Privacy Policy
Last updated: March 15, 2026
Setups by SZESE ("we", "us", "our") is operated by SZESE E-Sport, the sim racing team of Széchenyi István University, Győr, Hungary. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website at setups.szese.hu (the "Service").
1. Information We Collect
Account Information
When you create an account, we collect information provided by your authentication method:
- Google OAuth: Your name, email address, and profile picture as shared by Google.
- Email sign-up: Your email address and the display name you choose.
Profile Information
You may optionally provide additional profile information such as a bio, social media links, iRating, and license class. Driver profiles are publicly visible.
Usage Data
We automatically collect:
- Pages you visit and features you use
- Setup downloads (which setups, when)
- Device type, browser, and general location (country level)
- Error reports and performance metrics
Payment Information
Payments are processed by Polar. We do not store your credit card details. Polar may collect your name, email, billing address, and tax ID for invoice purposes. See Polar's Privacy Policy for details.
2. How We Use Your Information
- Provide the Service: Authenticate your account, manage subscriptions, deliver setup files, and enforce tier-based access.
- Improve the Service: Analyze usage patterns to improve features, content, and performance.
- Communicate: Send transactional emails (setup approvals, subscription changes) and optional notifications.
- Security: Detect abuse, enforce rate limits, and protect the platform.
3. Third-Party Services
We use the following third-party services that may process your data:
- Supabase (database & authentication) — stores account data and setup files. Hosted in the EU.
- Polar (payments) — processes subscriptions and billing.
- PostHog (analytics) — tracks anonymized usage data. EU instance.
- Sentry (error tracking) — captures error reports to help us fix bugs.
- Vercel (hosting) — serves the website and handles server-side rendering.
- Resend (email) — delivers transactional notification emails.
4. Cookies & Local Storage
We use:
- Authentication cookies: A session cookie to keep you signed in. Essential for the Service to function.
- Local storage: Stores your session token and user preferences client-side.
- Analytics cookies: PostHog sets a cookie to distinguish unique visitors. You can opt out via your browser settings.
We do not use advertising cookies or sell your data to advertisers.
5. Data Retention
- Account data: Retained as long as your account is active. When you delete your account, your profile and personal data are permanently removed. Setups uploaded as a driver are anonymized (driver reference set to null) but not deleted, as other users may have downloaded them.
- Download history: Retained for analytics and usage tracking. Not publicly visible.
- Payment records: Retained by Polar as required by tax and accounting regulations.
6. Your Rights
Under the EU General Data Protection Regulation (GDPR) and Hungarian data protection law, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data via your profile settings.
- Delete your account and associated data via Settings > Danger Zone.
- Export your data — contact us and we will provide a copy.
- Object to processing or request restriction.
7. Data Security
We implement industry-standard security measures including encrypted connections (HTTPS), row-level security policies on all database tables, rate limiting on API endpoints, and secure authentication via Supabase Auth. Setup files are stored in private Supabase Storage buckets and served via time-limited signed URLs.
8. Children's Privacy
The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or an in-app notification. The "Last updated" date at the top reflects the most recent revision.
10. Contact
For privacy-related questions or to exercise your rights, contact us at support@szese.hu.
SZESE E-Sport
Széchenyi István University
Győr, Hungary