Privacy Policy

Last updated: 9 October 2026

PITWALL (“we”) is a small project. This page says what we store when you sign in, why, who else is involved, and how you delete it. We do not sell your data and we do not run advertising or analytics trackers.

1. Without an account

You can watch replays without signing in. Your layout and settings are kept only in your own browser (local storage) and never sent to us. Our web server keeps ordinary access logs (IP address, time, requested address) for security and debugging.

2. What we store when you sign in

• Sign in with Discord: we ask Discord for your identify and email scopes only. We store your Discord user ID, display name, avatar link and — only if Discord says it is verified — your email address. We do not ask for your servers or friends, and we do not keep Discord’s access token after sign-in.
• Email and password: your email address and a salted hash of your password (never the password itself). We send you one-time 6-digit codes to verify your email and to reset your password, and a notice when your password changes.
• Your settings: the layout of your windows, pinned drivers, pit-loss values and a few display options, so they follow you between devices.
• Security records: sign-in, sign-up and password-reset events with time and IP address, to detect abuse.

3. Why

Only to let you sign in, keep your account secure and sync your settings. We do not use your data for marketing, profiling or advertising.

4. Cookies and local storage

One cookie keeps you signed in (pw_session, HttpOnly, up to 7 days of inactivity) and one short-lived cookie protects the Discord sign-in step (pw_oauth, 10 minutes). Both are strictly necessary. Local storage holds your layout, settings and language choice. There are no analytics or advertising cookies.

5. Who else is involved

• Discord — if you choose Discord sign-in (their privacy policy applies to what they hold).
• Resend — sends our verification and notice emails; it sees your email address and the message.
• Zeabur — hosts the website and the database.
• Google Fonts — the home page loads its typefaces from Google, which receives your IP address when you open it.

6. Keeping and deleting

We keep your account until you delete it. You can delete it yourself in the account menu (“Delete account”), which removes your account, sign-ins, saved settings and security records from our database right away; backups are overwritten within a short time. You can also write to us. Settings stored in your own browser are not affected; clear them with “Sign out and clear this browser”.

7. Your rights, children, changes

You can ask to see, correct or delete what we hold about you. PITWALL is not meant for children under 13. If this policy changes in a way that matters we will update the date above and tell signed-in users in the app.

8. Contact

support@pitwall.info. See also our Terms of Service.