Privacy Policy

Who handles your information

The Premier Racing League organisers run this website. For privacy questions or requests, contact hellionflame@pm.me.

Google, Discord and email sign-in

When you choose Google or Discord, Supabase Auth receives your provider account identifier, email address and any basic profile information returned by that provider. PRL uses your Supabase account identifier and verified email to sign you in, match invitations and manage your league account. The sign-in request is limited to identity, email and basic profile information.

If you use a magic link, your email address is used to send the link and associate the sign-in with your account.

Profile and league records

• Your profile can contain your display name, timezone, Discord username, gaming IDs and earlier display names.
• Competition records include entries, teams, attendance, results, awards, incidents, decisions and penalties associated with your participation.
• Material you submit can include notes, evidence links, screenshots and responses to stewards. Operational records include account notifications and a history of changes made in the league workspace.

How we use and share information

We use this information to operate accounts, schedule and score races, handle reports and appeals, communicate league updates and protect the service. We use Google and Discord sign-in information for authentication and related account administration.

Results, standings, rosters and published decisions can show names and competition details to members or the public, depending on league settings. Contact details, case evidence and internal records have separate access controls. People involved in a case and assigned officials can see the records made available to them.

Supabase provides authentication, database and file storage. Vercel provides production hosting. If you request a magic link, the configured email delivery service handles the address to deliver it. Your chosen sign-in provider handles the authorization step. Links to external evidence are subject to the hosting service’s privacy practices.

Cookies and storage

Sign-in cookies complete authentication and keep your session active. A preference cookie remembers the state of the navigation sidebar. Hosting and authentication services also handle request information to deliver pages and secure the service.

Retention and your choices

Account and competition records are kept for the time needed to run the league, resolve cases and maintain competition history. OAuth provider data is removed when it is no longer needed or when you request deletion, subject to retention required by law. Where appropriate, a historical result may remain with the identifying account information removed.

You can edit your profile in your account and ask to access, correct or delete information by following the account data and deletion instructions. Use the same contact if you believe someone below the minimum age has supplied information to PRL.