Privacy & Data

What we collect, why, and how to contact us.

Who we are

Formula X Racing League — community VR racing league operated on a volunteer basis.

Contact: info@formulaxseries.co.uk

What we collect

  • Oculus username (required to register/participate).
  • Email address (optional) — only if you ask a question on the Join form.
  • Timezone & “Can host?” answer from the Join form.
  • Video uploads — the video file you submit plus basic metadata (driver name, event, purpose, notes, file size/type, upload time).
  • IP address & user-agent — logged with uploads and Join form submissions for security/anti-abuse.
  • Server logs — standard web logs (IP, URL, referrer, user-agent) kept by our hosting/CDN for reliability and security.

How we use data

  • Run the league (register drivers, organise lobbies, publish standings and media).
  • Moderation and steward reviews (video evidence).
  • Security (rate-limiting abuse, keeping the site healthy).

Storage & retention

  • Join form: sent by email to info@formulaxseries.co.uk; we don’t keep a database. We aim to keep emails ≤ 12 months.
  • Uploads (quarantine): stored in /uploads/inbox pending anti-virus scan/review; auto-purged after ~30 days where possible.
  • Uploads (published): stored in /uploads/public and may remain online for the season or until removed on request.
  • Logs: kept by our host/CDN for a limited period (typically 30–90 days) for security and troubleshooting.

Cookies & embeds

  • A short-lived session cookie is used to protect forms (CSRF). It is not used for tracking.
  • YouTube embeds: videos on the Media page may set YouTube cookies. We aim to use privacy-enhanced embeds.

Sharing

  • We don’t sell your data.
  • We use service providers to run the site: IONOS (hosting), IONOS CDN/Cloudflare (performance & security), and email delivery for Join form messages.
  • League stewards may access submitted videos for incident reviews.

Your rights

  • UK/EU rights of access, rectification, erasure, restriction, portability, and objection.
  • To exercise these, email info@formulaxseries.co.uk. We’ll respond as quickly as we can.
  • You can also complain to the UK ICO if you’re unhappy with our handling.

Security

  • HTTPS everywhere, strict security headers, and Content-Security-Policy.
  • Uploads quarantined and scanned before public access; script execution disabled in uploads.
  • CSRF protection and honeypots on forms; rate-limiting for uploads.