Privacy policy

This policy explains what personal data Pit Lane Legends collects, why, and your rights. The data controller is MDesigns I/S (Denmark); contact webshop@mdesigns.dk or see our company information.

What we collect

When you use Pit Lane Legends we may hold:

Account & game data: your Instagram/TikTok username and account id, and your in-game data (car setup, coins, race results, league membership).
Age: if you confirm your birth year (required before a monthly subscription), we store it to apply our age rules.
Membership & payment data: if you buy a membership, our payment processor Stripe collects your email, card details and billing country and processes the payment. We never see or store your card number, email, or full billing address — from Stripe we retain only a Stripe customer/subscription id, your tier and your renewal date.
Discord: if you link Discord, your Discord user id and server roles.
Technical: one session cookie to keep you logged in (see cookies), and basic server logs. No advertising or cross-site tracking cookies.

Why we use it & our legal basis

To run the game and your membership — performance of our contract with you.
To publish race videos and results that include your public handle on our social channels — this is core to the league; our legitimate interest in operating it (you can ask to be retired at any time).
Security, anti-cheat and abuse prevention — our legitimate interests.
Keeping billing and tax records — to comply with our legal obligations.
Anything we ask your consent for — on the basis of that consent, which you can withdraw.

Who we share it with

We don't sell your data. We do use trusted service providers (“sub-processors”) to run the service, and data is shared with them only for that purpose:

Stripe — payments and membership billing.
Meta/Instagram and TikTok — we post race videos there, and we receive your username + account id when you sign in.
Discord — if you link your account (roles, auto-posts).
ElevenLabs — generates the spoken commentary; driver names are voiced into the videos.
Our hosting provider — stores the data at rest.

The current list is on our sub-processors page. We may also disclose data if required by law.

International transfers

Some providers (including Stripe and the platforms above) process data outside your country, including in the United States. Where that happens we rely on appropriate safeguards for each recipient:

Stripe and Meta/Instagram — we rely on the EU–US Data Privacy Framework where the recipient is certified, and otherwise on the EU Standard Contractual Clauses.
ElevenLabs, Discord and TikTok — we rely on the EU Standard Contractual Clauses (Module 2) together with a transfer-impact assessment.
Hosting (Contabo) — your data is stored within the EU, so no transfer to a third country arises.

For any UK transfers we use the UK International Data Transfer Addendum to those clauses. We review these mechanisms periodically as providers' certifications change.

How long we keep it

Account & game data — kept until you ask us to delete it (after which we erase it, subject to the items below).
Billing & accounting records — kept for 5 years as required by the Danish Bookkeeping Act (bogføringsloven §10).
Already-published race videos — may continue to show your handle in historical results indefinitely.

Children & age

The minimum age to use Pit Lane Legends is 13. A free racer account may be created automatically when someone interacts with our social-media posts; for that sign-up path we rely on Instagram's and TikTok's own minimum-age enforcement on their platforms. We ask for a birth year before any paid membership. We do not knowingly collect personal data from anyone we know to be under 13, and we delete such data promptly on request or once we become aware of it.

If you are 13–17 you may use the free game (with a parent/guardian's involvement where your country requires it), but monthly paid memberships are for adults (18+); a parent or guardian can buy a one-time gift membership instead. Where we publish a 13–17 user's handle or results, we rely on our legitimate interest in operating the league, balanced against the interests of the child (GDPR Recital 38), and a parent or guardian can have the child retired at any time.

If you believe a child under 13 has given us data, contact webshop@mdesigns.dk and we'll delete it. A parent or guardian can ask to see or delete their child's data at the same address.

Your rights

You can ask to access, correct, delete, restrict, object to, or port your data, and withdraw consent at any time. Email webshop@mdesigns.dk, or DM the account that posts the races (see data deletion — “delete my data” is enough). You can also revoke Instagram/TikTok access in those apps' settings.

If you're in the EU/EEA you can complain to your data-protection authority (in Denmark, Datatilsynet); in the UK, the ICO. California residents have the right to know, delete, and opt out of “sale”/“sharing” of personal information — we don't sell or share it in that sense, and you can exercise these rights at the same contact above.

Last updated 29 June 2026. Questions about these terms or your billing? Contact webshop@mdesigns.dk. See also our Terms · Privacy · Refunds & cancellation · Cookies · Sub-processors · Data deletion · Legal / company info.