Privacy policy
A plain-English privacy notice: what Slipstream collects, why, and what you can do about it. The short version, Who runs Slipstream, What the game stores on your device, Kept only while the page is open, What our host receives…
A plain-English privacy notice: what Slipstream collects, why, and what you can do about it.
The short version
Playing a career uses an account and online saves. We store account details, up to five careers and recorded game statistics to provide the service. Public Paddock stats show totals, not private saves or email addresses. There are no adverts, analytics or tracking cookies. This notice was updated on 9 November 2026.
Who runs Slipstream
Slipstream is a free, non-commercial fan project made and run by an independent developer based in the UK. That developer is the data controller for this site. For any privacy question or request, email contact@slipstream.games.
What the game stores on your device
Your sign-in session is kept in browser storage so you can stay signed in. Settings, tutorial progress, panel choices and older browser careers also remain on your device. Unsent career changes and race-statistics submissions are buffered locally until the server acknowledges them. A random browser identifier and a short device label help resolve save conflicts. The Cookies & storage page describes these entries.
Kept only while the page is open
Some information is held only in the memory of the open tab, and is never stored or sent automatically. A short list of recent script errors and crashes is kept so that a problem report can include it. The latest live race recording is kept until another live race starts or the page reloads. Strategy review reruns are calculated in your browser, are not saved and do not change your career. Closing or reloading the page clears all of this.
What our host receives
Cloudflare delivers the website and protects requests to the API. The account, save and statistics services run on a separate self-hosted database at Hetzner. These providers process technical request information, including IP addresses, to deliver and secure the service. The statistics database stores an approximate country code supplied by Cloudflare, not an IP address or precise location. This information is not used for advertising or cross-site tracking.
Other services your browser contacts
Google or Discord handles authentication when you choose that provider and shares your provider account identifier, email, name and picture link. Email sign-in stores a password hash, not a readable password. Resend delivers confirmation and password-reset messages. The live F1 standings page contacts the Jolpica F1 API and refreshes every five minutes. Fonts, sounds, voices and artwork are served with the site. External reference sites receive a request only if you follow their links.
Problem reports you choose to share
The Report a problem form builds a report on your device. Nothing is sent automatically: you read it, then copy it, download it or open it in your own email app addressed to contact@slipstream.games. Diagnostics are included unless you untick them: the game version, the page address without any query string, your browser’s user agent and language, screen and window size, your settings, a summary of each save slot (team, season, round, session, mode and save time) and up to ten recent script errors with short traces that have web addresses and long codes removed. You can also add a screenshot you pick, the latest live race recording (its starting state, timed strategy decisions and current state) and a full copy of the career in your active slot. The screenshot, race recording and career are included only in the downloaded file. If you send a report, we receive only what you chose to include.
Emails you send us
If you email contact@slipstream.games, we receive your email address and whatever you write or attach, including any problem report. We use it only to reply, deal with your request and fix the problem. We delete correspondence once it has been dealt with, unless we need to keep it for a dispute or a legal obligation.
Team logos, sponsor marks and likenesses
Team logos and the sponsor marks on cars, race suits and helmets are stored with the game and served from our own site. Loading them does not contact any team, sponsor or social network, and does not set third-party cookies. We do not use facial recognition, biometric analysis or automated decision-making about drivers or visitors.
Our lawful basis
Account details, online saves and game statistics are used to provide and maintain the game service you request. Hosting, security, replies to enquiries and fixing problems support our legitimate interest in operating a working service. We may also process information where required by law. Contact us with questions about how your information is used.
Sharing and international transfers
We do not sell, rent or trade personal information. Cloudflare and Hetzner provide hosting and security; Resend delivers account emails. Google or Discord processes sign-in if you choose it. Providers may process information outside the UK under their data protection terms. Advisers or authorities may receive information where necessary to resolve a dispute or comply with the law.
How long we keep it
Account details, careers and associated game records remain until you remove them or delete your account. Account deletion removes the live records; encrypted backups expire after 30 days. Local preferences and older browser saves remain until cleared. Pending buffers are removed after acknowledgement. Hosting and security providers may retain technical logs under their own settings. Enquiries are kept only as long as needed to deal with them.
Children and young players
The game has no chat, public posting, adverts or behavioural analytics. Accounts still require personal information, including an email address, and recorded game statistics include an approximate country. If you are under 18, ask a parent or guardian before creating an account or contacting us. Contact us if personal information was supplied in error or should be deleted.
Your rights
You can request access to, correction of or deletion of personal information, and raise objections or restrictions, by emailing contact@slipstream.games. You can change your username and delete your account in the account panel, and export careers yourself. Deleting browser storage alone does not delete online records.
Complaints and the ICO
If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk.
Future accounts and analytics
Accounts, cloud saves and game statistics are active in the public beta. Recorded sessions contain simulated driver results, lap and tyre detail, pit stops, race-control events, strategy decisions and season summaries. These support your private career stats and public aggregate totals. Automatic crash reporting, advertising and behavioural analytics are not active. Material changes will be described here before introduction.
Account information
We store your email address, sign-in provider details where applicable, username, profile details and private career saves. Your account and careers are not public. Country totals describe recorded game activity, not your precise location. Use the account panel to delete your account or contact us to request a copy of account data.