Privacy Policy

1. Data Controller

Sebastian Schaaf ("we", "us", "our") operates The Paddock, a digital product offering cosmetic pixel art car skins for the 2026 F1 grid viewer. We are the data controller for the personal data collected through this service.

2. Data We Collect

We collect the following categories of personal data:

• Account information: email address and login credentials when you create an account.
• Purchase records: which digital skins you have purchased, transaction identifiers, and timestamps.
• Usage data: pages visited, features used, device type, browser, IP address, and similar technical data collected automatically.
• Support messages: any communications you send us.

Payment details (card number, billing address) are collected and processed directly by Paddle, our Merchant of Record, and are not stored by us.

3. Purposes & Legal Basis

• Contract performance: to create and manage your account, deliver purchased digital skins, and provide the service.
• Legitimate interests: to improve the service, prevent fraud, and ensure security.
• Legal obligation: to comply with applicable laws and regulations.
• Consent: for optional marketing communications, where applicable.

4. Data Sharing

We share personal data with the following categories of recipients:

• Paddle — our Merchant of Record, for payment processing, tax compliance, subscription management, and invoicing.
• Hosting & infrastructure providers — to store data and deliver the service.
• Analytics providers — to understand usage patterns and improve the product.
• Authorities — where required by law.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. When data is no longer required, it will be deleted or anonymised. Purchase records may be retained longer to comply with legal obligations.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict processing of, or port your personal data. You may also object to processing or withdraw consent at any time. To exercise these rights, contact us at the email address provided below. We will respond within one month.

7. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls, and secure hosting infrastructure.

8. Cookies

We use essential cookies required for authentication and service functionality. No marketing or tracking cookies are used.

9. Contact

For privacy-related inquiries, contact Sebastian Schaaf via the support channels provided on the site.