Legal
Privacy policy
1. Data controller
- Controller
- Dídac Cañete Tinoco
- Address
- Mataró, 08304 (Barcelona), España
- Contact
- hola@wildtelemetry.app
2. What we collect
Only what you type into the access request form:
- Name.
- Email address.
- Team, school or club (optional).
- Category and the data acquisition system you use (optional).
- Any free-text message you choose to write.
We do not collect telemetry. Wild Telemetry is a desktop application: the sessions you import, your setups and your history are stored on your own computer. The only hosted service issues and revokes activation codes, and for that it stores the email address associated with a code.
Importing and analysing a session makes no network request at all.Not one byte of your telemetry, and not your GPS coordinates, leaves your machine when you open a file. It is an invariant, checked by an automated test that fails if anyone adds a call back.
Until 14 August 2026 that was not entirely true, and we are recording it rather than quietly fixing it: when you imported a session from a circuit the application did not recognise, it sent the session's GPS centroid - the area the car was in - to a public OpenStreetMap server to try to work out the circuit's name. No telemetry was sent, no personal data, and nothing that identified you, and the result was not shared with anyone. It still contradicted what we promise, so that lookup has been removed entirely.
3. What the application can send, and always because you asked it to
This is the complete list. Outside these four cases the application does not connect to anything:
- Your activation code, to our own licence server, when you activate the software and when it checks the licence is still valid.
- An update check against the project's releases page, when the desktop application starts.
- Terrain elevation profile (optional, off by default): if you turn it on, around 100 coordinates from one lap are sent to the public Open-Meteo service to obtain ground altitude. The view always states that the profile came from that source.
- AI assistant with your own key (optional): if you configure an Anthropic, OpenAI, Google or OpenRouter key, your questions and a numeric summary of the session are sent to that provider. By default the assistant runs against a local model on your own machine, and in that mode nothing leaves it.
There is no usage analytics of any kind inside the application.No Google Analytics, no Sentry, no product telemetry.
The preloaded circuits look nothing up. The application ships with 46 layouts, built before packaging from open geometry by TUMFTM/racetrack-database (LGPL-3.0) and bacinger/f1-circuits (MIT), and stored in the installer itself. Searching, drawing or analysing a circuit sends nothing to any server. Both sources are credited inside the application, on the circuits list.
An earlier version did query overpass-api.de with the session's GPS centroid on every import, unasked and unannounced. That call was removed on 14 August 2026 and an automated test stops it coming back: any network connection during import or analysis fails the build. We record it here because it was a real defect and not a hypothetical risk.
4. Purpose and legal basis
- Answering your request and sending you an activation code.Legal basis: your consent (art. 6.1.a GDPR), given by ticking the box on the form.
- Managing the application licence. Legal basis: performance of a contract or pre-contractual steps (art. 6.1.b GDPR).
- Preventing automated form submissions. Legal basis: legitimate interest in service security (art. 6.1.f GDPR).
We do not use your data for advertising, we do not build profiles, and we do not take automated decisions about you.
5. Cookies and analytics
This site sets no cookies. Visits are measured with Cloudflare Web Analytics, which works without cookies and without identifying the visitor, so no consent banner is required. Where Cloudflare Turnstile anti-spam protection is enabled on the form, it likewise sets no tracking cookies and does not track across sites.
6. Recipients and transfers
The providers involved, all acting as processors:
- Cloudflare, Inc. — site hosting, request database, analytics and anti-spam.
- Resend — sending the new-request notification email.
Both may process data outside the European Economic Area. Such transfers rely on the Standard Contractual Clauses approved by the European Commission. We do not share your data with anyone else and we do not sell it.
7. Retention
Requests that do not lead to a licence are kept for a maximum of twelve months. Where an activation code is issued, the associated email address is kept for as long as the licence remains active and for the statutory limitation periods thereafter.
8. Your rights
You may request access, rectification, erasure, restriction, portability and object to processing by writing tohola@wildtelemetry.app. We reply within one month. You may also withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.
If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).