Privacy policy

You do not need to submit contact information to browse this site. If you vote or join race alerts, we collect the information you provide and relevant consent and security records. The site also processes technical information and aggregate analytics as explained below. A voting contact is used to verify a vote; the separate race-alert list is used for the messages you request. We do not sell your information.

To keep the fan vote to one vote per person for each race, we ask for one phone number or email address and send a one-time code to it. Codes are sent by our messaging provider, Twilio.

When you confirm a vote we store:

• a one-way, keyed fingerprint of your number or email, used to recognize a repeat voter without keeping it in readable form;
• an encrypted copy of your number or email;
• which driver you voted for, and when;
• a record of each permission you gave — the exact wording you saw, the time, your IP address, and your browser type — because the law requires us to be able to show it;
• scrambled (hashed) versions of your IP address and device details, used only to catch vote fraud.

The code we send to confirm your vote is not marketing. We send race news — race nights, schedule changes, rainouts — only if you check the separate, optional box that asks for it. Saying no never affects your vote.

You can stop marketing texts at any time by replying STOP, or by emailing greg@cordelemotorspeedway.com. Message and data rates may apply.

If you sign up on our race alerts page, we ask for your name, email address and mobile number and give you a ticket savings code when one is available under the published offer terms. Email delivery can be delayed or unavailable. This is a separate list from the fan vote: we never move voters into it, and your vote does not depend on it.

When you sign up we store:

• a one-way, keyed fingerprint of your number and email, used to recognize a repeat sign-up;
• an encrypted copy of your name, number and email, so we can send you the messages you asked for;
• the savings code we gave you, and whether it was used;
• a record of each permission you gave: the exact wording you saw, the time, your IP address, and your browser type, because the law requires us to be able to show it;
• which recognized campaign or link brought you to the page, if any;
• provider contact identifiers, sync status and error categories needed to operate the messaging connection;
• a keyed fingerprint used to remember a text opt-out, including an opt-out received from the messaging provider.

Under the proposed offer, checking the text-message box is required to receive the savings code. The offer and consent structure still need approval. It is never required to buy a ticket: you can always buy at full price without signing up. You can stop texts at any time by replying STOP or by contacting the track. Email has a separate unsubscribe link. Tell us if you want both channels stopped. A repeat form submission does not change your existing contact details or restore revoked consent. See our text alerts terms.

We do not sell or rent your information. We do not share mobile information with third parties or affiliates for their own marketing or promotional purposes, including text-message opt-in data and consent. Providers may process necessary information on our behalf to host the site, store records, deliver communications, maintain opt-outs and meet legal obligations. Vote totals are public; who voted is not.

• SlickText is the planned race-alert text provider. When approved and connected, it receives name and mobile number, and email only while email permission is active. The connection also exchanges contact identifiers and opt-out status.
• Resend is the configured code-email provider when email sending is enabled; it receives the recipient email, code, message content and unsubscribe links.
• Twilio provides voting verification and supports the existing text-keyword endpoint. The SlickText connection does not copy voting contacts.
• Vercel hosts the planned deployment and analytics; the configured database provider stores application records. Production account configuration still requires approval.
• Trackside processes ticket orders on its own checkout. Signup does not place an order or give us your payment-card details. Coupon reconciliation reads coupon, order reference and date from an authorized order export; it ignores buyer names, emails and phones.

These services have their own privacy notices. The track's obligations to you are not replaced by a provider's policy. We may also disclose information when required by law.

Recoverable race-alert names, numbers and emails are encrypted in the application database. They must be decrypted when needed for an approved messaging service; this is not a promise that providers receive encrypted-only contact details. Access to contact and consent records is restricted. No system can guarantee absolute security.

Opting out stops the relevant marketing permission; it does not automatically erase the contact, past consent evidence or the records needed to keep you opted out. We retain records needed to operate the program, document permissions, honor opt-outs and meet applicable obligations. You can request access, correction or deletion by contacting the track. Requests are handled by staff, may require appropriate identity verification, and may be subject to legal recordkeeping exceptions. There is no self-service account or deletion button for this list.

This site does not use advertising cookies or tracking pixels. Links to our ticketing, MyRacePass, and Facebook pages take you to those services, which have their own privacy policies.

We count visits with Vercel Web Analytics so we know which pages fans use. It does not use third-party cookies. A visitor is recognized only by a hash of the incoming request, which is discarded after 24 hours, and the data is anonymous: it is not tied to you or your IP address and is used only for aggregate statistics such as page views. We also count clicks to Trackside ticketing by page, button placement, event destination and recognized campaign labels. These are website clicks, not confirmed ticket purchases. We omit query strings, fragments, unrecognized campaign values and personal identifiers from these analytics events. Campaign labels may stay in this tab's session storage for up to 30 minutes so they survive page changes; we do not set an attribution cookie or assign a visitor identifier. A savings-code confirmation may also be stored in this browser tab for up to 30 minutes so it remains available after a refresh; the confirmation does not store your name, email or phone number. We honor browser Do Not Track and Global Privacy Control signals for this analytics collection.

The fan vote is not directed to children under 13, and we do not knowingly collect their information.

To ask what we hold about you, request a correction or deletion, or withdraw permission, email greg@cordelemotorspeedway.com.