Privacy Policy — Tonight We Race

Last updated: August 2026

Tonight We Race ("TWR", "we", "us", "our") runs a sim racing lounge in Seattle, Washington, and the booking and membership software at race.tonightwerace.gg. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies to our website and to the in-person services we run with it.

The short version

• We collect only what we need to run reservations, memberships, and your in-person sessions — plus the legal records (a signed waiver, age checks) that a motorsport-style venue has to keep.
• We never see or store your full card number. Payments run through Stripe.
• We don't sell your personal information and we don't run advertising trackers on our customer site.
• Your name appears on our public leaderboards only if you opt in by signing a talent release; otherwise you're shown as a masked driver.
• You can ask us to see, correct, or delete your information (some records we're legally required to keep for a period).

Who we are

• Business: Tonight We Race LLC
• Lounge address: 4550 11th Ave NE Suite 3, Seattle, WA 98105
• Privacy contact: privacy@tonightwerace.gg

Information we collect

We collect the following, and only as needed to provide our services:

• Account and identity. When you sign in with Google, your name and email address from your Google account. If you're registered at the front desk, the name, email, phone number, and (where needed for age verification) date of birth you provide. Optionally, a racing name / handle you choose for display.
• Waiver and other signed documents. A record that you signed our liability waiver, sporting code, and/or talent release — including the document version, a signature image, and the date, IP address, and browser/device (user agent) captured at the time of signing. We keep the same metadata when you accept our Terms of Service.
• Identification (in person). When we need to verify your age or identity at the desk, a photo of your government-issued ID and/or a photo of you. If we scan the barcode on the back of a driver's license or state ID, we read only the fields the registration form needs (such as name and date of birth) and do not store the full barcode payload.
• Bookings and session activity. Your reservations, session history, membership tier and status, your Track Token balance and transactions, and — for sessions you race — your lap times.
• Payments. We use Stripe to process payments. We never see or store your full card number. From Stripe we receive only payment identifiers and limited details (such as the card brand, last four digits, and a receipt reference) and the sales tax calculated on your purchase. Card data is captured and held by Stripe, not by TWR.
• Communications. Emails we send you and, if you contact us, the messages you send us.
• Technical and security data. Standard server and error logs needed to operate and secure the service (for example, error reports via Sentry, and the IP/user-agent recorded with consent events). We do not log full payment details.

We do not knowingly collect more than the above, and we do not sell your personal information.

How we use your information

We use your information to:

• Create and manage your account, membership, and Track Token balance.
• Take and manage reservations and run your in-person sessions.
• Process payments and issue receipts and refunds (through Stripe), and calculate and remit applicable sales tax.
• Meet legal, safety, and record-keeping obligations (for example, the signed liability waiver and age verification).
• Display results on our public leaderboards if you opt in (see below).
• Send you transactional messages (receipts, booking and account notices) and, if you haven't opted out, occasional notices about our event schedule, operating hours, and new products or services.
• Secure the service, prevent and investigate fraud or abuse, and debug problems.

We compute all pricing, balances, and eligibility on our servers. The legal bases we rely on (where a legal-basis framework applies to you) are performing our contract with you (running your bookings and membership), our legitimate interests (operating, securing, and improving the lounge), your consent (for example, the talent release for public leaderboard display, and optional marketing emails), and compliance with legal obligations.

Public leaderboards

We publish season leaderboards (driver name and lap times) on screens in the lounge and at race.tonightwerace.gg. Your real name or racing handle is shown publicly only if you have a current, signed talent release authorizing it. Without that consent — or if you withdraw it — your result still appears but the driver is shown as a masked driver (no name). Lap times are race results, not identifying information, and may be shown either way. You can decline or withdraw the talent release at any time by contacting us; past and future boards re-mask accordingly.

How we share your information

We share personal information only with service providers that help us operate, and only as needed. Each is bound by contract to keep your information confidential and to use it only to provide their service to us:

• Stripe — payment processing, subscriptions/billing, and sales-tax calculation. Stripe is a PCI-DSS Level 1 service provider; keeping card capture on Stripe's systems is what lets us minimize our own handling of card data.
• Supabase — our database, authentication, and file storage provider (hosts your account record, document signatures, and ID/person photos).
• Resend — sends our transactional and notification emails.
• Google — only if you choose "Sign in with Google"; Google authenticates you and provides your name and email. Your use of Google sign-in is also governed by Google's own privacy policy.
• Sentry — application error monitoring.
• Vercel — application hosting.

We may also disclose information when we believe in good faith it's required to: comply with the law (such as a subpoena, court order, or lawful government request); enforce our agreements; protect the rights, safety, or property of our customers, the public, or TWR; or in connection with a merger, acquisition, or sale of assets, in which case we'll require the recipient to honor this policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Cookies and similar technologies

We use a small number of strictly necessary cookies to keep you signed in and to keep the site secure (for example, your authentication session). We do not use advertising, marketing, or cross-site tracking cookies on the customer site, and we don't run third-party ad networks or analytics trackers there. Because we use only essential cookies, the site works without a tracking-consent banner; you can still clear or block cookies in your browser settings, though doing so will sign you out and may break parts of the site.

How long we keep your information

We keep your information for as long as your account is active and as long as we need it for the purposes above. Some categories we keep longer because the law or prudent record-keeping requires it:

• Account, membership, booking, and Track Token records — retained indefinitely.
• Waiver / signed legal documents and payment & tax records — retained indefinitely.
• Application Logs and error data — retained for 1 year.

We may keep aggregated or de-identified information (such as utilization statistics) indefinitely.

How we protect your information

We take reasonable administrative, technical, and physical measures to protect your information, appropriate to its sensitivity:

• Card data stays with Stripe — we keep our own payment scope minimal.
• ID and person photos are stored in access-controlled storage and shown to staff only through short-lived, signed links.
• Access to customer data is limited to authorized TWR staff, and consequential changes (bookings, payments, refunds, token adjustments, status changes) are recorded in an internal audit log.

No system is ever perfectly secure, but we work to provide reasonable security for the information we hold.

Your privacy choices and rights

• Access, correction, and deletion. You can ask us to show you, correct, or delete your personal information by emailing privacy@tonightwerace.gg. We may need to verify your identity first. Some records (such as signed waivers and payment/tax records) may have to be retained to meet legal obligations even after an account is closed.
• Your account. You can view and update much of your information from your member account, and disconnect Google sign-in at any time through your Google account settings.
• Marketing emails. Transactional messages (receipts, booking/account notices) are part of the service. For non-transactional notices (events, hours, new offerings), you can opt out at any time via the unsubscribe link in the email.
• Leaderboard display. Decline or withdraw the talent release to keep your name off the public boards (see Public leaderboards).

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), the Washington My Health My Data Act, or other state privacy laws — including the right to know, to delete, to correct, and to opt out of sale or sharing (we don't sell or share for ads). We will not discriminate against you for exercising these rights. To exercise them, contact privacy@tonightwerace.gg.

Children and minors

Online accounts and reservations are intended for adults. Drivers must be at least 16 years old — we do not offer services to children under 16 and do not knowingly collect their personal information. A customer aged 16 or 17 is registered only in person, with a parent or legal guardian who provides the minor's information and signs the waiver at the desk. We do not knowingly collect personal information online from anyone under 18.

Where your information is stored

We and our service providers store and process your information in the United States. If you access the service from outside the U.S., you understand your information is handled in the U.S.

Changes to this policy

We may update this policy as the service evolves. We'll change the "Last updated" date above and, for material changes, provide notice through the service.

How to contact us

Questions, requests, or privacy concerns: privacy@tonightwerace.gg