We collect what we need to run your account and the site: your name, email, the setups you share, your messages, and some technical data like IP addresses for security and fair counting. You can change or delete most of it yourself in your account settings, and deleting your account removes it.
Who we are
Onetenth (onetenth.co.uk) is run by Ritchie Thorn in the United Kingdom. Under UK data protection law that makes us the "controller" of the personal data described on this page.
You can contact us about anything on this page at contact@onetenth.co.uk or through our contact page.
What we collect
Your account. Your first name, surname, email address, nationality and your password, which is only ever stored as a secure hash, so nobody (including us) can read it. You can also add a sponsor, race colours, social media links and a profile photo. We record when you joined and when you were last active.
Setups you upload. The file itself and the details you enter (car, track, event, surface and race date). Photos and PDFs are converted into a web image, which removes hidden data such as camera details and GPS location. We also keep the result of the automatic content check (see below).
Messages. Messages you send to and receive from other drivers are stored so your conversations work. We don't read them as a matter of course, but we may look at them if we need to deal with a report of abuse or a security problem.
The contact form. Your name, email address, topic and message, plus your IP address and the approximate country it comes from.
Technical data. Your IP address, which we use to count downloads and profile views from visitors who aren't logged in (so each person counts once), to slow down repeated failed logins, and to spot bots. When you sign up, upload a setup or profile photo, or use the contact form, your IP address (and, for uploads and the contact form, an approximate country looked up from it) is included in a notification email to us. Our hosting provider also keeps standard server logs.
Why we use it
To provide the service you signed up for: running your account, showing your profile and setups, letting you message other drivers, and sending account emails such as verification, password resets and email-change notices. The legal basis is our contract with you (these terms).
To keep onetenth safe and working: checking uploads for inappropriate content, limiting repeated login attempts, blocking bots and abuse, counting downloads and views fairly, and notifying us about new sign-ups and uploads. The legal basis is our legitimate interest in running a safe, reliable site.
What others can see
Onetenth is a place to share setups, so some of your information is public. Anyone visiting the site can see your name, nationality, sponsor, race colours, social links, profile photo, your setups and their download counts, and whether you've been active recently (the status dot on the drivers page).
This public information can also be found by search engines such as Google, so your name, profile and setups may appear in search results. If you change or delete something, or delete your account, it's removed from onetenth straight away, but search engines can take a while to update their results.
Your email address is never shown publicly. Messages can only be seen by you and the other driver in the conversation.
How long we keep it
Your account: until you delete it. Deleting your account (Account settings, then Delete account) removes your profile, photo, setups and their files, social links and your messages. Downloads you made of other drivers' setups still count towards their totals, but nothing that identifies you is kept.
IP addresses of visitors who aren't logged in, used to count downloads and profile views: 12 months, then removed automatically.
Failed login records: about a day.
IP addresses caught by our bot trap: removed 90 days after they were last seen.
Uploads blocked by the content check: kept privately for 30 days so we can put right any mistakes, then deleted. The record of the check is kept for security, and is no longer linked to you if you delete your account.
Password reset links stop working after 60 minutes, and email verification links after 24 hours.
Contact form messages and notification emails: for as long as we need them to deal with your message or look into a problem.
Server logs: kept by IONOS under its own policy.
Your rights
Under UK data protection law you can ask us for a copy of the personal data we hold about you, ask us to correct it or delete it, ask us to limit or stop using it, object to how we use it, and ask for a copy of the data you gave us in a format you can take elsewhere. You can do most of this yourself in your account settings.
For anything else, email contact@onetenth.co.uk. We'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to put things right first, so please get in touch with us before you do.
Children
Onetenth accounts are intended for ages 13 and up. If you're under 13, a parent or guardian must create and manage the account, and is responsible for any information provided to us.
Changes to this policy
We may update this policy from time to time to reflect changes in how we handle data. We'll let you know of any significant changes, and the "last updated" date at the top of this page will always reflect the current version.
Questions about your data? Get in touch.