Privacy policy

Effective October 16, 2026. Double Yellow is run by Mantis. Questions or requests about your data go to Mantis in the Double Yellow Discord.

The short version

You log in with Discord. We never see your Discord password or your email address.
Card payments are handled by Stripe. Your card number never reaches us.
We don't sell your data, and we don't show ads.
You can ask for a copy of your data, or for your account to be deleted, at any time.

What we collect

From Discord when you log in: your Discord user ID, display name and profile picture. We only ask Discord who you are, not for your email.
What you give us: your gamer tag, platform, controller type, region, time zone, car number, favourite car, the photos you upload, your spec boards, and anything you write on the site, such as team messages, applications, suggestions, votes and problem reports.
Race records: the events you enter, your results, points, badges and the judges' calls.
If you buy Double Yellow Plus: Stripe collects your card details, an email address for receipts and, where tax applies, your billing address. We keep only your Stripe customer number, your plan and whether it's paid up.
If you turn on phone notifications: the notification address your phone gives us, so we can send your notices to it.
When you visit: Google Analytics records the pages you open, your device and browser, and your rough location, using cookies. We also use a login cookie to keep you signed in.

What's public

Your driver profile is public on the site: your gamer tag, car number, team, driver card, spec boards, photos on them, results and badges. Team pages, streamer pages and event results are public too. Team messages, applications, notices and your plan details are not.

Who we share it with

Only the services that run the site, and only what each one needs:

Discord, to give you your team roles and channels and to send you messages from the league bot.
Stripe, to take payments and work out sales tax.
Cloudflare, which hosts the site, the database and uploaded photos.
Google, for Google Analytics, and for Gemini, which makes spec board art from the car photos on your board.
Apple, Google, Mozilla or Microsoft, whichever runs your phone or browser's notifications, to deliver phone notifications you turned on.

We may also share information if the law requires it.

How long we keep it

Your profile and race records stay while your account exists.
Notices you've read are deleted after 90 days.
Nightly backups of the database are kept for 30 days, then deleted.
Stripe keeps payment records for as long as tax and financial law requires.

Your choices

Change your profile on your page at any time.
Turn phone notifications off on your page, or in your phone's settings.
Update your card or see receipts with Manage payment on your page.
To get a copy of your data, or to delete your account, message Mantis in the Discord. It's done within 30 days. Deleting removes your profile, garage and messages; event results may stay with your gamer tag so past standings still add up.

Keeping it safe

Every page is sent over an encrypted connection. Keys and passwords for the services above are stored as protected secrets, never in the site's code or database, and admin access needs a code from an authenticator app as well as Discord.

Age

You must be at least 13 to use Double Yellow, the same as Discord.

Changes

If this policy changes, the new version goes on this page with a new date, and big changes are announced in the Discord.