Privacy Policy
Effective from 26 October 2026
This policy explains what personal data bar and the website clearthe.bar process, why, and what your rights are. It follows the General Data Protection Regulation (GDPR) and the Latvian Personal Data Processing Law.
1. Who is responsible
1.1. For account, website and customer data the controller is Edgars Zakalovskis, Rīga, Latvia, just@clearthe.bar.
1.2. For rider and judge data in contests the controller is the organiser who runs the contest in bar. We process that data only on the organiser’s behalf, as a processor (section 7 of the Software Licence Agreement). Questions about a rider’s or judge’s data in a contest go to the organiser first; we will help them answer.
2. What we process
| Data | What | Why | Legal basis (Art. 6 GDPR) | How long |
|---|---|---|---|---|
| Account | Name or club, e-mail, password (stored only as a one-way hash), public page address, settings, two-step sign-in secret if turned on | Signing in, confirming your e-mail address, password reset, running your contests, contacting you about your account | Contract (b) | Until the account is deleted |
| Sign-in and security log | Time, e-mail, IP address, browser and device type, success or failure | Protecting accounts, stopping misuse, answering support requests | Legitimate interests (f) | 12 months |
| Contests (on behalf of the organiser) | Contest name, date and venue; riders’ names, start numbers, team or club and outside ranking as entered by the organiser; judges’ names; scores, trick names and the change log | Scoring the contest and showing results to the people the organiser chooses | Decided by the organiser (usually contract or legitimate interests) | Until the organiser deletes the contest or the account |
| Licences and requests | Organisation, licence type, dates, requests for permission and our decisions | Issuing and checking licences | Contract (b) | Licence term + 3 years |
| Website visits | Page visited, the site you came from, the tag in the link you used (e.g. ?ref=…), device type (phone, tablet, computer), browser and operating system, browser language, country and clicks on the main buttons, counted as daily totals. The country is looked up on our own server from the IP address in a local copy of the free DB-IP database (IP Geolocation by DB-IP); the address is not sent anywhere and not stored. To count each visitor once a day, a one-way code is made from the IP address, the browser and a random value that changes every day; the code and the random value are deleted after that day. No cookies, nothing stored in your browser; visits with “Do Not Track” turned on are not counted | Knowing how many people visit the website and where they come from | Legitimate interests (f) | Daily codes: until the end of the day; totals: 13 months |
| Contact form | Name, e-mail, organisation (optional), topic, message | Replying, and preparing an offer if you ask for one | Pre-contractual steps (b) | 12 months if no contract follows |
| Customers and invoices | Organisation, billing details, contact person, e-mail, invoices, payments | Performing the contract, accounting | Contract (b), legal obligation (c) | Contract term; accounting records 5 years |
| Support | E-mails and files you send | Solving the issue | Contract (b) | E-mails 2 years; contest files deleted once the issue is solved |
3. Riders, judges and minors
3.1. Rider and judge data is entered by the organiser, not by us. The organiser must tell riders, judges and, for minors, parents or guardians in the entry form or event rules that bar is used to score the contest and publish results.
3.2. bar asks for no dates of birth, addresses or contact details of riders or judges. Organisers should enter only what the contest needs. A short name (for example “J. Bērziņš”), a nickname or a start number is enough to run a contest, and is recommended for minors.
3.3. Judges do not need an account. Their personal link gives access only to their own scoring screen.
3.4. Who can see a contest is set by the organiser: private (organiser and helpers), anyone with the link, or public on the organiser’s page. Public results show riders’ names, heats and scores, not start numbers, teams or rankings.
4. Who we share data with
| Recipient | Role | Where |
|---|---|---|
| Render Services, Inc. | Hosting of bar and the website (sub-processor for contest data) | Servers in Frankfurt, Germany (EU) |
| Resend | Sends account e-mails: address confirmation and password reset links | See section 5 |
| Web3Forms | Forwards the website contact form to our e-mail | See section 5 |
| Telegram | Delivers notifications to our own Telegram account: contact form messages, requests for access, new accounts and locked sign-ins (name, e-mail, organisation, message), and our encrypted daily backup | See section 5 |
| Google (Gmail) | Our e-mail | See section 5 |
| Google Fonts | Delivers the website fonts; sees your IP address | See section 5 |
| Accountant, bank, authorities | Invoicing, and where the law requires it | Latvia |
The people the organiser gives access to (helpers, judges, viewers) see contest data according to the organiser’s settings. We do not sell personal data or use it for advertising. bar has no ad tracking and no third-party analytics; website visits are only counted as daily totals, without cookies (section 2).
5. Transfers outside the EU/EEA
Contest data is stored in the EU. Some providers above are US companies and may process data in the United States; Telegram (Telegram Messenger Inc.) may process data outside the EU too. Where that happens, transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses (Art. 46 GDPR).
6. Security
Connections are encrypted (HTTPS). Passwords are stored only as salted hashes. Sign-in is locked after repeated wrong passwords, two-step sign-in is available, and every administrator access to an organiser’s contest is logged. Only Edgars Zakalovskis has administrator access.
7. Your rights
You have the right to access, rectify or erase your data, to restrict or object to processing, and to receive your data in a portable format. Send requests to just@clearthe.bar; we reply within 1 month. You can change your name and password in bar yourself. For rider or judge data in a contest, contact the organiser of that contest; we pass on requests we receive.
You may lodge a complaint with the Latvian Data State Inspectorate (www.dvi.gov.lv), Elijas iela 17, Riga, LV-1050, or with the supervisory authority in your country.
8. Changes
The current version is always on this page. For important changes we tell account holders by e-mail or in bar.