Privacy Policy
Last updated: August 5, 2026
1. Controller
Martin KünstlingMenckestraße 3904155 LeipzigGermanyEmail: hello@racelume.com2. Hosting and website delivery
This website is hosted and delivered through Lovable. When the website is accessed, the hosting infrastructure may technically process connection information such as IP address, time of the request, requested resource, browser information and operating system information.
This processing is necessary to provide the website securely and reliably. It is based on Article 6(1)(f) GDPR (legitimate interest in secure and stable operation).
3. Local processing of result files and images
Result files (CSV, XLS, XLSX) and uploaded images are processed locally in the visitor's browser.
This can include participant names, bib numbers, clubs, categories, rankings, finish times, event logos, sponsor logos and background images.
RaceLume does not intentionally transmit these files to its own database and does not permanently store them. Closing or refreshing the application can remove temporary data.
Event organizers and other uploaders remain responsible for ensuring that they have a lawful basis for using participant data and images.
4. Browser storage
The application stores only the selected interface language in the browser's localStorage (key: “racelume-interface-language”), so that the language choice is remembered on the next visit. A previously used key (“finishframe-interface-language”) is migrated once on the first visit and then removed.
This storage is technically necessary and is not used for advertising, analytics or user profiling. Event details, branding settings and results are kept only in the page's volatile memory.
5. Technically necessary security cookie (Cloudflare)
The Lovable hosting infrastructure uses Cloudflare, which may set the cookie “__cf_bm”. It is used for bot detection and to protect the website against automated abuse.
RaceLume does not use this cookie for advertising and does not use it to build visitor profiles. According to Cloudflare it expires after approximately 30 minutes of continuous inactivity.
The legal basis is Article 6(1)(f) GDPR (legitimate interest in secure operation). No consent banner is used for technically necessary security storage.
6. Email contact
When you contact RaceLume at hello@racelume.com, your email address, the content of your message and any voluntarily supplied information are processed in order to answer your inquiry.
The legal basis is Article 6(1)(b) GDPR for contractual and pre-contractual communication, and Article 6(1)(f) GDPR for other legitimate business inquiries.
Messages are retained only as long as required to process the inquiry and to comply with applicable legal retention obligations.
Email forwarding for this address is provided through Spaceship, and the destination mailbox is operated through Google/Gmail. These providers may process data outside the EU or EEA. Details concerning their processing and the safeguards they apply can be found in their respective privacy policies.
7. No analytics, accounts or payments
The current version of RaceLume does not use:
- user accounts
- payment processing
- analytics
- advertising trackers
- newsletter tracking
- automated profiling
- automated decision-making
- AI services
- a server-side participant database
8. Retention
RaceLume does not define a server-side retention period for locally processed result files and images, because they are not intentionally received or stored by RaceLume.
Emails are deleted once the inquiry has been completed and no legal retention obligations apply any longer. Where such obligations exist, immediate deletion is not possible.
9. Your rights
Under the GDPR you have the right to:
- access (Article 15 GDPR)
- rectification (Article 16 GDPR)
- erasure (Article 17 GDPR)
- restriction of processing (Article 18 GDPR)
- data portability (Article 20 GDPR)
- object to processing (Article 21 GDPR)
- withdraw consent where processing is based on consent (Article 7(3) GDPR)
- lodge a complaint with a supervisory authority (Article 77 GDPR)