Privacy Notice

1. Personal data we collect

• Account data: email address, password hash, display name.
• Usage data: pages visited, features used, device and browser information, IP address.
• Support data: messages you send us.
• Order & entitlement data: order ID, payment status, purchased plan, remaining time credits or annual expiry date, and history of prior purchases and refunds. The full payment details (card number, billing address) are collected by Paddle, not by us.
• Session data: a short-lived record of the Tool tabs currently open on your account, used to enforce the two-simultaneous-tabs limit and to keep multiple open tabs in sync. These records are deleted automatically shortly after a tab is closed.

2. Purposes & legal basis

• Provide and operate the Service (contract).
• Authenticate users and prevent fraud and abuse (legitimate interests, legal obligation).
• Customer support (contract, legitimate interests).
• Improve the Service through aggregated analytics (legitimate interests).
• Comply with legal obligations (legal obligation).

3. Sharing & subprocessors

We share personal data with the following categories of recipients:

• Paddle — our Merchant of Record. Paddle processes payments, calculates and remits sales tax/VAT, issues invoices, and manages refunds and chargebacks. See Paddle's privacy policy at paddle.com/legal/privacy.
• Hosting and backend infrastructure providers used to operate the Service.
• Professional advisers (legal, accounting) where necessary.
• Authorities, where required by law.

4. International transfers

Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep account data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations and resolve disputes. Order records are retained as required by tax and accounting laws. Backups are deleted on a rolling basis.

6. Your rights

Depending on your location you may have the right to access, rectify, erase, restrict, or port your personal data, object to processing, withdraw consent, and lodge a complaint with your local supervisory authority. To exercise these rights, contact us through the Service. We aim to respond within one month.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and audit logging.

8. Who we are

The Service "Pit Lane Manager" is operated by Dimitris Parisis, an individual sole trader based in Thessaloniki, Greece, who is the data controller for the personal data described in this notice. If you have any questions about this notice or your personal data, contact us through the Service.

9. Cookies

We use strictly necessary cookies and local storage to keep you signed in and remember your preferences. We do not use advertising cookies.

10. Changes

We may update this notice; material changes will be communicated through the Service.