Skip to content
Race Auditor

Privacy

This page says what Race Auditor holds about the people who touch it.

This site

There are no accounts here. Nothing to sign up for, nothing to log into. The one thing you can join is the newsletter, and only by confirming from your own inbox.

Nothing Race Auditor holds has a name column: not this site, and not the working copy behind the analysis. No runner under 18 is included. No aggregate is shown from fewer than 20 runners. The full set of rules, and the reasons for each of them, lives on the methodology page.

When you look up your own race, your bib number is sent once to find your row. It is never stored in the site's usage counts, never shown, and never put in a link.

This site does not run Race Auditor's course-cutting analysis. None of its verdicts are held here, none are shown, and your lookup does not feed an investigation. The methodology page explains what that separation means.

If your result is in our data

Race Auditor's analysis runs on results that races publish themselves. What we keep from them is a bib number, the times recorded at each timing point, and the age band and gender the race published. No names, not hidden and not coded. A name is never collected and there is no column to hold one.

So we cannot tell who you are from what we hold. Your bib is the only way to find your row, which is why we ask for it.

If you would rather your result was not there, write to privacy@raceauditor.com with the race, the year, your bib number and your finish time. You will have a reply within 14 days.

We will not ask you for a photo, an identity document or your date of birth. We have nothing to compare them against, and asking would mean collecting more about you than the record being deleted. We do not ask the reason either.

We keep your message only while the request is open and then delete it. What remains is one line recording that a request was made and finished. We may compare requests with each other, to notice someone asking on another person's behalf.

Visiting

Our hosting provider keeps the standard server logs any website produces (IP address, time, page requested) to run and protect the service.

We count how the site is used ourselves, and only as daily totals: which pages were opened and where the visit came from (Instagram, WhatsApp, search) as a category, which country and which hour of the day, which race was chosen, how many lookups found or did not find a result, how far through each set of cards people went and whether the share button was clicked. No bib, time, IP address or identifier goes into those counts, so there is no way to tell who did what, only how many. If you type a race we do not have, we keep only the race's name. No third-party analytics runs here.

The country comes from your IP address, read at the time of the visit and not kept. It is the country and never the city. The hour is the whole hour, and it is counted separately from the country: they are two independent totals, not a row about your visit.

When a lookup finds your row, three things go into the day's totals: your sex, your age band, and the fifteen-minute band you finished in. Each goes into a separate count, without the race attached. They are totals for the whole site, not a row about you.

Your language, distance and temperature preferences, the race you chose, your last result and whether you have already answered the newsletter prompt stay in your own browser, not on our servers. There are no advertising or tracking cookies.

Newsletter

If you subscribe, we keep your email address, the language you subscribed in, the version of the consent text you agreed to, and which kinds of email you have chosen to receive. Nothing else, and nothing from your lookup: subscribing is not linked to your bib, your time or your race.

Nothing is kept until you confirm. The confirmation link carries your address inside it, encrypted, and if you never click, your address was never stored anywhere by us.

The list is held by Kit, in the United States, which is where every email is sent from. The confirmation email itself is sent by SMTP2GO, which keeps a copy of that one message, address included, for 30 days. Those are the only two places your address exists.

We read how each email did in total: how many were opened, how many clicked a link. Kit records those per person, as every email platform does, and we do not use it that way. We do not look at whether you opened something, and no decision here depends on it.

Every email has an unsubscribe link, and it takes effect immediately: you receive nothing more. Your address stays on record at Kit as cancelled, so nothing is sent by mistake. If you want it deleted outright, unsubscribe through the link first, so the emails stop at once, and then write to newsletter@raceauditor.com asking for the deletion.

Our Instagram accounts

Race Auditor publishes as @raceauditor and @umgolpepormilha. Through Meta's API we read the metrics of our own posts and the comments left publicly on them, to learn which videos are worth making.

That data stays in private working storage. It is not published, not sold, not shared, and it contains nothing beyond what is already public on Instagram.

Delete a comment on Instagram and it disappears from our next data pull. If you want it out of the working copy too, write to the address below and it will be removed.

Questions

Write to website@raceauditor.com. The person who replies is the person building this.