What Data We Collect
This notice explains what personal data BeamGP collects, why we collect it, how long we keep it, and the rights you have over it under the EU/UK General Data Protection Regulation (GDPR). We keep data collection to the minimum needed to run the league and we never sell your data.
1. Who is responsible for your data
BeamGP (“we”, “us”) is the data controller for the personal data described here. For any privacy questions, data requests, or ban appeals, contact us on our Discord server (message @Seas) or via email at beamgp.contact@gmail.com.
2. What we collect and why
| Data | Why we hold it | Legal basis |
|---|---|---|
| Discord account info user ID, username, avatar, server roles |
To sign you in and recognise you across the site. We request only Discord’s identify scope — we do not receive your email or password. | Consent (you choose to log in) |
| Competition & in-game profile data display name, BeamMP username/ID, nationality, ratings, race & qualifying results, penalties, lap times, attendance |
To run championships, track server participation, publish standings, and maintain your driver profile. | Legitimate interest / performance of your participation in the league |
| IP address & connection logs IP address with first/last seen timestamps |
Security, abuse prevention, and detecting ban evasion or multiple accounts. Your IP also appears in routine server connection logs. | Legitimate interest (protecting the league and its members) |
| Hardware identifiers (HWID) cryptographic, salted hash of device components |
Anti-cheat, anti-griefing, and ban evasion enforcement on our game servers. Raw component serials are never stored. | Legitimate interest (protecting server integrity and fair competition) |
| Game integrity data base game file size hashes and in-game vehicle telemetry/physics values |
Automated cheat detection (comparing local game file integrity and live vehicle metrics against server baselines to detect unfair modifications). All ban actions are reviewed and issued manually by administrators. | Legitimate interest (ensuring fair competition and cheat prevention) |
| Essential session cookie | To keep you logged in on our website. It is strictly necessary — we use no advertising or third-party tracking cookies. | Legitimate interest (strictly necessary) |
3. Who we share it with
We do not sell your data or use it for advertising. Limited data is processed by the services that make the site and servers work:
- Discord — authentication and avatar images.
- flagcdn.com, Google Fonts, and our CDN/icon providers — when your browser loads images, fonts, and icons, your IP address is necessarily visible to those providers.
- Our hosting providers — store server, website, and database data on our behalf under appropriate technical safeguards.
Where data is transferred internationally (outside the EEA/UK), it is protected by appropriate safeguards such as Standard Contractual Clauses.
4. How long we keep it
- Account & Competition Data: kept for as long as you participate in the league. Historic race results and leaderboards are retained permanently as part of the public competitive record.
- Security & Device Identifiers (IPs & HWID hashes): stored on a rolling basis. Inactive identifiers (IPs and device hashes not seen on our servers for over 1 year) are pruned automatically.
- Banned Records: identifiers associated with active sanctions or permanent bans are retained for the duration of the penalty to enforce server bans.
5. Your rights under the GDPR
You have the right to:
- Access a copy of the personal data we hold about you.
- Rectify data that is inaccurate or incomplete.
- Erase your data (“right to be forgotten”), subject to legitimate grounds where data must be retained (such as active ban enforcement).
- Restrict or object to how we process your data.
- Data portability — receive your data in a portable format.
- Withdraw consent at any time by logging out and requesting account deletion.
- Human intervention & appeal — all bans are reviewed manually by staff, and you have the right to appeal any disciplinary decision.
- Lodge a complaint with your local data protection supervisory authority.
To exercise any of these rights, reach out via our Discord server (@Seas) or email beamgp.contact@gmail.com. We will respond within one month as required by the GDPR.
6. Children
BeamGP is intended for users old enough to hold a Discord account in their country (generally 13+, or 16+ where required). We do not knowingly collect data from anyone below that age.
7. Changes to this notice
We may update this notice as the league evolves. Material changes will be reflected by the “last updated” date at the top of this page.