboard alerts to or about you, and photos are deleted from our database straight away.
• Emails we received from you: support, coaching and feedback emails in our inbox are kept for up to 12 months after the matter is closed, then deleted.
• Backups and logs: our providers keep routine system logs and backups for a short, limited period, after which they are overwritten.

7. Deleting your account

In the app, go to Profile → Settings (gear icon) → Account → Delete account, type DELETE and tap Delete forever. This deletes your account and data immediately, including the items listed in section 6. Anything still waiting on your phone (section 2) is removed when you uninstall the app or clear its data.

If you cannot use the app, email hello@nbrinfo.app from the email address on your account and ask us to delete it. We will do so within 30 days and confirm by email. See our separate account deletion page: https://nbrinfo.app/delete-account.

8. Your rights

Under UK data protection law you have the right to:

• see the personal information we hold about you
• correct it
• delete it
• restrict or object to how we use it
• receive a copy of it in a portable format
• withdraw your consent at any time (for example, by switching off location permission or the weekly summary email)
• object to emails sent on the basis of legitimate interest, such as leaderboard alerts, by switching them off or using the unsubscribe link

To use any of these rights, email hello@nbrinfo.app. We will reply within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to sort it out first.

9. Children

NBR Info is intended for drivers aged 18 and over and is not aimed at children.

10. Security

Data is sent over encrypted connections (HTTPS). Database rules ensure each driver can read and change only their own data, apart from the leaderboard details listed in section 3. No system is perfectly secure, but we take reasonable steps to protect your information.

11. Driving safely

NBR Info is a timing tool, not an encouragement to race on public roads. During tourist drives, the Nürburgring Nordschleife is a public toll road, and the road traffic rules (StVO) and the circuit's own regulations apply.

12. Changes to this policy

If we make important changes, we will tell you in the app. The date at the top shows when this policy was last updated.