Privacy Policy

The data fiduciary (controller) for this website is CTR Unified, organiser of the CTR–JK Tyre FMSCI Indian National Car Racing Championship.

• Postal address — 29, Tilak Street, T. Nagar, Chennai, Tamil Nadu 600017, India
• Email — admin@ctrsports.in
• Phone — +91 95000 16999

This policy covers the public championship website only. The administration console used by championship staff, teams and officials is a separate system with its own access rules.

We collect data in four situations, all of them initiated by you:

• Fan account — when you register we store your email address, your chosen display name and a cryptographic hash of your password. We never store the password itself.
• Newsletter — when you subscribe we store your email address together with a record of your confirmation (double opt-in): the time you subscribed and the time you clicked the confirmation link.
• Fan-zone activity — if you are signed in and take part, we store your poll votes, race predictions, favourite drivers and teams, saved articles and race-weekend attendance responses (RSVPs), each linked to your account.
• Push notifications — if you switch on notifications, your browser gives us a push subscription (a delivery endpoint and keys generated by your browser). It contains no personal details and works only until you revoke it.

Like every website, our hosting infrastructure also processes technical request data (IP address, browser type, requested page) in short-lived server logs used for security and reliability. We do not use this data to profile you.

This site sets exactly two first-party cookies, and no third-party cookies:

• ctr_fan_session — keeps you signed in to your fan account. Strictly necessary; set only when you sign in and removed when you sign out.
• ctr_cookie_consent — remembers your choice about third-party media (section 4) for 12 months, so we do not ask on every visit.

We use no advertising cookies, no analytics cookies and no cross-site tracking of any kind. You can review or change your choice at any time via Cookie settings (also linked in the footer of every page).

Some videos on this site are hosted on YouTube. Loading a YouTube player or thumbnail sends a request to Google's servers, which discloses your IP address and browser details to Google — so we do not load anything from Google until you consent.

Until then, video cards show our own artwork and video pages show a consent notice instead of the player. If you do consent, embeds use YouTube's privacy-enhanced domain (youtube-nocookie.com). Google's handling of that data is governed by Google's privacy policy. Our own fonts, images and media are served from our infrastructure — the site makes no other third-party requests from your browser.

• Running your account — signing you in, showing your fan-zone activity back to you, and sending strictly service emails such as email verification and password resets.
• Sending the newsletter — delivering championship news and race-weekend digests to confirmed subscribers. Every email contains a one-click unsubscribe link.
• Sending push notifications — delivering the categories of alerts you opted into. You can turn them off in the site's notification settings or in your browser at any time.
• Keeping the service safe — preventing abuse, investigating security incidents and complying with legal obligations.

We do not sell personal data, we do not share it for advertising, and we do not use it for automated decision-making or profiling.

The site runs on infrastructure operated by a small number of service providers (data processors) who process data only on our instructions:

• Vercel Inc. (USA) — hosts and serves the website, including short-lived request logs.
• Neon Inc. (USA) — operates the PostgreSQL database where accounts, subscriptions and fan-zone activity are stored.
• Amazon Web Services (USA) — stores uploaded media files (photographs, logos, documents) in Amazon S3.
• Brevo (Sendinblue SAS, France) — delivers our transactional emails and newsletters.

Because some of these providers operate outside India, your data may be stored or processed abroad. We choose providers with strong contractual and technical safeguards, and transfers take place as permitted under the Digital Personal Data Protection Act, 2023.

• Fan accounts — kept while your account exists; deleted when you delete your account or ask us to.
• Newsletter — kept while your subscription is active. When you unsubscribe we keep a minimal suppression record (your address and the unsubscribe date) so we never email you again by mistake.
• Push subscriptions — deleted when you disable notifications or when your browser invalidates the subscription.
• Server logs — rotated automatically by our hosting provider on short retention windows.

Under the Digital Personal Data Protection Act, 2023, you have the right to access a summary of the personal data we hold about you, to have inaccurate data corrected, to have your data erased, to withdraw consent at any time, to nominate another person to exercise your rights on your behalf, and to an accessible grievance process.

Many of these you can do yourself: unsubscribe links live in every newsletter, cookie choices in Cookie settings, notification toggles in your account, and account details in your account page. For anything else — including access and erasure requests — email admin@ctrsports.in and we will respond within a reasonable time, and in any case within the timelines the law prescribes. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

The championship website's content is suitable for all ages, but fan accounts and the newsletter are intended for users aged 13 and over. If you are under 18, please use these features only with the consent of a parent or guardian, as required by Indian law. If we learn that we hold data of a child collected without the required consent, we will delete it.

All traffic to the site is encrypted with TLS. Passwords are stored only as salted cryptographic hashes. Access to production data is restricted to championship staff who need it, and our providers hold recognised security certifications. No system is perfectly secure — if a breach ever affects your personal data, we will notify you and the Data Protection Board of India as the law requires.

If we change what we collect or how we use it, we will update this page and its effective date, and for significant changes we will tell subscribers and account holders by email before the change takes effect. Continued use of the site after a change means the updated policy applies.

Questions, requests and grievances about personal data go to our grievance contact at admin@ctrsports.in or by post to CTR Unified, 29, Tilak Street, T. Nagar, Chennai, Tamil Nadu 600017, India. Please include enough detail for us to identify your account or subscription. See also our Terms of Use.