Privacy statement
Last updated 8 November 2026
LapLab is a service for analysing lap times from RC driving. Your lap times and training data belong to you. This statement explains what we process, why, who helps us, and what your rights are – as briefly and concretely as we can.
1. Who is responsible
The data controller is RC LapLab. Send privacy questions to gofaster@rclaplab.com.
2. In short
- Your training data is private by default. Other users cannot see it.
- Administrators cannot see your training data unless you grant temporary support access yourself. Every such access is logged.
- We use no tracking, analytics tools or advertising, and we do not sell or share your data.
- You can export everything and delete your account with all data at any time.
3. What we process
| Category | What | Why |
|---|---|---|
| Account | Name, e-mail address, password (stored only as a cryptographic hash), language, time zone, any two-factor and passkey information, role and plan | To create and secure your account and provide the service |
| Training data | Lap times, sessions, training days, cars, setups, tracks, goals, notes, comments and analysis settings | The service itself: storing and analysing your training |
| Import files | The original files you upload (for example Speedhive CSV), which may contain transponder numbers and lap timestamps | Traceability, troubleshooting and the ability to undo an import |
| Usage and security | Time of last activity; login session with IP address and browser type (deleted when the session expires); IP address in the audit log for administrative actions, support access and data exports | Security, abuse prevention and accountability |
| E-mails we send you (address verification, password reset, important account notices) and e-mails you send us | Running your account and support |
We do not ask for, and do not need, special categories of personal data.
4. Legal basis
- Contract (GDPR art. 6(1)(b)): account, training data, import files and e-mails needed to provide the service you signed up for.
- Legitimate interest (art. 6(1)(f)): security logs, abuse protection (for example limiting login attempts) and a reminder before a free period you received ends.
- Consent (art. 6(1)(a)): support access to your training data is only granted when you switch it on, and you can withdraw it at any time.
5. Who processes data for us
We use a few providers (processors) that process data on our behalf under an agreement with us:
| Provider | Purpose | Location |
|---|---|---|
| Laravel Cloud (Laravel Holdings Inc.) | Hosting the application, database and import file storage | Data centre in the EU/EEA. The company is US-based; any transfer is covered by the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework. |
| Resend (Resend Inc.) | Sending e-mail from the service | EU sending region. The company is US-based; transfers are covered as above. |
| Domeneshop AS | Domain and the mailbox gofaster@rclaplab.com | Norway |
We do not share data with anyone else unless we are legally required to.
6. Cookies and local storage
We only use what is necessary for the service to work, so we do not ask for cookie consent:
- Login session and CSRF protection – keep you signed in and protect forms against abuse.
- "Remember me" – only if you tick it when logging in.
- Language choice for visitors who are not signed in, stored in the session.
- Light/dark mode – stored locally in your browser and never sent to us.
7. How long we keep data
- Account, training data and import files are kept for as long as you have an account.
- When you delete your account, the account, all training data and all stored import files are deleted immediately. Data in backups disappears as the backups are rotated out.
- When you undo or delete an import, its sessions and laps are deleted, and the original file is deleted when you delete the import.
- The audit log is deleted automatically after 12 months.
- Downgrading from Pro to Free deletes no data – only access to Pro features changes.
8. Your rights
You have the right of access, rectification, erasure, data portability, restriction and to object. Most of it you can do yourself:
- Access and portability: download everything under Profile → My data (ZIP with CSV files).
- Rectification: change name, e-mail, language and time zone under Profile, and training data directly in the service.
- Erasure: delete your account under Profile.
- Otherwise contact us at gofaster@rclaplab.com. We reply within 30 days.
If you believe we process personal data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet. We appreciate it if you contact us first.
9. Security
Traffic is encrypted (HTTPS), passwords are stored as hashes, import files are stored privately and are not reachable from the internet, and access to data is enforced on the server. You can enable two-factor login and passkeys under Profile → Security.
10. Children
LapLab is suitable for drivers of all ages. If you are under 13, a parent or guardian must create and manage the account.
11. Changes
We update this statement when the service changes. For significant changes we will let you know in the service or by e-mail. The date at the top shows when it was last changed.