RaceCut is built so that as little of your data as possible ever reaches us. The race is simulated, rendered and encoded in your browser; your finished video never leaves your device unless you choose to share it. This policy explains the small amount we do process, why, and your rights.
The controller of your personal data is RaceCut, operating from the United Kingdom. Contact: hello@racecut.app.
| When | Data | Why / lawful basis | Kept |
|---|---|---|---|
| You visit the site | Standard server logs: IP address, browser/device type, pages requested, timestamps | Security, abuse prevention and keeping the site running (legitimate interests) | Short-lived hosting logs, typically under 30 days |
| You make a race | Nothing is stored. Marble names, colours, song files, the race and the video stay in your browser. | - | - |
| You voice a race (optional) | The song link (if any), chosen voice IDs and swap timings; for uploads, the file name, size and type. Your IP is held in memory briefly to enforce hourly limits. | To relay your instructions to the Voice Provider and pay for the job on our developer account (performance of our contract with you; legitimate interests in preventing abuse of the shared allowance) | Relayed, not stored by us. Rate-limit counters expire within an hour. |
| You email us | Your email address and whatever you send | To answer you (legitimate interests / contract) | As long as needed to handle the matter and for a reasonable period after |
We do not use advertising trackers or third-party analytics cookies. The site sets no cookies for tracking; the creator tool may use your browser’s local storage purely to remember your preferences on your own device.
Voicing is performed by an independent third-party AI voice service (the “Voice Provider” - currently Jammable, jammable.com). If you choose it, your song file is uploaded from your browser directly to the Voice Provider’s storage (it does not pass through RaceCut’s servers), the Voice Provider processes it and returns the voiced audio to your browser, and it may keep the result at an unlisted link on its platform under its own privacy policy. The Voice Provider acts as our processor for that job to the extent it handles data on our instruction, and as an independent controller for what it retains under its own terms. Voice artwork shown on marbles is fetched from the Voice Provider’s image servers, occasionally via a RaceCut relay that stores nothing.
The creator dashboard is optional. If you connect a social account (currently TikTok or Instagram), you are sent to that platform to sign in and approve what RaceCut may do; RaceCut never sees your password. When you approve, the platform gives us an access token, which we store encrypted at rest on our servers and use only to act on the account you connected. We also keep the profile details the platform returns - its user id, handle, display name and avatar - so the dashboard can show you which account is linked.
What we do with that permission, and nothing else:
To publish, the finished video is uploaded from your browser to our private storage and handed to the platform, because the platforms require a link or an upload they can fetch. That file is transitory: it is deleted as soon as the platforms have taken it, and in any case within seven days. The first frame and the details of what the video was made of (song, racers, style) stay with your dashboard entry so the card still means something after the file is gone.
You can unlink an account at any time from the dashboard, which revokes our token with the platform. Unlinking keeps the history already shown in your panel; deleting the channel removes that history entirely. Neither deletes anything from TikTok or Instagram - posts you published stay on those platforms, under their own privacy policies (TikTok, Instagram). You can also remove RaceCut’s access from your account settings on the platform itself.
We do not sell personal data and we do not share it with advertisers.
Some providers process data outside the UK (principally in the US and EU). Where they do, we rely on the UK International Data Transfer Agreement / Addendum, the UK–US Data Bridge or an adequacy regulation, as applicable.
Under UK GDPR (and EU GDPR if you are in the EU) you can ask us to access, correct, delete or restrict your personal data, object to processing based on legitimate interests, ask for portability, and withdraw consent at any time. Email hello@racecut.app. You can also complain to the Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.
The Service is not for children under 13, and we don’t knowingly collect their data. If you think a child under 13 has given us personal data, email us and we will delete it.
Everything is served over HTTPS; our servers hold no song, race or video data; and secrets such as our Voice Provider developer key never reach your browser. No system is perfectly secure, so please contact us if you notice anything wrong.
We’ll post any changes here with a new effective date, and flag material changes in the product where we can.
RaceCut · hello@racecut.app