Privacy Policy
Last updated 11 September 2026.
This page explains what Simple League collects when you run or race in a league at simpleleague.app, and what we do with it.
What we collect
- Account details: your name, email address and a hashed password. We never store your password in a readable form.
- League content: the leagues, seasons, schedules, rules, registrations, results, protests and penalties you create, and the banner images and protest media you upload.
- iRacing identifiers: the driver names and customer ids that appear in the results files you upload, so finishers can be matched to registrations.
- Operational logs: request logs and error reports that let us keep the service running. They are kept for a short period and are not used to profile you.
We do not run advertising or third-party analytics, and we do not sell personal data to anyone.
Cookies
We set one cookie: the session cookie that keeps you logged in. Sign-up and password forms are protected by Cloudflare Turnstile, which runs a challenge in your browser instead of tracking you across sites. There are no advertising cookies.
What is public
A league page is public by default. Your display name, your registrations, your results, and any penalty issued against you appear on the league's standings, schedule and penalty register. Protest threads and the media attached to them are private to the parties and the league's stewards. Your email address is never shown on a public page.
We send account email (verification, password resets) and the league email your organizers choose to send, such as race reminders and season announcements. Every league email carries a one-click unsubscribe link that stops league mail for that league without closing your account. Account email cannot be unsubscribed while the account exists.
Where your data lives
Simple League runs on Cloudflare Workers, with the database on Neon Postgres in AWS us-east-1 and uploaded media in Cloudflare R2. Cloudflare and Neon process data on our behalf as subprocessors; we use no other processors today.
Retention and your rights
Account and league content is kept while your account exists. Delete a league or your account in the settings pages and we remove the content and uploaded media within 30 days. You can ask for a copy of your data, a correction, or deletion at any time by writing to leagues@simpleleague.app, and we will respond within 30 days.
Children
Simple League is not intended for anyone under 13. If you believe a child has created an account, write to us and we will remove it.
Changes and contact
We will post any change to this policy on this page and update the date above. Questions go to leagues@simpleleague.app.