Privacy Policy

Scope

This policy explains how the R2–D2 Discord application and the International Motorsport Series website at ims-league.com (together, the Service) process information. The Service is operated for IMS League by the IMS bot maintainers (IMS, we, us, or our).

Information we process

Discord sign-in

If you choose to sign in on the website, we request only Discord's basic identify permission. Discord provides your user ID, username, global display name, and avatar information. We use your Discord ID to match your account to an IMS driver record and show your personal statistics. When you are signed in, we also use a protected hashed account key to associate website usage with your member account.

We do not request your email address, friends list, servers, or message history through website sign-in. The short-lived Discord access token used to complete sign-in is not retained after your identity is confirmed.

Bot and league activity

When you interact with R2–D2 in Discord, we may process your Discord user ID, server and channel IDs, username or display name, roles, avatar, command inputs, interaction responses, poll votes, and associated message IDs. We also process IMS racing records linked to a driver alias or Discord account, including participation, team or division assignments, results, standings, statistics, penalties, contracts, awards, and other league records.

R2–D2 uses Discord only to provide its league features and to connect your Discord account to the correct IMS driver profile. The website does not read or collect the content of your Discord conversations.

Website and technical information

Guests can browse without a Discord account. A guest-choice flag is stored only in the browser session. Our hosting and security providers may process ordinary request information such as IP address, browser type, device information, timestamps, requested pages, and diagnostic logs.

For signed-in visitors, IMS keeps first-party usage records including access times, session and page-view counts, approximate active time, and the website section last used. Hidden tabs and tabs idle for more than five minutes do not add active time. This information is available only to authorised site administrators and does not include the content of form fields, Discord messages, IP-based profiles, or device fingerprints.

For every visitor, the site may measure LCP, INP, and CLS to understand page speed and stability. The browser sends only the metric's fixed performance bucket, a normalized page template, mobile or desktop class, and a timestamp. IMS stores daily aggregate counts only. These aggregates contain no account, cookie, IP address, user agent, page slug, or device identifier.

How we use information

We process information to:

• respond to commands and provide requested league tools;
• authenticate website users and match them to the correct IMS driver profile;
• calculate, maintain, and display results, standings, records, statistics, ratings, polls, and historical comparisons;
• provide authorised league-management and administration features;
• understand authenticated member usage and maintain the website;
• secure the Service, enforce permissions, prevent abuse, diagnose faults, and improve reliability; and
• comply with applicable legal obligations and Discord policies.

Depending on applicable law and the context, this processing is based on providing the Service you request, your consent, IMS's legitimate interest in operating the league, and compliance with legal obligations.

Cookies and session storage

Discord sign-in uses a protected state cookie for up to ten minutes to prevent login forgery. After sign-in, a signed, HTTP-only session cookie stores your Discord ID, username, display name, avatar URL, and expiry time for up to seven days. The cookie cannot be read by normal page scripts and is deleted when you sign out.

Guest mode uses browser session storage and normally disappears when that browsing session ends. We do not currently use advertising cookies or third-party behavioural analytics on the website.

Sharing

We do not sell personal information or Discord API data. Information may be processed by Discord, website hosting and infrastructure providers, and service providers acting for us where needed to operate or secure the Service. We may also disclose information when required by law, to protect rights or safety, or at your direction.

League results, standings, driver aliases, avatars, awards, statistics, and current contract terms and status may be visible to IMS members or public website visitors as part of the league record.

Retention

Website login sessions expire after seven days. OAuth state expires after ten minutes. Temporary technical records are kept only for as long as reasonably needed to operate, secure, and troubleshoot the Service.

Identified website usage summaries are retained on a rolling 90-day basis. The limited recent-activity entries used by the live Admin view are retained for up to 30 days. Older records are deleted automatically.

Anonymous Web Vitals histogram counts are retained for 90 days and then deleted automatically.

Core league records may be retained as part of IMS's historical sporting archive. When an account link is no longer needed, we will delete or de-identify Discord API data unless retention is required by law or necessary to preserve legitimate league records. Where a historical result must remain accurate, we may retain the sporting record under a driver alias while removing the direct Discord account link where reasonably possible.

Security

We use access controls, restricted command permissions, signed sessions, protected cookies, hashed account matching, and other reasonable safeguards. No system is perfectly secure, so we cannot guarantee absolute security.

Your choices and requests

You may use the website as a guest, decline Discord authorisation, or sign out at any time. You may ask what personal information R2–D2 associates with you, request a correction, object to certain processing, or request deletion of your Discord-linked data.

Submit a request to an IMS League administrator through the official IMS Discord server. Include your Discord username and enough information to verify the relevant account. We may need to retain limited information where required by law, needed to resolve disputes or security issues, or necessary to preserve an accurate historical league record.

Children

The Service is not directed to children under 13. You must also meet Discord's minimum age requirement for your country. If you believe a child has provided information contrary to these requirements, contact an IMS administrator.

International use

IMS members may access the Service from different countries. Information may therefore be processed in countries other than your own, subject to the safeguards required by applicable law.

Discord and other services

Discord handles information under its own Privacy Policy. Links or integrations with third-party services are also governed by those services' policies. We are not responsible for their independent privacy practices.

Changes and contact

We may update this policy when the Service or legal requirements change. The effective date above will be revised when we do.

For privacy questions or requests, contact an IMS League administrator through the official IMS Discord server.