1. Who we are

ZRaceLog is a drag racing timing platform operated by:

ZzNetwork is the data controller for personal data processed through ZRaceLog.

2. Data we collect

We collect the following categories of personal data:

3. How we use your data

We use collected data for the following purposes:

• Providing the service — displaying run times, driver profiles, event results, and leaderboards.
• Account management — authentication, password resets, email verification.
• Notifications — sending race result alerts and event updates when you have opted in.
• Payments — processing event registrations or photo purchases via Stripe.
• Analytics — understanding usage patterns to improve the platform (via Google Analytics 4).
• Legal obligations — complying with applicable Danish and EU law.

The legal basis for processing is contract performance (account and service use), legitimate interests (analytics, platform improvement), and consent (push notifications, analytics cookies).

4. Third-party data processors

We share data with the following processors, who act under our instructions and are bound by data processing agreements:

We do not sell your personal data to third parties.

5. Cookies & tracking

We use the following cookies and similar technologies:

We do not use advertising or tracking cookies.

6. Push notifications

If you opt in to push notifications, we store a subscription token (for web browsers, using the VAPID protocol) or a device token (for the Android app, via Google Firebase Cloud Messaging). These tokens are used solely to deliver race result alerts and event updates.

You can withdraw your consent and disable notifications at any time from your account settings or your device/browser notification settings. Revoking consent will delete your stored token.

7. Driver profiles & photos

Timing data and event photos are associated with a driver-at-event record, not directly with a user account. This record is created by event organisers and contains the driver's name, vehicle, and run times as provided to the event.

A user account is linked to driver records in two situations, both requiring your active consent:

1. Account creation — by creating an account and accepting these terms, you consent to your account being linked to events in which you participated as a registered driver.
2. Driver claim — by claiming a driver record, you explicitly accept that all data associated with that driver (times, vehicle, and tagged photos) becomes linked to your account.

Photos are uploaded by photographers and tagged to driver-at-event records. Tags submitted by regular users require approval by an Admin, Photographer, or Organiser before they become visible. Photos are personal data when they depict an identifiable person; they are processed on the basis of your consent (given at claim time) and our legitimate interests in providing event documentation.

8. Data retention & deletion

We retain your personal data for as long as your account is active.

Account deletion

You can delete your ZRaceLog account at any time in the app by going to Account Settings → Delete account.

If you are unable to access the app or need assistance, you can request account deletion by emailing lassekofoed@gmail.com.

When your account is deleted:

• Your account profile is permanently deleted.
• Your name and email address are permanently deleted from your account.
• Your name and email address are removed from event and timing records where they previously appeared.
• Your push notification tokens are deleted.
• Photo tags linked to your driver claim remain, but they are de-linked from your deleted account.
• Your timing data and vehicle name may be retained as anonymised historical records without personal identifiers, in order to preserve event result integrity for organisers and participants.

Any retained historical records can no longer be used to identify you personally.

Facebook Login users: If you used Facebook Login and want your ZRaceLog account data deleted, please email lassekofoed@gmail.com with the subject line Data deletion request. We will process deletion requests within 30 days.

9. Your rights under GDPR

As a resident of the EU/EEA, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your data (subject to the retention policy above).
• Right to data portability — you can request your data in a structured, machine-readable format.
• Right to object — you can object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent (e.g. push notifications, analytics cookies), you can withdraw it at any time.

To exercise any of these rights, contact us at lassekofoed@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Danish supervisory authority:
Datatilsynet — www.datatilsynet.dk

10. Contact us