Legal
Privacy Policy
01Who we are
Rennblock (“Rennblock”, “we”, “us”) is a telemetry service for the racing simulator Assetto Corsa EVO. It is currently operated by an individual:
- Data controller: Raul Alessandro Benghe
- Based in: Italy
- Contact: benghe.web@gmail.com
The controller is the person who decides how and why your personal data is processed. If Rennblock later becomes a registered business, this section will be updated with the company name, registered address and VAT number, and you will be notified.
02Scope
This policy covers personal data we process when you:
- visit rennblock.com and its public pages;
- request access to the invite-only service;
- hold a Rennblock account and use the web dashboard (the “pit-wall”, leaderboard and archive);
- run the Rennblock desktop client to record and upload your laps.
Assetto Corsa EVO is a third-party product. Rennblock is not affiliated with, endorsed by or sponsored by its makers, and this policy does not cover data processed by the game itself or by the platform you bought it on.
03What we collect
We collect only what the service needs to work. We do not run advertising or third-party analytics, and we do not sell your data.
a. Access requests
When you ask for an invite, we store the email address and name you submit, plus the request status (pending, approved, rejected) and the time. This lets an administrator review and approve requests.
b. Account data
If your request is approved, we create an account holding your username,
email address, a hashed password (stored with bcrypt — we never
keep your password in readable form), an API token that lets your desktop client upload
laps, and your plan tier (currently free for everyone).
c. Telemetry & lap data
This is the core of the service. For each lap you record, the desktop client uploads:
- the circuit and car, the lap time, and whether the lap was valid;
- the full telemetry trace — a high-frequency series of speed, RPM, gear, throttle, brake, steering and position-on-track samples;
- tyre data such as compound, pressures and temperatures.
This data describes your driving inside the simulator. It is linked to your account and, for valid laps, your best times appear on the public leaderboard next to your username.
d. Live session state (temporary)
While you are driving, a small slice of your current state (RPM, gear, delta, position on the map) is held briefly in memory (Redis) so your pit-wall updates in real time. It is never written to disk and expires automatically shortly after the data stops arriving.
e. Technical data
Like any web server, ours processes your IP address and basic request information (time, page, browser type) to serve pages, keep the service secure and prevent abuse (for example, rate-limiting login attempts). We keep server logs for a limited period.
04How & why we use it
Under the EU General Data Protection Regulation (GDPR), we must have a legal basis for each use:
| What we do | Why | Legal basis |
|---|---|---|
| Review invite requests | Decide whether to grant access | Steps prior to a contract / legitimate interest |
| Create and run your account | Give you the service you signed up for | Performance of a contract |
| Store & show your telemetry, archive and leaderboard position | The core features of Rennblock | Performance of a contract |
| Secure the service, rate-limit, prevent abuse | Keep accounts and data safe | Legitimate interest |
| Contact you about your account or the service | Operational messages (e.g. approval, security) | Performance of a contract / legitimate interest |
If we ever introduce optional features that need it (for example, marketing emails or non-essential cookies), we will ask for your consent first, and you will be able to withdraw it at any time.
07International users & transfers
Rennblock is operated from Italy but open to drivers anywhere. Wherever you are in the world, we handle your personal data to the GDPR standard described in this policy — it is the level of protection we apply to everyone, not only to users in the EU.
If you are in the United Kingdom, the equivalent UK GDPR and Data Protection Act 2018 apply, and you may complain to the UK Information Commissioner’s Office (ICO). If you are elsewhere, your local data-protection law may also give you rights — these do not replace the protections above.
We aim to keep data within the European Economic Area (EEA); our hosting provider (Aruba) is in Italy, inside the EEA. Where a provider (such as Google Fonts) processes data outside the EEA, that transfer is covered by an adequacy decision or by Standard Contractual Clauses, as required by the GDPR.
08How long we keep it
- Account & telemetry: kept for as long as your account exists. Rennblock keeps every valid lap in a permanent archive — nothing is pruned automatically — so your data stays until you delete a lap or your whole account.
- Access requests: kept while pending and for a reasonable period after a decision.
- Live session state: seconds to minutes (auto-expiring), never stored permanently.
- Server logs: kept for 90 days, then deleted.
When you delete your account, your laps, lap summaries and profile are removed in cascade. Some information may briefly remain in backups before being overwritten on their normal cycle.
09Security
We take reasonable technical measures to protect your data, including: passwords stored only as bcrypt hashes; access to the dashboard controlled by signed session tokens (JWT); machine-to-machine uploads authenticated by a per-account API token; strict rate-limiting against brute-force and abuse; and access to each account’s laps scoped so one user can never read another’s telemetry. Traffic to and from the service should be served over HTTPS. No system is perfectly secure, but we work to keep your data safe.
10Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you;
- Rectify data that is wrong or incomplete;
- Erase your data (“right to be forgotten”);
- Restrict or object to certain processing;
- Port your data — receive it in a common format;
- Withdraw consent at any time, where processing is based on consent.
You can exercise most of these yourself in the dashboard: change your password, delete individual laps, or delete your entire account (which erases your telemetry with it). For anything else, email us at benghe.web@gmail.com and we will respond within the time the law allows (normally one month).
11Children
Rennblock is not directed at young children. You must be at least 16 years old to create an account. (Some EU countries set a lower age of digital consent — 14 in Italy — but we apply 16 as a single, safe threshold for our international audience.) If you are younger, a parent or guardian must consent on your behalf. If we learn we have collected data from a child without the required consent, we will delete it.
12Changes to this policy
We may update this policy as the service evolves — notably when paid subscriptions launch. We will change the “last updated” date at the top and, for significant changes, notify account holders.
13Contact & complaints
Questions or requests about your data? Email benghe.web@gmail.com.
If you believe we have mishandled your data, you have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garante.it), or to the authority in your country of residence.