Privacy Policy

1. Who we are

BrutalFans.com is owned and operated by Brutal Industries LLC, a Missouri limited liability company ("Brutal Industries," "we," "us"). This Privacy Policy explains what information we collect through BrutalFans.com, how we use it, who we share it with, and the choices you have.

2. Information we collect

We collect only the information described below.

• Account information: your email address and password (passwords are handled by our sign-in provider and stored in hashed form), or basic Google account details if you choose Continue with Google.
• Racer and season registration: racer name, division, date of birth or age information needed for youth eligibility, parent or guardian details for youth racers, emergency and contact details you enter, waiver signatures with the date and time signed, shirt size, check-in status, and racing results and points.
• Payment records: the amount, status, and reference number of racing fee payments. Card details are entered on Square's checkout page; we do not receive or store your full card number.
• Merchandise orders: when you buy from the Brutal Shop, checkout is completed on Shopify, which collects your name, shipping and billing address, and payment details.
• Community content: your display name, profile details, posts, comments, photos and other material you submit to Brutal Feed or Fan Zone, plus reports, blocks and moderation records.
• Messages you send us by email or through the site.
• Technical information: see Cookies, analytics and similar technologies below.

3. How we use information

• Create and manage your account and keep it secure.
• Process racer registrations, waivers, event entries, check-in, payments and shirt orders.
• Calculate, review and publish racing results, standings and racer profiles.
• Fulfill merchandise orders through Shopify.
• Operate and moderate the fan community, including automated screening of text and human review of photos and reported content.
• Respond to questions and provide customer service.
• Prevent fraud, abuse and violations of our Terms of Use.
• Understand how the site is used so we can fix problems and improve it.
• Send service messages about your account, registration, payments or events. We do not send marketing email without a separate opt-in.

4. What is public

Published racing results, standings, racer names, classes and points may be shown publicly on the site.

Community posts, comments, photos, videos, racing stories and profile information you choose to make public can be seen by anyone who visits the site. Others may view, copy, screenshot or share public content, and we cannot control what they do with it after it is posted. Please do not post anything you are not comfortable sharing publicly, and never post a child's full name, school, address or other identifying details.

Photos submitted to the community stay private until staff review them. Approved photos are re-encoded before publication to remove embedded location and camera data.

5. Payments and checkout

Racing fees are paid through Square (Block, Inc.). Merchandise is sold through Shopify. Each provider processes payment information under its own privacy policy and security standards. We receive confirmation of the payment and order details needed to fulfill your registration or order, but not your complete card number.

6. Service providers we use

We share information with the following providers only as needed to run the site:

• Lovable and its cloud infrastructure: website hosting, database, file storage, sign-in, and sending account and service email.
• Google: optional Continue with Google sign-in, and Google Fonts, which delivers the site's typefaces (your browser contacts Google's servers to load them, which shares your IP address with Google).
• Square: racing fee checkout and payment verification.
• Shopify: Brutal Shop product catalog, cart and checkout.
• Lovable's built-in visitor analytics, described below.

7. Other sharing

We do not sell your personal information and do not share it for cross-context behavioral advertising. We may disclose information if required by law, to protect the safety of racers, fans or staff, to enforce our Terms, or as part of a sale or reorganization of the business.

8. Cookies, analytics and similar technologies

We do not use advertising cookies or ad pixels. The site stores a few items in your browser that are needed for it to work: your sign-in session, and your Brutal Shop cart. These stay until you sign out, clear them, or they expire.

Lovable's analytics uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

On this site it records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. Detailed data is kept for 90 days and daily summaries for a year. We do not currently show a cookie banner, so this is recorded for every visitor, without cookies and without identifying anyone.

Shopify and Square may set their own cookies on their checkout pages under their own policies.

9. Data security

We use reasonable safeguards, including encrypted connections, access controls that limit staff to the records their role needs, private storage for unreviewed uploads, and change logs on sensitive records. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. How long we keep information

We keep account information while your account is active. Signed waivers, registration, payment and results records are kept as long as needed for event safety, official standings, tax, accounting, insurance and legal purposes. Community content is kept until you or we remove it, and moderation and safety records may be kept longer to prevent abuse. When information is no longer needed we delete or de-identify it. Analytics retention is described above.

11. Your choices and rights

You can view and update much of your information from your account page. You may also email Brutalindustriesoffroad@gmail.com to request access to, correction of, or deletion of your personal information, or to close your account. We will verify your request and respond within a reasonable time and as required by applicable law. Some records, such as signed waivers, payment records and official results, may need to be kept for legal or safety reasons even after a deletion request.

Depending on where you live, you may have additional rights under local law. You will not be treated differently for making a privacy request.

12. Children and youth racing

BrutalFans.com accounts are intended for adults. Community posting requires confirming you are 18 or older. Children under 13 may not create accounts or submit content.

Youth racers are registered by a parent or legal guardian through the guardian's own account. The guardian provides the child's information, signs the waiver, and controls the child's registration. We use a youth racer's information only to run youth racing: eligibility, check-in, safety, and results. Youth results and names may be shown in published youth standings.

We only publish photos of children where a parent or guardian has given permission, and we blur or avoid identifying details. A parent or guardian may contact us to review, correct or remove their child's information or photos.

If we learn that a child under 13 has provided personal information without a parent's involvement, we will delete it.

13. Changes to this policy

We may update this policy. We will change the effective date at the top and, for material changes, notify members by a notice on the site or email before or when the change takes effect.

14. Contact us

• Brutal Industries LLC
• P.O. Box 271, Ashland, MO 65010
• Email: Brutalindustriesoffroad@gmail.com
• Website: https://brutalfans.com