Privacy policy

1. Overview & data controller

Sky Engineering EOOD ("Flowix", "we", "us", or "our") respects your privacy and is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable data protection legislation.

This Privacy Policy explains what personal and technical data we collect when you use our website (https://flowix.com), the Flowix background agent, and our simracing telemetry platform.

2. Information we collect

• Account Details: Email address, hashed password (using secure bcrypt), driver display name, and country code.
• Simracing Telemetry & Physics Data: Vehicle kinematics, lap times, sector splits, speed, throttle, brake, steering angle, 3-zone tyre thermals, damper velocities, track surface conditions, and weather vectors transmitted by the Flowix Agent.
• Technical & Log Data: IP address (used strictly for rate limiting, bot protection, and security audit logs), browser user-agent, and essential authentication session cookies.
• Payment Information: We do not process or store credit card numbers or financial credentials on our servers. All payment transactions are handled directly by our Merchant of Record, Paddle.com Market Limited.

3. How we use your data

• To provide and synchronize real-time lap telemetry analysis, delta charts, and leaderboard rankings.
• To manage your account, authenticate login sessions, and deliver customer support.
• To enforce security rules, prevent abusive automated scripts via cryptographic challenges, and mitigate denial-of-service attempts.
• To communicate essential service notifications, password resets, and subscription updates.

4. Data retention policies

• Free Tier Telemetry: Telemetry binary payloads and detailed lap traces are stored for 14 days for clean laps and 7 days for non-clean laps (accounts created before this change: 31 days), after which they are automatically purged by our data retention engine. Lap times, sessions and personal bests are not affected and are kept for as long as your account exists.
• PRO subscription Telemetry: Retained for 1 full year (365 days) from the date of recording.
• Leaderboard Records: Personal and global all-time fastest lap summaries remain listed on public leaderboards while the records stand.
• Account Data: Retained for the duration of your active account. You may request account deletion at any time.

5. Third-party service providers & merchant of record

We partner with Paddle.com Market Limited ("Paddle") to act as our Merchant of Record and handle billing and payments. When upgrading to a PRO subscription, Paddle collects your billing name, address, and payment method in accordance with their privacy policy.

Paddle's script (Paddle.js) is loaded only on pages that show prices or the upgrade checkout: the home page and, for free accounts, the account pages (profile, subscription and settings). Loading it sends your IP address and browser details to Paddle so it can show local prices and run the checkout. Paddle may set its own cookies inside the checkout window once you start a purchase. We do not use Paddle Retain or any other Paddle analytics.

6. Cookies & browser storage

We do not use advertising, analytics or tracking cookies, and we do not use any third-party tracking tools. We only store what the site needs to work:

• Sign-in cookie (auth_token): keeps you signed in. It is set only when you log in and expires after 365 days or when you log out.
• Browser local storage: remembers your interface preferences (collapsed sidebar, selected chart channels, map size, laps picked for comparison) and whether you closed the “We don't track you” notice. This data stays in your browser and is never sent to our servers.

These items are strictly necessary for the service you request, so they do not require consent. You can delete them at any time in your browser settings; you will then be signed out.

7. Your rights under GDPR

Under European data protection law, you have the following rights:

• Right of Access & Portability: You can view all your laps in your dashboard and export telemetry datasets in standard CSV or MoTeC i2 formats at any time.
• Right to Rectification: You can edit your display name and driver profile in your account settings.
• Right to Erasure: You can delete individual laps or request full account deletion.
• Privacy Toggle (PRO Feature): PRO drivers can set telemetry visibility to private, hiding telemetry curves and setups from other racers. When PRO ends, your private setting is kept for 30 days; after that your default returns to public and your private laps are made public.

8. Contact the data controller

For any questions regarding this Privacy Policy or to exercise your GDPR rights, please contact us: