Last updated 11 September 2026.
pista.lol is a browser racing game. This page explains what it stores about you and why. The short version: it stores the name you choose, your lap times, and a recording of the path your car took, and nothing else unless you choose to sign in.
You can play without signing up. When you first open the game it creates a guest account, which is a random identifier stored in your browser. Nothing in it identifies you personally.
When you finish a lap, the game sends the lap time and a recording of your car's path, about 30 positions a second. The path is used to check the lap is genuine before it reaches the leaderboard, to show your ghost car, and to let other players race against your ghost. Your chosen name and best time appear on the public leaderboard, and your name appears above your car when you are on track at the same time as other players.
Signing in is optional and keeps your times and car when you switch devices. We receive your email address and the unique account identifier Google provides. We do not receive your Google password, contacts, files or anything else. Your email is never shown to other players.
We store the company name, email address, optional website link and artwork you submit, along with the board and month you booked. The artwork and company name are shown publicly on the track once approved. Boards are free, so no payment details are involved.
The game is hosted by Vercel, and the data is stored by Supabase on servers in the United States. Both are service providers acting on our behalf. We do not sell your data or share it for advertising. Trackside advertisers get a fixed billboard and receive no information about who saw it.
We record simple product events so we can see whether the game is working: a page being opened, a lap finished and its time, a race joined, the garage opened, a time shared. Each event is tied to a random identifier that lives only for that browser tab and is not linked to your name or email. We also store which site referred you, whether you are on a touch device, and the country your request came from, as reported by our host.
We do not use advertising cookies, cross-site tracking or fingerprinting, and we do not sell or share this data. The site also uses Vercel Analytics, which is cookie-free and does not collect personal data.
The game stores a sign-in token in your browser so it can remember you between visits.
Leaderboard times and ghost recordings are kept so past tracks stay playable. Account records are kept until you ask us to delete them. Billboard booking records are kept while the booking is active and for a reasonable period afterwards.
You can ask for a copy of your data or for it to be deleted by contacting us through the channel listed on this page. Deleting your account removes your profile, your lap times and your ghosts, and cannot be undone. If you are in a region with data protection laws such as the UK, EU or California, you also have rights to correct your data or object to its use, and you may complain to your local regulator.
pista.lol is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.
If this page changes materially, the date above will change. Continuing to play after that means you accept the new version.
For anything about privacy, or to request a copy of your data or its deletion, use the contact details on pista.lol.