TreCorsa ("we", "our", or "us") operates the TreCorsa website and track editor (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
We collect information you provide directly and information that is collected automatically.
Account and registration
- Email address – when you register with email/password or sign in with Google.
- Display name – you may set a name in your profile; for Google sign-in we may use a default display name until you change it.
- Password – stored only in hashed form (we never store your plain-text password).
- Google account data – when you use "Sign in with Google", we receive your email and a unique identifier from Google to link your account. We do not store your Google profile name by default; you can set a display name in your account settings.
Content you create
- Tracks, exports, and assets – track projects, exported files, and uploaded assets (e.g. textures, models) are stored and associated with your account so you can save, load, and manage them.
Contact and support
- Contact form – when you use the contact form we collect your name, email, subject, and message. This information is used to respond to you and may be processed via our internal tools (e.g. notifications to our team).
- Bug reports – if you submit a bug report, we may receive the content you submit and technical details necessary to investigate the issue.
Automatically collected information
- Session data – we use server-side sessions to keep you signed in. Session data includes a session identifier stored in a cookie (see Cookies below) and, on our server, your user id, email, display name, and similar account-related data needed to provide the Service.
- Usage and analytics – we use Google Analytics to understand how the site and editor are used (e.g. pages visited, general usage patterns). This may include device and browser information and approximate location at country level. You can control cookies via your browser or Google’s tools.
- Logs – our servers may log requests (e.g. IP address, timestamp, URL) for security and operation. We do not use these to profile you personally beyond what is necessary for security and abuse prevention.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service (e.g. saving tracks, processing exports, account management).
- Authenticate you and enforce our terms and security
- Send you transactional emails (e.g. email verification, password-related messages) via our email provider.
- Respond to your contact form submissions and support requests.
- Process payments when you make a purchase (see Third-party services below).
- Analyse usage via Google Analytics to improve the Service.
- Comply with legal obligations and protect our rights and safety.
3. Cookies and Similar Technologies
We use cookies and similar technologies as follows:
- Session cookie – a secure, HTTP-only cookie is used to keep you logged in. It expires after a period of inactivity (e.g. 7 days) and is set with Secure and SameSite attributes where possible.
- Google Analytics – we use Google Analytics (and possibly Google Tag Manager) for usage statistics. These services may set their own cookies. You can manage or opt out via your browser or Google’s opt-out tool.
4. Third-Party Services
We use the following types of third-party services. Each has its own privacy practices; we encourage you to review their policies.
- Google – for sign-in (OAuth) and for Analytics/Tag Manager. Google’s privacy policy applies to data they process: Google Privacy Policy.
- SendGrid – for sending transactional emails (verification, account-related messages).
- Stripe – for payment processing. Payment card details are handled by Stripe; we do not store full card numbers. Stripe’s privacy policy: Stripe Privacy Policy.
- Discord – we may send certain notifications (e.g. contact form submissions, internal alerts) to our team via Discord. Where possible we limit or mask personal data in these notifications.
- Cloud storage – we may store exported files and similar content in cloud storage to deliver the Service.
- Maps and imagery – the editor may use third-party services for maps or satellite imagery (e.g. Mapbox); their privacy policies apply to data they collect.
- Fonts and assets – we may load fonts or scripts from trusted CDNs (e.g. Google Fonts); these providers may collect limited technical data per their policies.
5. Data Retention
- Account data (email, name, hashed password, Google id) is retained while your account is active and as needed to provide the Service and comply with law.
- Session data is removed when you log out or when the session expires.
- Content you create (tracks, exports, assets) is retained according to our systems and your choices (e.g. until you delete it or close your account, subject to backup and legal requirements).
- Contact form and support messages may be retained for as long as needed to handle your request and for legitimate business or legal purposes.
- Server and analytics logs are typically retained for a limited period for security and operations.
6. Your Rights and Choices
- Access and correction – you can view and update your profile (e.g. display name, email where supported) from your account settings.
- Deletion – you may request deletion of your account and associated data by contacting us. We will process requests in line with applicable law and our systems.
- Cookies – you can block or delete cookies via your browser; some features (e.g. staying logged in) may not work if you disable our session cookie.
- Analytics – you can opt out of Google Analytics as described in the Cookies section.
- If you are in the European Economic Area, UK, or other regions with specific privacy laws, you may have additional rights (e.g. access, portability, restriction, objection, complaint to a supervisory authority). Contact us to exercise them.
Contact Us
For privacy-related questions, to exercise your rights, or to report a concern, contact us:
