Privacy policy

My Slot Car Track (“we”) is the data controller for personal data collected through this website. You can contact us at hello@my-slot-car-track.uk.

What we collect

• Account details: your name, username, email address, password (stored securely hashed) and date of birth. We use your date of birth only to check your age; it is never shown to anyone.
• Profile and content: your bio, region, profile photo, tracks, projects, progress entries, photos, comments, votes, follows and blocks.
• Private messages: messages you send to and receive from other members (available to members aged 18 and over), and when you last read each conversation.
• Moderation records: reports you make or that are made about your content, and moderators’ decisions.
• Usage (analytics): for every page view we record the page, the website you came from (if any), any campaign tag in the link (such as utm_source=facebook), your browser and device type (for example “Safari on iOS”, “mobile”), your country (supplied by our network provider, Cloudflare — we never look up or store your IP address), whether you were logged in, and how long the page was on screen. We also count key actions such as signing up, creating a track or publishing a progress entry. None of this identifies you.
• If you accept analytics, we also store a random visitor id in a cookie so we can recognise return visits and see which steps visitors take (for example, from first visit to signing up), and we note the first page, website and campaign you arrived from when you sign up. You can withdraw consent at any time using “Cookie settings” at the bottom of every page.

Photos

Every photo you upload is re-processed to remove hidden data such as GPS location and camera details before it is stored.

Private messages

Private messages can only be read by you and the member you’re talking to. They are checked by AI moderation for spam and abuse like other content. Our moderators can read a message, and the messages either side of it, only when it has been reported or flagged by the AI. Email and push notifications say who messaged you but never include the message itself.

AI moderation

To keep the community safe, new and edited text (including private messages) and photos are sent to Anthropic, PBC, which provides the Claude AI model we use to check content against our community guidelines. Anthropic processes this content on our behalf to return a result and does not use it to train its models. A human moderator reviews anything the AI flags.

Why we use your data

• To provide the service you signed up for (contract).
• To keep the site safe, prevent abuse and enforce our guidelines (legitimate interests and legal obligations, including under the Online Safety Act 2023).
• To send emails you’ve asked for, such as notifications and digests (contract; you can change these at any time in your settings).
• To understand how the site is used, only if you accept analytics (consent).

Who we share it with

We use trusted providers to run the site: Laravel Cloud for hosting (in the UK/EU), Resend for email, Cloudflare for security and DNS, and Anthropic for AI moderation. We never sell your data.

How long we keep it

We keep your account and content while your account is open. If you close your account we delete your personal data, except comments and entries on other members’ tracks, which are kept and shown as from a “deleted user”. Moderation records are kept for up to two years. Analytics records are deleted automatically after 13 months.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email us to make a request. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Children

Members must be at least 13. Members under 18 get safer defaults, cannot send or receive private messages, and cannot take out a paid subscription.