1. Who we are
("Circuit Club", "the club", "we", "us") is a motorsport club based in California. We organize and run the Western Touring Car Championship (WTCC), a wheel-to-wheel touring car series, along with its race weekends, driver licensing, technical inspection, results and championship standings, and any track days, time attack, drift and car show programs we run alongside it.
This policy covers wtccracing.org (including the store and checkout), your WTCC account, My Garage, the Garage tool, the Drivers pages and the Autoground app. Race tracks, and partner festivals where a WTCC round runs alongside another event, have their own policies for their gates, tickets and property.
2. The short version
- We collect what it takes to run a race series safely: who you are, your car, your license, your entries and your results.
- We don't sell your information, we don't share it for targeted advertising, and we don't add advertising pixels or analytics tools of our own. Shopify, which hosts the whole site, does collect its own analytics on every page (see section 9).
- Results and entry lists are public, because that's racing. Your contact details, date of birth, emergency contact and medical notes never are.
- Anyone 18 or over with a car in My Garage has a card on the public Drivers page with their name and profile photo, unless they switch on Leave the public Drivers page. Your license headshot becomes your profile photo only if you tick that box on the license form; change or remove it any time in My Garage > Profile.
- You can see, correct, export and delete most of your information yourself, and email us for the rest. The privacy choices page shows you where.
3. What we collect
Your account
- Name, email address and password. We store only a one-way hash of your password, never the password itself.
- Email confirmation codes and password reset links, which expire.
- Sign-in sessions: when they started, and the IP address and browser they came from, so we can spot sign-ins that aren't you.
- Site roles the club gives you (organizer, Motorsport Director, steward, tech, gate and similar), event staff roles you're invited to, and the notification settings you choose.
Your driver details
- Phone number, date of birth, street address, city, state and ZIP, and shirt size.
- An emergency contact (name, phone and relationship), and, for drivers under 18, a parent or guardian's name and phone.
- Optional medical conditions or allergies that safety and medical crews should know about (see section 13).
- Your racing background: experience level, track days, clubs, other competition licenses (numbers optional), helmet certification and driver gear.
- Optional extras: a profile photo, preferred car number, social media handle, how you heard about us, and your transponders.
- Your signed event waiver for each entry: your typed name, your drawn (or typed-name) signature, and, recorded by our server, when you signed, your IP address, your browser and which version of the waiver you signed.
Date of birth, address, emergency contact and medical notes are sensitive. We use them only for age rules, waivers and safety at race weekends, and My Garage keeps them hidden until you confirm your password. A copy of your driver details, including these, is saved with each entry so the officials at that race weekend have what you entered.
Your Circuit Club license
- Your license application and experience answers, the headshot for your license card (uploaded or taken with your webcam), and the Motorsport Director's review notes and decision (Provisional, Accepted or declined).
- Your license class, endorsements, expiry and license number.
Your cars
- Car details: year, make, model, modifications by part type (with any shop, sponsor or affiliate links you add), tires, aero, power and weight figures, dyno sheets, VIN and plate if you add them, and photos, liveries and 3D models.
- Homologation: the rules path you choose for each car (the 2027 GLTC or the 2027 WTCC Class Technical Rules), the competition figures used to check it, your race configurations, and the approval history when an organizer reviews a change.
- Safety equipment and its expiry dates (harness, window net, seat), fire suppression, cage and similar items checked at tech.
- Car numbers, door card and number layouts, transponder numbers, and your tow vehicle and trailer if you add them for paddock planning.
- Tech inspection results, including your season tech pass for each car and any "towed to paddock" re-tech flag.
Photos you add are re-encoded in your browser before they're saved, which removes their location data. Before that, the Garage tool reads only the camera's lens details from the photo, to fit it to the 3D car.
Race weekends
- Entries, classes, crew, add-ons, referral codes you used or shared, and novice drivers meeting requirements for late entries.
- QR codes for your entries, cars, tickets and passes, and a log of when officials scan them at the gate, check-in or tech, with any notes or judging scores they record.
- Session results, lap times, penalties (including transponder penalties) and championship points.
- Steward incident reports, protests you file or that name you, the evidence attached and the stewards' decision.
- Contingency claims, and files you send through Uploads, such as data logs, video and notes.
- Entry transfers: the email of the driver you pass an entry to.
Teams and the cost split
- Team name, logo, members, roles, team cars, team transponders and team entries, and team invites (which include the email of the person invited).
- For race weekends that use the WTCC cost split: which drivers are in the split, the budget, any tickets or add-ons put on your split, and the status and amount of each driver's charge.
- Your WTCC Season Pass: what you paid, which rounds it covers, what it has paid toward and the balance left.
Payments
- What you bought (entries, licenses, protest fees, tickets, passes, merch), the amount, refunds and credits, and the order reference.
- Checkout is run by Shopify, or by Stripe for cost-split entries. For the cost split, your card is saved with Stripe so your share can be charged when the split locks. We never see or store your full card number; we keep only the processor's customer and payment references and the charge status.
- For guest ticket purchases: your name and email, and business details if you buy a vendor space.
Technical information
- Our server uses the IP address and browser of requests to keep the service secure and to limit abuse, such as repeated sign-in attempts.
- When someone opens a Drivers page or follows or saves a part link on it, we count it for that driver's own statistics. A visitor who isn't signed in is counted by a one-way code made from their IP address, browser and the day, so we can count each visitor once a day without keeping the address itself.
- When you add a part link, our server visits that page to read its title, description and picture, and keeps that for a week.
- We don't add advertising pixels or analytics tools of our own. Shopify hosts every page of this site, not just the store, and collects its own visit and store analytics on each one (see section 8).
Where it comes from
- You: almost everything above.
- Officials and organizers: tech results, check-ins, judging, incident reports, penalties, license decisions and results.
- Other people: a team captain or registrar who adds you to a team or enters you, a driver who invites you, transfers an entry to you or names you in a protest, and an organizer who gives you a staff role.
- Timing providers: session results and lap times.
- Payment processors: whether a payment, charge or refund went through.
- Instagram: posts that tag us or use our hashtags, which we review before showing any.
4. How we use it
- To run the championship: entry lists, classes, car numbers, homologation checks, tech, check-in, timing, results, points and standings.
- To keep everyone safe: emergency contacts and medical notes go to safety and medical crews at race weekends you enter, and your date of birth applies the age rules.
- To license drivers and to check that each car meets the rules path it was homologated under.
- To officiate: steward incident reports, protests, penalties and appeals under the rules.
- To take payments, send receipts, issue refunds and credits, and charge the cost split you agreed to.
- To run your account: sign-in, codes, password resets, and the alerts you switch on, such as entry decisions, your season tech pass ("no need to come to tech") and schedule changes.
- To help you finish registering: organizers see how far each account has got (signed up, details, car, license, entry) so they can contact drivers who look stuck.
- To show the Drivers pages, and give each driver the visit and link statistics for their own page.
- To keep the site secure and prevent fraud.
- To meet legal duties such as tax records, insurance and waivers.
We send only the emails you'd expect: codes, receipts, entry and account emails, and the alerts you've switched on. Club news and club-wide alerts by email are off unless you switch them on in notification settings, and you can switch them off there at any time. We don't sell or rent email addresses, and we don't send text messages.
5. What other people see
Racing is public by nature. Anyone visiting the site or the Autoground app can see:
- Entry lists: your first and last name, car, car number, class and team for race weekends you've entered and paid for, including the car's claimed figures (power-to-weight, tires, aero) and its dyno-sheet status for WTCC entries.
- Results, penalties, championship standings and track records.
- Public car pages: number, your name, team, specs, tech sticker and race history.
- Your Drivers page. Everyone 18 or over with a car in My Garage is on it, unless they switch on Leave the public Drivers page in My Garage > Profile. Drivers under 18 are never on it. It shows your name, profile photo, team, car number, the race weekends you've entered, a Licensed (or Licensed (provisional)) badge if you hold a Circuit Club license, your city and state (switch them off with Show my city and state; your street address is never shown), and your cars with their specs, installed parts and part links, photos, liveries and 3D models. If you made a page in the old Driver Studio, what you published there (nickname, bio, Instagram handle, partners) still shows.
- Go private: your Drivers page then shows only your name, profile photo, team, city and state (unless switched off), how many cars you have, and what you published on an old Driver Studio page, with none of your cars.
- QR passes: scanning your driver or car pass shows your first name and last initial, and your car and its scored mods.
- Club photos and our Instagram gallery, which shows only posts we've reviewed and approved. If you're in one and want it removed, email us.
Your license class, endorsements, expiry and license number, and the license itself, are never public. Your email, phone, address, date of birth, emergency contact, medical notes and payment details are never public.
6. What officials see
Club officials see what their job needs:
- Site administrators can see account and entry records, including the driver details saved with each entry (contact details, emergency contact and guardian), to support you, run race weekends and keep the site running. They can export the entry roster. The entry roster leaves out your date of birth, home address and medical notes.
- Site organizers: entries and registration progress across race weekends, payments, refunds, cost splits, Season Passes and homologation approvals.
- Motorsport Director: license applications, headshots and decisions.
- Event organizers and organizing staff, for the race weekends they run: entries, crew, check-in, tech progress, car show applications and the cost split.
- Stewards: incident reports, protests and the evidence filed with them.
- Tech officials: your car, its safety equipment, homologation and tech history.
- Gate and check-in: your name, entry and pass status when they scan your QR code; staff who scan a car pass also see its full name, costs, notes and scan history.
- Medical and safety crews: your emergency contact and medical notes, for race weekends you enter.
- Team captains and registrars: the team's members, cars and team entries.
7. The Autoground app
The Autoground app is another way into the same WTCC data. Signing in to the app with your confirmed wtccracing.org email and password links an Autoground account to your WTCC account, and the app reads and writes the same events, staff roles, check-ins and car show data. Cars, mods, photos and scores you add in the app are kept in the app's own records on our server. This policy covers both.
10. How long we keep it
- Your account, profile, cars, garage, photos, licenses, entries and tech records: until you delete your account or ask us to delete them.
- Medical notes and emergency contacts: in your profile until you clear them or delete your account. The copies saved with each entry (medical notes, emergency contact and guardian phone) are removed automatically 30 days after that race weekend.
- Signed waivers, incident reports and protests: we keep these, even after you delete your account (signed waivers for paid entries are moved to a separate archive when you delete it), for as long as needed for insurance and legal claims, typically several years after the race weekend.
- Payment records (orders, charges, refunds, credits, Season Passes and entry transfers): as long as tax and accounting law requires, even after you delete your account.
- Results, standings and track records: kept as part of the championship's history.
- Sign-in sessions: a session lasts up to 30 days. Its record (time, IP address and browser) is removed when you sign out, change your password or delete your account, and expired sessions are deleted automatically. Email codes and reset links expire after 30 minutes to 24 hours.
- Visit and link counts: until the driver they belong to deletes their account. Part link previews: one week.
- Backups: deleted information can stay in our nightly backups until they're replaced, normally within 30 days.
11. Your choices & rights
- See and correct: your profile, cars, licenses and entries can be edited in My Garage.
- Control what's public: Go private, Show my city and state, Leave the public Drivers page, and your profile photo are on the Profile tab.
- Download: Export my data on the Profile tab saves a copy of your profile, garage, entries, orders, licenses, car numbers and tow rig. For a complete copy of everything we hold about you, email us.
- Delete: Delete my account on the Profile tab removes your account, profile, cars and their photos, garage, entries, licenses, tech records, numbers, team memberships and alert settings. It also removes your linked Autoground app account with its cars and photos, files you sent through Uploads, any card saved with Stripe for a cost split, pages made in the old Driver Studio, and staff roles and team invites sent to your email. Records we keep for the reasons in section 10 stay, including your signed waivers and payment records.
- Emails and alerts: choose what you get in notification settings. Sign-in codes, receipts and charge emails can't be switched off.
- Anything else: email . We reply within 30 days at the latest (45 for California requests, see below) and may need to confirm it's you first.
All of these are gathered on one page: Your privacy choices.
12. California residents
Whether or not the California Consumer Privacy Act (as amended by the CPRA) applies to a club of our size, we give California residents its rights:
- Know: what personal information we collect, use and disclose, and a copy of it.
- Delete it, and correct it if it's wrong.
- Opt out of its sale or sharing, and limit how sensitive information is used.
- Not be treated differently for using any of these rights.
What we collect, and why. In the law's categories, in the past 12 months we've collected: identifiers (name, email, address, IP address, account and order numbers); customer records (phone, emergency contact, payment references); characteristics such as age (date of birth); commercial information (purchases, entries, passes); internet activity (sign-in sessions, page visits counted for drivers); audio-visual information (photos, headshots, signatures, videos you upload); professional or similar information (racing background and licenses); and the sensitive information below. The sources are in section 3, the purposes in section 4, how long we keep each in section 10, and the categories of people we disclose each to (host tracks, insurers, sanctioning bodies, contingency sponsors and service providers) in section 8.
Sensitive information: your account password, date of birth, medical notes, license headshot and other license details. We use it only to provide the services you ask for, run race weekends safely and keep accounts secure, which the law allows without an opt-out, so there's nothing to limit.
No sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising, and have not done so in the past 12 months. That includes the information of anyone under 16. We don't disclose personal information to others for their own direct marketing.
How to make a request. Use the controls in My Garage, or email from the address on your account. We confirm we've received a request within 10 business days and answer within 45 days (we may extend that once by another 45 days and will tell you why). To protect you, we check it's you by your signed-in account or by a code sent to your account email, and we may ask for more for a request about sensitive information. An authorized agent can make a request for you with your signed permission; we may ask you to confirm your identity with us directly.
13. Health information
Medical conditions and allergies you choose to enter are health information. You don't have to give any; entering them is your consent to the following:
- Why: only so medical and safety crews can look after you at race weekends you enter.
- Who sees it: we keep it to pass on to the medical and safety crews at those race weekends and the host track's medical staff. Site administrators can access it to do that; it isn't included in the entry roster. It's never public and never sold.
- Your control: edit or clear it any time in My Garage. Clearing it, or unticking the consent box, withdraws your consent for the future. The copies saved with your entries are removed 30 days after each race weekend; to remove them sooner, email us.
Residents of Washington (My Health My Data Act), Nevada and other states with health privacy laws can ask us to confirm whether we hold their health information, to see it, to delete it and to withdraw consent, by emailing . We'll answer within 45 days.
14. Age & minors
- You must be at least 13 to make an account. The site isn't meant for children under 13 and we don't knowingly collect their information. If we learn we have, we delete it. If you think a child under 13 has given us information, email us.
- WTCC racing, Time Attack and Drift drivers must be 18 or older on the first day of the race weekend, and we use your date of birth to check that.
- When we run Track Days, drivers aged 16 and 17 may enter them, with a parent or guardian's name and phone on the entry, and the parent or guardian signs the waivers in person at the event.
- Spectator tickets have no age limit unless the race weekend says otherwise.
- We never sell or share the information of anyone under 18.
- Drivers under 18 are kept off the Drivers page, and public entry lists and live timing show them by first name and last initial only. A parent or guardian can ask us to take a minor's Drivers page card, photo or any other information off the site, and a California resident under 18 can ask us to remove anything they posted. Email . Removing it from public view doesn't always remove every copy (for example, entry and payment records we must keep).
15. Security
The site, the app and our server use HTTPS. Passwords are hashed, sessions are random and expire, sign-in attempts are rate-limited, and sensitive profile fields stay hidden in My Garage until you confirm your password. License headshots are shown only on the license, and as your profile photo only if you chose that on the license form (until you change it). No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.
16. Changes
We'll update this page when what we collect or how we use it changes, and change the date at the top. For significant changes, we'll also tell signed-in drivers by email or a site notice before they take effect.
17. Contact us
Organizer of the Western Touring Car Championship
Email:
For privacy requests, write "Privacy request" in the subject line.