Privacy Policy

We collect the minimum data necessary to run the platform:

• Account information — name, email, country, and stance when you create an account (via Google or email sign-up).
• Profile data — avatar photo, birth date, and discipline preferences you choose to add.
• Race data — event registrations, qualifying times, knockout results, and championship standings generated through your participation.
• Technical data — basic server logs (IP address, browser type) processed by our hosting provider for security and reliability.

Your data is used exclusively to operate the platform:

• Authenticate your account and maintain your session.
• Display your rider profile, race history, and statistics.
• Run events — registrations, qualifying, knockouts, results, and championship standings.
• We do not send marketing emails. We may contact you for account-related issues only.

Race results are public. When you race an event run on R4WRUN, your name, country, category, bib, times and placings are published as that event's results, like any official result sheet.

• Legal basis: the legitimate interest of organizers, riders, federations and R4WRUN in a complete and accurate competition record — standings and every other rider's placings depend on it (GDPR Art. 6(1)(f)). Keeping it as an archive is covered by Art. 17(3)(d).
• Archive results: we also publish results of past events taken from organizers' and federations' public result sheets. Riders in them who have no R4WRUN account appear with their name and country only — no profile page and no rating.
• If you delete your account: your name and country stay on the results of the events you raced (or whose start field you were already placed in), shown the same way as an archive rider. Your profile page, photo, birth date, social links, activities, messages and all your other personal data are erased. Entries for events you haven't raced are cancelled and their organizers told.
• Riders under 18: if you are under 18, or raced any event before turning 18, deleting your account removes your name from all results — they show as "Deleted Rider" instead.
• Coming back: if you create a new account later, we can reconnect your old results to it — only when you ask us and after we confirm it is you. We never do it automatically.
• To have your name removed from results anyway (for example for safety reasons), or to correct an archive result, email us. We assess each request against the integrity of the competition record and reply within one month.

r4wRun uses only essential cookies required for the application to function:

• Authentication cookies — session tokens set by Supabase to keep you logged in. These are strictly necessary and cannot be disabled.
• We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.
• Analytics — we use Cloudflare Web Analytics to count page views. It sets no cookies, stores nothing on your device, and cannot follow you across other websites.

Because we only use strictly necessary cookies, no cookie consent banner is required under EU ePrivacy regulations.

We rely on the following services to operate the platform:

• Supabase — authentication, database, and file storage. Your account data and race data are stored in Supabase's infrastructure.
• Cloudflare — hosting, content delivery, and cookieless Web Analytics. Cloudflare processes requests to serve the application and may set a technical cookie for bot protection.
• Google OAuth — if you choose to sign in with Google, Google processes your authentication. We only receive your name and email.

We do not sell, share, or provide your data to any other third parties.

We retain your data as follows:

• Account and profile data is kept as long as your account exists.
• Race results and event data are kept indefinitely as part of the public competition record — see "Race Results & the Competition Record".
• You can delete your account at any time from your profile, or ask us to do it by email.
• Server logs are automatically rotated and deleted by our hosting providers within their standard retention periods.

If you are in the European Economic Area (EEA), you have the following rights under GDPR:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct any inaccurate personal data (you can also edit your profile directly).
• Erasure — delete your account and personal data. Race results stay in the competition record as described above.
• Portability — request your data in a machine-readable format.
• Objection — object to processing of your personal data, including your name on race results. We assess each objection and reply within one month.

To exercise any of these rights, contact us at the email below.

For any privacy-related questions or requests:

Email: info@r4wrun.com