PRIVATE BETA
MyRacingPath is in private beta and not open to the public. These policies apply to you now: they are not drafts. We update them as the product changes, and we will tell you before any material change takes effect.
COOKIE POLICY
Last updated: 24 August 2026
1. What are cookies?
- Cookies are small text files stored on your device when you visit a website. They help websites remember you and your preferences.
- Similar technologies include pixels, local storage, and fingerprinting. This policy covers all of them.
2. How we use cookies
We use cookies to:
- Keep you logged in and remember your session.
- Remember your preferences (such as your language).
- Understand how our service is used (analytics).
- Protect against fraud and abuse.
We do not use advertising cookies at all, for anyone. That covers behavioural advertising on under-18 accounts, which Standard 12 of the ICO Age Appropriate Design Code prohibits, but it is not limited to it: there are no ad cookies on this service on any account, at any age. We do not sell or share cookie data with advertisers or data brokers.
3. Categories of cookies
Strictly necessary (no consent needed)
Essential for the service to function. Without them, the service cannot work. Examples: authentication tokens, CSRF protection, session management. Legal basis: PECR Reg. 6(4) exemption.
Functional
Remember a choice you made, or how you arrived, so we do not lose it or keep asking. Today there are two: your language, written when you pick a language and not before, and a referral code, written only if you followed someone's referral link. Legal basis: the choice you made by doing the thing. Your theme, font size and other appearance settings are not cookies at all, they sit in local storage (section 5).
Analytics (consent required)
Tell us which parts of the service get used, so we know what to improve and what to fix. Legal basis: your consent. The analytics cookie is not written, and no analytics event is sent, until you press Accept on the banner. UK rules under the DUAA 2025 would let us run analytics on a legitimate-interest basis with an opt-out instead. We do not, because many of our users are under 18 and opt-in is the right default for them.
Marketing
We do not use marketing cookies.
4. Specific cookies we use
This policy covers both the public site at myracingpath.com and the app at app.myracingpath.com. Some of the cookies below are only set in the app, which is where you log in.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| sb-<project>-auth-token | Keeps you logged in. Written by Supabase when you sign in, and split across numbered parts when it gets long. | Up to 400 days, refreshed as you use the app | Strictly necessary |
| mrp_cookie_consent | Remembers your cookie choice so we do not ask again. | 12 months | Strictly necessary |
| mrp_gate | Remembers that you got past the beta password screen. | Until you close your browser | Strictly necessary |
| mrp_beta_access | Remembers that your beta access code was accepted, so you do not need a fresh code every visit. | 30 days | Strictly necessary |
| mrp_signup | Carries a sign-up in progress from the email step to the verify step. | 7 days | Strictly necessary |
| mrp_pwreset | Marks that you arrived from a password reset email, so the reset page lets you set a new password. | 15 minutes | Strictly necessary |
| gmail_oauth_state | Protects the Gmail connection flow for sponsorship outreach against forgery while you approve it. | 10 minutes | Strictly necessary |
| mrp_locale | Your language. Written when you pick a language, not before. | 1 year | Functional |
| mrp_ref | Set only if you arrive through someone's referral link, so they get credited. Holds the referral code and nothing about you. | 30 days | Functional |
| ph_<project key>_posthog | PostHog analytics. Tells us which features get used so we know what to improve. EU hosted. No session recording. | 12 months | Analytics |
We update this list when changes are made.
Two things we use that set no cookie
- Vercel Analytics gives us aggregate page view counts. It is cookieless: it stores nothing on your device and reads nothing from it, and it cannot identify you or follow you to another site. On both sites it only runs if you accept analytics cookies.
- Sentry sends us an error report when something breaks, so we can fix it. It sets no analytics cookie. Session recording is off, so we never record or replay your screen. Sentry holds our error reports in its EU region.
5. Local storage
In addition to cookies, we use your browser's local storage for the following purposes:
| Key | Purpose |
|---|---|
| mrp_pref_* | Your appearance and display settings: theme, colours, font, font size, colourblind mode, reduced motion, units and date format. |
| aiSidebarVisible, sidebar sizing keys | Whether you left the sidebar open, and how wide you dragged it. |
| ph_<project key>_posthog | PostHog analytics state, written only after you accept analytics cookies, alongside the cookie in section 4. Removed if you withdraw your consent. |
| mrp_code_type | Session storage, not local storage. Remembers which kind of verification code we last sent during sign-up, so the verify step checks it the right way. Gone when you close the tab. |
Local storage sits in your browser and our servers do not read it. It is cleared when you clear your browser data. One thing to be straight about: your appearance settings are also saved to your account, so they follow you to another device. That copy is on our servers and is covered by the Privacy Policy, not by this one.
6. Managing your cookie preferences
- When you first visit MyRacingPath, you will see a cookie consent banner asking you to accept or reject non-essential cookies. Both options are equally prominent.
- You can change your choice at any time. On myracingpath.com it is the “Cookie Settings” link in the footer. In the app it is “Cookie preferences” in your account settings. Either one re-opens the banner with your current choice already filled in.
- You can also manage cookies through your browser settings. Most browsers allow you to block or delete cookies.
- Blocking strictly necessary cookies will prevent parts of the service from working (including login).
7. Cookies and users under 18
Many of our drivers are under 18, so none of this is a special mode we switch on when we spot a child's account. It is how the service works for everyone.
- We use no advertising cookies and no behavioural tracking cookies, on any account, at any age. Nothing you do here is used to profile you or to target ads at you, on this service or anywhere else.
- We do not sell or share cookie data with advertisers or data brokers.
- Analytics only run if you accept them. “Reject non-essential” is one click and sits next to “Accept all” with the same styling, neither is hidden or greyed out. Until you choose, no analytics cookie is written and no analytics event is sent.
- Analytics tell us which features get used. They are not used to build a profile of you, and session recording is off everywhere, so nobody here can watch a replay of your screen.
- You can change your mind at any time: “Cookie Settings” in the footer of myracingpath.com, or “Cookie preferences” in your account settings in the app. You can also delete our cookies from your browser whenever you like.
One limit, said plainly. The cookie banner does not know how old you are. It appears before you log in, so there is no account for it to read an age from. A policy promising that analytics wait for a parent's permission would be promising a check the banner cannot make, so we are not going to write that. Instead the protections above do not depend on us correctly identifying an under-18 account: they apply to every visitor.
If you are a parent and you would rather your child's account sent us no analytics at all, press “Reject non-essential” on the banner on their device, or re-open it later from “Cookie preferences” in their account settings and turn analytics off. If you want help doing that, email support@myracingpath.com.
8. Third-party cookies
- Payment happens on Stripe's own checkout pages. Any cookies Stripe sets there are on Stripe's own domain, governed by their policies at stripe.com.
- PostHog sets the analytics cookie listed above, and only after you accept analytics. It is hosted in the EU.
- We do not permit third-party advertising cookies on our service.
9. Changes to this policy
We update this Cookie Policy when we change our cookie use. Check the “Last updated” date at the top. For material changes we will notify you in-app. For any questions contact support@myracingpath.com. See also our Privacy Policy.