# Privacy notice - F1 Session Analyzer

**Last updated:** 21 October 2026

F1 Session Analyzer has no accounts, no sign-in, no advertising and no analytics product. This
page explains the small amount of data involved when you use it: the requests your browser
makes, the state it keeps locally, and the choices you have.

## What happens in your browser

When you analyze a session, your browser calls the public OpenF1 API directly for meetings,
sessions, drivers, laps, telemetry, stints, results and circuit geometry. Those requests go from
your device to `api.openf1.org`; OpenF1 can see your IP address, user agent and the requested
URL, under its own privacy terms. This site does not proxy or store the responses. The circuit
images and driver photos shown in the interface are loaded from the URLs OpenF1 publishes.

The page also loads its fonts from Google Fonts (`fonts.googleapis.com` and
`fonts.gstatic.com`), so Google receives the request metadata needed to serve them. Everything
else - the app, its styles, charts, grids, icons and feedback code - is served from this site.

## Local state and sharing

The analyzer does not use cookies, `localStorage` or `sessionStorage` to keep an analysis. A
share link puts the selected year, meeting and session in the URL fragment (`#y=…&m=…&s=…`).
Fragments are not sent to the server in an HTTP request; they stay in the address bar and in the
link you copy. Clearing the fragment or pressing Reset removes it.

CSV exports are generated in your browser and downloaded to your device. Nothing is uploaded.

## Hosting and server logs

The site is hosted on Cloudflare Pages with a small Pages Function. Cloudflare processes the
request needed to serve a page or the feedback route, including IP address, URL, user agent and
timestamp, under its own privacy terms, and may keep security and operational logs. The
maintainer does not run an analytics product over those logs, does not build visitor profiles
and does not sell or share them.

## Feedback

The feedback route accepts a message only when the deployment has its feedback store bound;
otherwise it returns an error instead of silently losing the message. A stored message includes
the text you submit and the route's anti-abuse metadata. It is used to improve the analyzer and
is not published. There is no feedback form in the current interface, so this only applies if a
form is added later or the route is called directly.

## Email

If you email soni.soni.parth@gmail.com, the message and your address are processed by Gmail so
it can be delivered and answered. They are used to reply and keep a record of the conversation;
they are not added to a marketing list and are not sold. Ask for a message to be deleted and it
will be, unless a legal obligation requires it to be kept.

## Your rights and changes

Under the GDPR you can ask what personal data is held about you, request a copy, ask for
correction or erasure, or object to processing. Use soni.soni.parth@gmail.com. You also have the
right to complain to the Irish Data Protection Commission (https://www.dataprotection.ie/). If
this notice changes, the date at the top changes with it.