Privacy Policy
Last updated 16 October 2026
The short version. Podium Facts collects as little as it can. Without an account, we don't know who you are. With an account, we keep your email address, your password (scrambled so nobody can read it) and the facts you save and have seen, so they're on all your phones. There are no ads, no analytics and no tracking. We never sell your data. You can delete your account and everything in it from the app at any time.
Who we are
Podium Facts is run by Pixel Viking, a sole proprietorship (obrt) in Croatia. We are responsible for your personal data under the EU General Data Protection Regulation (GDPR).
Questions or requests about your data: privacy@podiumfacts.com.
Podium Facts is an unofficial fan app. It is not affiliated with Formula 1, the FIA or any team.
What we collect, and why
Using the app without an account
You don't need an account. The app asks our server for facts, and the facts and photos you've had are kept on your phone. To answer, our server briefly sees technical details that every internet request carries, such as your IP address. We use them only to deliver the facts and keep the service safe, and they are deleted after a short time. We don't use them to identify you.
With an account
| What | Why |
|---|---|
| Your email address | To sign you in, send you a 6-digit code to confirm the address or reset your password, and tell you when your password was changed. |
| Your password | To sign you in. It is stored scrambled (hashed); nobody, including us, can read it. |
| Facts you save, and when | To keep your saved facts on all your phones. |
| Facts you've seen or opened, and when | So you don't get the same fact twice, and the app can mark facts you've already seen. |
| When your account was created and last signed in, and sign-in records | To run your account and protect it from misuse (for example, too many wrong passwords). |
When you sign in, create an account or ask for a code, a quick bot check by Cloudflare Turnstile runs first, so automated programs can't misuse our sign-in or send emails to strangers. It looks at technical details from your phone (such as the IP address and browser characteristics) for that check only; it uses no cookies for tracking and isn't used for ads. You'll only notice it if it asks you to tap a box.
Legal basis: we need this data to provide the account you asked for (GDPR Article 6(1)(b)). The security records are kept because we have a legitimate interest in keeping accounts safe (Article 6(1)(f)).
On your phone
The app keeps some things on your phone so it works quickly and without the internet: today's fact, upcoming facts and their photos, your saved facts, and your sign-in session (in the phone's secure storage). The widget shows the fact from this copy. Deleting the app removes all of it.
What we don't do
- No ads, no analytics, no tracking, and no advertising IDs.
- We don't ask for your location, contacts, photos, camera or microphone.
- We don't sell or rent your data, and we don't use it for anything other than what's described here.
- Our emails contain no tracking pixels or tracked links.
Videos from YouTube
Some facts include a video. Videos are played by YouTube, which is owned by Google. When a video loads or plays in the app, YouTube receives information such as your IP address and may use cookies, under Google's Privacy Policy. We don't receive anything from YouTube about you. If you'd rather not, simply don't open videos; everything else works without them.
Who helps us run the app
We use a few trusted providers. Each one only gets what it needs for its job and may only use it for us.
| Provider | What it does | Where |
|---|---|---|
| Supabase | Our server and database: accounts, saved and seen facts, photos | Frankfurt, Germany (EU) |
| Resend | Sends our emails (codes and the password-changed notice) | Sent from Ireland (EU); its sending records are kept in the USA |
| Cloudflare | Runs this website, forwards email sent to privacy@podiumfacts.com, and runs the bot check when you sign in (Turnstile) | Worldwide network |
| Google (YouTube) | Plays videos when you open them | Worldwide |
| Google Play / Apple App Store | Deliver the app to your phone, under their own privacy policies | Worldwide |
When data goes outside the EU (for example Resend's records in the USA), it is protected by the EU–US Data Privacy Framework or the EU's Standard Contractual Clauses.
How long we keep it
- Account data: for as long as you have the account.
- When you delete your account: your account and everything in it are deleted straight away. Copies in our providers' routine backups, if any, disappear when those backups expire, within 30 days.
- Technical records and email sending records: a short time, at most 30 days, unless we need them longer to deal with misuse.
Your rights
Under the GDPR you can:
- get a copy of the data we hold about you, including in a format you can take elsewhere;
- have wrong data corrected;
- have your data deleted (see Delete your account);
- object to or limit how we use it;
- complain to a data protection authority. In Croatia that's the Personal Data Protection Agency (AZOP), azop.hr, or the authority where you live.
Write to privacy@podiumfacts.com from the email address of your account. We answer within one month and don't charge for it.
Age
Anyone can read facts without an account. Accounts are for people aged 16 and over. If we learn that an account belongs to someone younger, we delete it.
Changes
If this policy changes, we'll update the date at the top, and for important changes we'll tell you in the app before they apply. If we ever add ads or paid features, this policy will be updated first.