Privacy Policy
Last updated: June 10, 2026
1. Introduction
Welcome to TripToRace ("TripToRace", "Website", "App", "we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.
The Website is owned and operated by MB Sapalas, a company registered in Lithuania with its registered address at Draugystes g. 17-1, LT-51229, Kaunas, Lithuania. TripToRace is a trading name of MB Sapalas. Throughout these Terms, "TripToRace", "Website", "App", "we", "us", and "our" refer to MB Sapalas.
By accessing or using our website and services, you consent to our use of your personal data as described in this privacy policy. If you have any questions about this privacy policy, please contact us via email at support@triptorace.com.
2. Data We Collect
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:
| Personal Data | Purpose of processing | Legal basis for processing |
|---|---|---|
| First name, last name, or similar identifier, and your contact details (email address) | To provide you with our services, to respond to your inquiries, and to improve our services. To communicate with you by email and other means. | Your consent provided when you register to use our app. To fulfill our contract with you to provide our services. |
| Name and email address submitted via the support form | To respond to your support inquiry and send you a confirmation email. | Your consent provided when you submit the support form. Our legitimate interest in responding to user inquiries. |
| Payment information | To process your subscription payment for access to our app. We use third-party payment processors to handle payment transactions and we do not store your payment information. | To fulfill our contract with you to provide our services. |
| Location data | When you creating event or trip itinerary, we will store your selected location data to provide you with our services. | To fulfill our contract with you to provide our services. |
| Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website and app. | When you use the Services on a day to day basis, we collect information about your device and usage information through our client side technologies and secure server-side systems. We use this information to improve our Services and to provide you with a better experience. | To fulfill our contract with you to provide our services. Our legitimate interests in running our Services for all users. |
3. How long do we keep your data?
We keep your data for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.
You are able to download or delete your account and data by using our app in Account settings at any time.
You can also contact us at support@triptorace.com to request the deletion of your account and data.
4. Sharing Your Data
We do not sell your personal data to third parties for marketing purposes or any other purposes. We do not use tracking technologies to collect information about your online activities for advertising purposes. We do use anonymised analytics to understand how our services are used and to improve them.
We may share your data with third parties in the following circumstances:
| Third party | Purpose of sharing | Legal basis for processing |
|---|---|---|
| Cloud Hosting | We use Vercel to host our app and serve web traffic. Data is stored on Vercel servers located in Europe and transmitted in encrypted form using SSL. You can review Vercel's privacy policy at vercel.com/legal/privacy-policy. | To fulfill our contract with you to provide our services. |
| Database | We use Supabase to store your account and app data. Data is stored on Supabase servers located in Europe and transmitted in encrypted form using SSL. You can review Supabase's privacy policy at supabase.com/privacy. | To fulfill our contract with you to provide our services. |
| We use Resend to send transactional emails (account confirmation, password reset, subscription updates, and support request notifications) and newsletter emails. Your email address is shared with Resend solely for this purpose. Resend servers are located in Europe. You can review Resend's privacy policy at resend.com/legal/privacy-policy. | Your consent provided when you register to use our app or subscribe to our newsletter. To fulfill our contract with you to provide our services. | |
| Payment Processor | We use Stripe to process subscription payments. Payment details are entered directly on Stripe's secure pages and are never stored on our servers. Stripe may collect billing information such as your name, card details, and billing address to process payments. You can review Stripe's privacy policy at stripe.com/privacy. | To fulfill our contract with you to provide our services. |
| Bot Protection | We use Cloudflare Turnstile on sign-up, login, newsletter, and support forms to protect against bots and spam. Turnstile analyses request signals to verify that a submission is human without using intrusive tracking or fingerprinting. You can review Cloudflare's privacy policy at cloudflare.com/privacypolicy. | Our legitimate interests in running our services securely for all users. |
| Weather Data | We use the Norwegian Meteorological Institute (MET Norway) API to display weather forecasts for race locations. Requests are routed through our own servers using only the event's geographic coordinates - no personal data is sent to MET Norway, and no tracking cookies are placed on your device. You can review MET Norway's terms at api.met.no/doc/TermsOfService. | To fulfill our contract with you to provide our services. |
| Analytics | We use PostHog (posthog.com) to collect anonymised analytics about how visitors use our website and app. This includes page views, feature usage, and button interactions. PostHog operates on servers located in the European Union (EU). No personally identifiable information is shared with PostHog unless you are a registered user and have signed in, in which case a pseudonymous identifier is used. PostHog does not sell your data to third parties. You can review their privacy policy at posthog.com/privacy. | Our legitimate interests in understanding how our services are used in order to improve them for all users. |
| Video Content | Some blog pages embed YouTube videos via youtube-nocookie.com — YouTube's privacy-enhanced domain. No cookies are placed by YouTube until you actively click to play a video. When you choose to play a video, YouTube (Google LLC) may set functional cookies on your device. You can review Google's privacy policy at policies.google.com/privacy. | Your interaction with embedded video content. |
| Error Monitoring | We use Sentry to monitor application errors and performance issues. When an error occurs, Sentry collects technical information such as the error message, stack trace, page URL, and browser or device type. This helps us identify and fix bugs to keep the service reliable. We do not send your name, email address, or payment details to Sentry. Where an internal account identifier is included, it is used solely to help reproduce and resolve the error. Sentry processes data on servers located in the European Union (EU). You can review Sentry's privacy policy at sentry.io/privacy. | Our legitimate interests in maintaining the security and reliability of our services. |
We may also have to share your data with third parties where we are required to do so by law or where we believe in good faith that it is necessary to protect our rights, or the rights of others, from possible misuse of our app.
5. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed:
- We use SSL (Secure Sockets Layer) encryption to protect your personal data during transmission.
- We restict access to your personal data to employees who need to know that data in order to fulfill our contract with you to provide our services.
Therefore, while we are using meaningful security measures, we can ensure that your personal data is protected from unauthorized access, disclosure, modification, or destruction.
We do not sell your personal data to third parties for marketing purposes or any other purposes.
In case of a data breach, we will notify you as soon as possible.
6. Your Legal Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to access, correct, erase, object to processing, restrict processing, and request transfer of your personal data.
7. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us via email at support@triptorace.com.