Privacy policy

Last updated October 27, 2026

• What we collect
• Cookies
• How we use it
• Who can see it
• How long we keep it
• Your choices
• Under 18
• Security
• Changes
• Contact

Apex Georgia is a motorcycle riding community based around Atlanta. This policy covers apexgeorgia.org, including the account, track day registration, waiver signing, and survey tools on it. It does not cover our Discord server, Instagram, or Facebook, which run under those companies' own policies.

The short version: we collect what we need to run track days safely, we never sell it, organizers are the only people who see your details, and you can delete your account yourself.

What we collect

When you create an account

• Email address and name. If you sign in with Discord, Google, or Apple, that provider sends us your email, your display name, your account id with them, and sometimes a profile picture. We do not get your password or access to your account there, and we never post on your behalf.
• Password. If you sign up with email and password, we store a salted hash of the password, never the password itself.

Your rider profile

Before you can register for a track day or open the members page, we ask for:

• Legal first, middle, and last name.
• Phone number and home address.
• An emergency contact: name, phone, and relationship.
• Your email preferences (see Your choices).

Track day registration

• Which day you registered for, when you registered, completed, or cancelled.
• The bikes you plan to bring: year, make, model, and color, up to five.

Signed documents

When you e-sign a waiver or other document on this site we keep a complete record so that it holds up later:

• The full text of the version you signed and a cryptographic hash of it.
• Your typed name, your drawn signature as an image, the boxes you ticked, and the date.
• Your email address, your IP address, and your browser's identifier string.
• If a parent or guardian signs for a rider under 18, or a rider countersigns a passenger's waiver, the same details for that person.

The post-track-day survey

The survey is anonymous. It does not record your account, your name, or your IP address. The only identifying thing it can hold is an email address, and only if you tick "contact me" and type one in.

Automatically

Cloudflare, which hosts the site, keeps standard server logs (IP address, pages requested, browser type, timestamps) for security and to keep the site running. We do not run analytics, advertising pixels, or any third-party tracker.

Cookies

We use two cookies, both set by us and both necessary for the site to work, so there is no cookie banner.

• ag_session keeps you signed in for up to 30 days. It is also readable by our organizers' dashboard at admin.apexgeorgia.org so that admins can sign in there with the same login. It holds a random session id, nothing about you.
• ag_oauth lives for ten minutes while you sign in with Discord, Google, or Apple and protects that sign-in from forgery.

There are no advertising, analytics, or social media cookies. Our fonts load from Google Fonts, so Google's servers see your IP address when a page loads, under Google's privacy policy.

How we use it

• To run your account and keep you signed in.
• To register you for track days, build the rider roster and run groups, and run tech inspection.
• To reach you, or your emergency contact, if something happens at an event.
• To keep the legal records that go with riding on a track: your signed waivers.
• To send email you need: verification and password reset links, your registration confirmation with the schedule and arrival sheets, and changes to a day you are registered for.
• To send organizer news about a day you are registered for and, only if you opt in, occasional email about rides, bike nights, and promotions. Every one of those carries a one-click unsubscribe link.
• To make events better, using what riders say in the survey.
• To keep the site secure and stop abuse.

We do not use your information for advertising, and we do not sell it or rent it to anyone.

Who can see it

• Organizers and admins. People with an admin role see your profile, registrations, bikes, signed documents, and email preferences through this site and our organizers' dashboard. They use it only to run Apex Georgia.
• Other members. Signed-in members see your name in the "Who's going" list for the next track day. Nothing else about you is shown to other members.
• Coaches and track staff. On the day, the people running the event get the roster: name, bike, and run group. Your emergency contact is used only in an emergency.
• Service providers that work for us. Cloudflare hosts the site and database in the United States. Google Workspace sends our email, with Resend as a backup email service. Discord, Google, and Apple handle sign-in and tell us only who you are. Each of these processes data on our behalf and under their own privacy terms.
• When the law requires it. We will disclose information if a court or law requires it, or when we need to establish or defend a legal claim, for example by producing a signed waiver.

How long we keep it

• Account, profile, registrations, and bikes: until you delete your account.
• Sign-in sessions: 30 days. Email verification links expire after 24 hours and password reset links after one hour.
• Signed documents: kept even after you delete your account. They are legal records, and we keep them for as long as a claim about an event could be brought and we might need them to answer it.
• Survey responses: anonymous, kept indefinitely.
• Email we sent you: copies stay in our Google Workspace mailbox.

Your choices

• Edit your profile and email preferences any time at /profile/ and /account/. "Track day news" covers organizer updates about a day you have registered for and is on by default. "Rides, events, and promotions" is off until you turn it on.
• Unsubscribe with the link at the bottom of any opt-in email. Registration confirmations and account email are transactional and always sent.
• See and print your signed documents at /documents/.
• Delete your account at /account/. This removes your account, profile, linked sign-ins, registrations, and bikes right away. Signed documents stay, as explained above.
• Ask us for a copy of what we hold about you, to correct something, or anything else about your information. Email the address below. We honor reasonable requests from anyone, wherever you live, not only where a law makes us.

Under 18

This site is not for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has created an account, email us and we will remove it. Riders under 18 can take part only when a parent or legal guardian signs the waiver with them, and we keep the guardian's signature with the rider's.

Security

The site is served only over HTTPS. Passwords are hashed, session cookies are not readable by scripts, and only organizers can reach rider data. No system is perfect, so keep your password private and tell us right away if you think someone else has used your account.

Changes

When this policy changes we will post the new version here with a new date. If a change affects how we handle your information, we will say so on this page and may email account holders.