Privacy, safety and your data
Last updated 27 Aug 2026.
Placeholder copy for review. Have the terms, the liability position and the per-jurisdiction question reviewed by a lawyer before launch.
What we collect
Your account (email, display name, an optional avatar). The cars you add, including tyre class, drivetrain, power and weight — these exist because the coaching is computed from them. The roads you build, and for each run: the GPS trace, its timestamps, its accuracy, and the lap time the server derives from it.
A trace is stored as one row of parallel arrays, not a row per fix, and it is only ever read whole. We do not collect contacts, advertising identifiers, or location while you are not recording.
Who can see it
Access is enforced by the database, not by the app. Profiles, published roads, lap times and leaderboards are public. Your raw trace is not: it is readable by you, and — on a route you have both driven — by a Plus subscriber for the ghost car and gap comparison. A draft road is visible to nobody but you.
What we never do
We do not sell your data, and we do not share a trace with an advertiser, insurer or broker under any arrangement.
We do not send a notification telling you your time has been beaten on a public road. A leaderboard is passive; a notification is a summons.
We do not put personal data in crash reports. Request breadcrumbs are stripped to a status code, because our own URLs carry track and run identifiers.
We do not track your location in the background. Recording is explicit, foreground, and visible while it runs.
Safety on public roads
Sterza’s roads are real roads with real traffic on them. Four things follow from that, and all four are enforced in the product rather than stated here as sentiment. The safety position sets them out in full.
The acceptance is versioned, so if the wording materially changes everyone is asked again.
An unsurveyed road stays capped: unknown does not mean unlimited. Only a circuit or an explicitly derestricted section is uncapped.
You are compared only against your own previous laps, and no outright record is painted on the map.
As unsafe, as private land, or as a school zone — and it can be hidden while it is looked at.
Some of what this app enables is restricted in certain jurisdictions. Nothing here is legal advice, and driving within the law remains yours.
Third parties
Map tiles and road-snapping are served by our map provider; a road you draw is sent to be matched to a centreline, and nothing about you goes with it. Coaching prose is generated from a few hundred bytes of derived numbers — corner angles, tenths lost — and never from a trace. Sign-in and storage run on our hosting provider. Crash reporting is optional and off unless it is switched on for a build.
Your rights
You can export every run and trace we hold for you, delete an individual run, or delete the account entirely. A published road that other drivers have times on is not deleted with the account — the times belong to them — but it is unlinked from your identity. Requests go to privacy@sterza.app and are answered within 30 days.
Children and eligibility
Sterza is for licensed drivers and is not offered to anyone under [16]. We do not knowingly hold data from a child; if you believe we do, write to us and it will be removed.
Changes and contact
A material change is announced in the app rather than quietly dated here. Data controller: privacy@sterza.app.