Privacy Policy

This Privacy Policy explains what information PA Posse collects through the paposse.tv website and the PA Posse apps for Android and iOS (together, the “Service”), how we use it, and the choices you have. We aim to collect only what we need to run the Service — your account, your purchases, race chat and a smooth stream — and to be straightforward about it. PA Posse shows no ads, and we do not sell your personal information.

We collect:

• Account information — your email address and password (we only ever store a secure one-way hash of it, never the password itself), and a display name if you choose to set one. If you sign in with Google or Apple, we receive your email address (with Apple this may be a private relay address) and an account identifier from them, and from Google your name, which becomes your display name. If your account was carried over from our previous website, we imported your email address, display name, purchase history and your old password hash, which is replaced the first time you sign in.
• Purchase information— the races and passes you buy, the price, date and payment status, and the payment provider's reference for the transaction. For purchases in the Android app this includes the Google Play purchase token or order ID, and in the iOS app Apple's transaction ID; we verify every in-app purchase with Google or Apple before granting access. Card details are entered with the payment provider and never reach us (see Payments below).
• Chat messages — which are public.When you post in a race's live chat, your message is stored and shown to everyone viewing that race's chat, including viewers who are not signed in, together with your chat name: your display name or, if you have not set one, an anonymous name such as “Fan-3f9a2c” — never your email address. Don't post anything you don't want others to see. If you report a message, we keep the report — with a copy of the reported message — so our moderators can review it; if you block someone, we store that list with your account so it applies on every device.
• Watch progress — where you stopped in each replay, so you can pick up where you left off (Continue Watching).
• Notification preferences and push tokens— which alerts you want (race reminders, going live, new replays, news & offers) and, if you allow notifications in the app, a push token that identifies your device to the notification service.
• Search queries — what you search for is used to return results. We do not save searches to your account, but they appear in our server request logs.
• Playback-error reports (website)— when a video fails to play on the website, your browser sends us a diagnostic report: the race, the player and error details, your browser's user-agent string and, if you are signed in, your account ID. These reports are deleted automatically after 90 days.
• Server logs — like most online services, our servers record each request: your IP address, browser or device user-agent, the page or address requested (including search terms) and the time. We use these logs to keep the Service secure and to troubleshoot problems.
• Error reports — if we turn on error monitoring, crash and error reports (device and operating-system type, app or browser version, and technical details of the error) are sent to our error-monitoring provider.

The app keeps your sign-in token in your device's secure storage, and replays you download for offline viewing stay on your device. We do not collect your precise location, contacts, photos or files.

We use your information to:

• Provide your account, process and verify purchases, and deliver the streams you have access to.
• Run race chat and remember where you left off in replays.
• Send account emails — email verification, password resets and purchase receipts — and the alerts you have not turned off, such as a going-live email when a race you have access to starts.
• Send the push notifications you choose in your notification settings. “News & offers” notifications are off unless you turn them on.
• Keep the Service secure, prevent fraud and abuse, moderate chat, fix problems such as playback errors, and comply with our legal duties.

We may also occasionally email members announcements about races and the Service. Every announcement email has an unsubscribe link, and you can turn them off (or back on) any time under “Announcement emails” in your notification settings; account emails such as receipts and password resets still arrive. We do not use your information for advertising, and the Service contains no analytics or advertising trackers.

On the website, payments are processed by Stripe on Stripe's own secure checkout page. You enter your card details directly with Stripe under their terms and privacy policy. We give Stripe your email address and an internal reference for the purchase, and Stripe tells us whether the payment succeeded, along with a transaction reference. We never see or store your card number or other card details.

In the apps, purchases are made through Google Play (Android) or the App Store (iOS), and Google or Apple process the payment under their own terms. The app sends us the purchase token (Google Play) or signed transaction (Apple), which we verify directly with Google or Apple, and we keep their transaction reference with your order.

PA Posse does not set its own cookies and uses no advertising or analytics cookies. The website keeps your sign-in token in your browser's local storage (it is removed when you sign out). Video players and embedded content from third parties — JW Player, Vimeo, and YouTube (in privacy-enhanced mode, for the video on our About page) — and Google or Apple sign-in, if you use it, may set their own cookies or similar storage under their own privacy policies. You can clear or block these through your browser settings.

We do not sell or rent your personal information, and we do not share it for advertising. Your chat messages and chat name are visible to other viewers, as described above. Otherwise, we share information only with the service providers that help us run the Service, each for its specific job:

• Video streaming — JW Player and Vimeo host and deliver our live races and replays. When you watch, your device connects to them directly, so they receive your IP address and device or browser information and can collect playback data under their own privacy policies. The About page embeds a YouTube video, which YouTube serves the same way.
• Payments — Stripe, Google Play and Apple process purchases as described under Payments.
• Sign-in — Google and Apple, only if you choose to sign in with them.
• Push notifications — Expo's push notification servicedelivers app notifications through Google Firebase Cloud Messaging (Android) and the Apple Push Notification service (iOS). They receive your device's push token and the notification content.
• Email delivery — our email provider sends account, receipt and notification emails, so it receives your email address and the message.
• Error monitoring — Sentry, if we turn it on, receives crash and error reports.
• Hosting — our servers, database and backups run on infrastructure rented from a hosting provider.

We may also disclose information where required by law, or to protect our rights and the safety of our members.

We keep your account information, purchases, chat messages, watch progress and preferences for as long as your account is active. Playback-error reports are deleted after 90 days, and server logs are kept only for a limited period for security and troubleshooting.

You can delete your account at any time in the app (Profile → Settings → Delete account), on the website (Account → Settings → Delete account) or by emailing us — see how to delete your account for step-by-step instructions and exactly what is removed. Your account is disabled immediately, and 30 days later your account and its data are permanently erased. Order records are kept for accounting and tax purposes in anonymized form, no longer linked to you. Our nightly backups are kept for 30 days, so erased data can remain in a backup for up to 30 more days.

We protect your information with encrypted (HTTPS) connections, hashed passwords and access controls, though no method of transmission or storage is completely secure.

You can review and update your display name and email address, manage notification preferences in your account settings, turn off push notifications in your device settings, and delete your account at any time. Depending on where you live, you may have additional rights to access, correct, export or delete your personal information — contact us and we will help you exercise them.

The Service is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13; if you believe a child has provided us information, contact us and we will delete it.

Questions about this policy or your data? Email support@paposse.tv. See also our Terms of Service, Refund Policy and account deletion page.