Simracing Centre ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy describes how the Simracing Centre Auto Setup Installer application ("the application") handles Google User Data in compliance with Google API Services User Data Policy.  

1. What Google User Data Does the Application Access? 

The application logs users into their Google account to verify access to the SRC Setup Drive. It uses the following Google Drive API scopes:  

- `DriveService.Scope.DriveFile`  

- `DriveService.Scope.DriveReadonly`  

No other Google User Data is accessed. The application confirms whether the logged-in account has access to the SRC Setup Drive and lists folders that the account has been granted access to by Simracing Centre. 

2. How Does the Application Use Google User Data?

The application uses Google User Data solely to:  

- Verify the user’s account and ensure it has access to the SRC Setup Drive.  
- Display folders and files from the SRC Setup Drive that are accessible to the user.  

No other Google User Data is collected, used, or processed. 

3. Who Do We Share, Transfer, or Disclose Google User Data With?

Simracing Centre does not share, transfer, or disclose Google User Data to any third party.

4. Protection Mechanisms for Sensitive Data

We take the protection of sensitive data seriously. The following mechanisms are in place to ensure security:  

- AES 256-bit Encryption: The client secret is encrypted using a 32-character AES 256-bit key.  
- DPAPI Encryption: The token is encrypted using the Data Protection API (DPAPI) for the current user, ensuring that only the logged-in user can decrypt it.  

Additionally, the token is stored locally on the user’s device and is never transmitted to Simracing Centre’s servers.  

5. Retention and Deletion of Google User Data 

- Token Expiry: Google automatically expires the user token after approximately one hour.  
- Token Renewal: If the user logs in within seven days of their last login, the token will renew.  
- Token Deletion:  
- The token is deleted immediately if the user logs out.  
- After seven days of inactivity, the user will need to log in again.  

All tokens are stored locally and are never retained or stored by Simracing Centre.

6. User Rights 

Users have the following rights:  

- Access and Deletion: You may request the deletion of your data, including any tokens, by contacting us.  
- Contact Information: For inquiries or requests regarding your data, please contact us at:  
 - Email: info@simracing-centre.com  
 - Address: Violenstraat 44, 1602 XW Enkhuizen, Netherlands 

7. Business Jurisdiction  

Simracing Centre is located in the Netherlands and operates in compliance with applicable Dutch and European privacy laws.  

8. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. Updates will be posted on our website.  

——

If you have any questions about this Privacy Policy or the Simracing Centre Auto Setup Installer, feel free to reach out to us.  

Contact Information:

- Email: info@simracing-centre.com  
- Address: Violenstraat 44, 1602 XW Enkhuizen, Netherlands