PRIVACY POLICY

This Privacy Policy describes how 漢威榜顧問有限公司 (Han Wei Consulting Co., Ltd.) ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use the OC Grand Prix platform, including the website at ocgrandprix.com, the desktop agent application, and all related services (collectively, the "Service").

We are committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

1. INFORMATION WE COLLECT

1.1 Information You Provide

When you create an account, we collect:

• Email address — used for account verification, login, and communications
• Display name (callsign) — shown on leaderboards and in races
• Password — hashed and stored securely using PBKDF2-HMAC-SHA256
• Country — optional, used to display a flag on your profile and leaderboards

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

• IP address — used for security, rate limiting, and analytics
• Device information — browser type, operating system, screen resolution
• Usage data — pages visited, features used, session duration
• Cookies and similar technologies — see Section 4 below

1.3 Benchmark & Telemetry Data

When you run benchmarks through the desktop agent, we collect:

• Benchmark scores — the results of your benchmark runs (e.g., execution time in milliseconds)
• Hardware telemetry — CPU usage, temperatures, frequencies, memory usage, and other system metrics collected during benchmark execution
• Hardware specifications — CPU model, GPU model, RAM amount, operating system, and other system information
• Workload metadata — which benchmark workloads you ran, which variants, and when

1.4 Race & Competition Data

When you participate in races, we collect:

• Race results — your performance, ranking, HP changes, and final standings
• Room participation — which rooms you joined, when you joined, and your activity during races
• Chat messages — any messages you send in race chat or other public features

2. HOW WE USE YOUR INFORMATION

2.1 Primary Uses

We use your information to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process and display benchmark results and leaderboards
• Facilitate real-time races and competitions
• Prevent cheating, fraud, and abuse through anti-spoofing measures
• Send you service-related communications (e.g., email verification, password reset)
• Respond to your questions and support requests
• Comply with legal obligations

2.2 Analytics & Improvement

We use aggregated and anonymized data to:

• Analyze usage patterns and trends
• Monitor system performance and reliability
• Improve benchmark accuracy and workload performance
• Generate platform-wide statistics (e.g., most popular workloads, average scores)

3. HOW WE SHARE YOUR INFORMATION

3.1 Public Display

The following information is displayed publicly on the Service:

• Display name (callsign) — on leaderboards, race results, and your public profile
• Benchmark scores — on workload-specific leaderboards and your profile
• Race results — final standings, superlatives, and awards
• Country flag — if you choose to set one
• Profile note — if you choose to write one
• Badges — earned achievements, tier status, verification status

3.2 Third-Party Services

We share data with the following third-party services:

• Google Analytics — for website usage analytics (see Section 4.2)
• Resend — for sending verification and transactional emails (if RESEND_API_KEY is configured)
• CDN providers — Bunny CDN for caching and serving static assets
• Hosting providers — VPS infrastructure for server hosting

3.3 Legal & Safety

We may disclose your information if required by law, to comply with legal process, to protect our rights, or to prevent fraud or abuse.

4. COOKIES & TRACKING TECHNOLOGIES

4.1 Essential Cookies

We use essential cookies and local storage for:

• Session authentication (storing your login token)
• Theme preference (dark/light mode)
• Remembering your display name and settings

4.2 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"). Google Analytics uses cookies to collect information about your use of the website, including your IP address, browser type, pages visited, and session duration. This information is transmitted to Google and used to analyze website usage.

Google Analytics is configured with the following tracking ID: G-3RFRJP799B

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

5. DATA RETENTION

5.1 Benchmark Results

Benchmark results and race data are retained permanently unless you request deletion. This allows us to maintain historical leaderboards, track personal bests, and provide long-term statistics.

5.2 Account Data

Account information (email, display name, etc.) is retained as long as your account is active. You may request account deletion at any time, which will remove your personal information (subject to legal retention requirements).

5.3 Telemetry Data

Full time-series telemetry data (e.g., per-second CPU temps during a run) is stored for detailed analysis and may be retained indefinitely for research and improvement purposes.

5.4 Logs & Analytics

Server logs and analytics data are retained for up to 90 days for security monitoring and performance analysis.

6. DATA SECURITY

6.1 Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

• Password hashing with PBKDF2-HMAC-SHA256 (260,000 iterations)
• HMAC-signed session tokens with 30-day expiration
• HTTPS/TLS encryption for all data in transit
• SQLite database with WAL mode for data integrity
• Rate limiting on authentication endpoints
• Anti-spoofing validation for benchmark submissions

6.2 Data Storage

Your data is stored on servers located in Taiwan. We use industry-standard security practices to protect against unauthorized access, alteration, disclosure, or destruction of data.

7. YOUR RIGHTS

7.1 Access & Portability

You have the right to access your personal data. You can view most of your data through your account page. You may also request a copy of your data in a machine-readable format.

7.2 Correction

You can update your display name, email, country, and other profile information through your account settings. If you need to correct other data, please contact us.

7.3 Deletion

You may request deletion of your account and personal data. Note that some data (e.g., race results where you participated) may be retained in anonymized form to preserve the integrity of historical records and other users' experiences.

7.4 Restriction & Objection

You may request restriction of processing or object to certain uses of your data. Please contact us to discuss your concerns.

7.5 How to Exercise Your Rights

To exercise any of these rights, please contact us using the contact information below. We will respond to your request within 30 days.

8. CHILDREN'S PRIVACY

The Service is intended for users of all ages. We do not knowingly collect personal information from children under 13 without parental consent. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. INTERNATIONAL DATA TRANSFERS

Your data is primarily processed and stored in Taiwan. By using the Service, you consent to the transfer of your data to Taiwan and to third-party service providers who may process data in other jurisdictions.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

11. CONTACT US

If you have questions about this Privacy Policy or our data practices, please contact us at:

漢威榜顧問有限公司 (Han Wei Consulting Co., Ltd.)
Unified Business Number: 24754963
Taiwan
Email: contact@ocgrandprix.com