Privacy Policy

1. Introduction

Welcome to F1 Daily Brief ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit f1dailybrief.com. Please read this policy carefully. By using the Service, you acknowledge the practices described here.

We use third-party services including Google Analytics, Substack, and affiliate partners that may process information when you interact with analytics, newsletter, advertising, or shopping features. This policy describes what is collected, why, and your choices.

2. Data Controller

F1 Daily Brief operates this website. For purposes of EU data protection law, we are the data controller for personally identifiable information collected directly through this site. Google LLC acts as a separate data controller (and in some cases, data processor on our behalf) for data collected via Google Analytics. Substack and affiliate retailers or networks act under their own privacy policies when you subscribe, click an outbound affiliate link, or complete a purchase on their sites.

3. Information We Collect

3.1 Information Collected Automatically

When you visit our website, certain information is collected automatically:

• IP address (used to determine approximate geographic region; anonymised in analytics)
• Browser type and version
• Operating system
• Pages visited, time on page, and navigation paths
• Referring website address
• Device type (desktop, mobile, tablet)
• Date and time of visit
• Consent choice stored in your browser when you accept or decline optional services
• Affiliate redirect metadata such as destination host, page, placement, label, and timestamp when you click a monetized outbound link

Some of this information is collected by Google Analytics after you grant consent. Affiliate redirect metadata is processed by our own redirect endpoint before sending you to the external retailer or affiliate network. See Section 6 for cookie and local storage details.

3.2 Information You Provide Voluntarily

If you subscribe to the newsletter, the email address you enter is submitted directly to Substack along with the page URL and referrer that Substack requests for subscription processing. We store only a local browser flag so the signup form can stay hidden after a successful subscription. Substack's own privacy policy applies to newsletter processing.

3.3 Information We Do NOT Collect

F1 Daily Brief itself does not collect or store:

• Account credentials (we have no user accounts)
• Payment information or purchase details from affiliate retailers
• User-generated content or comments
• Sensitive personal information as defined by privacy laws

4. How We Use Your Information

4.1 Analytics

We use Google Analytics 4 to understand how visitors interact with our site so we can improve content and performance. The data is aggregated and used to:

• Measure page popularity and traffic sources
• Identify technical issues affecting user experience
• Optimise website performance and content

Legal basis (EU/GDPR): Legitimate interests (Article 6(1)(f)) — improving the quality and performance of our free service. Where required by applicable law (e.g. ePrivacy Directive), we obtain consent before placing analytics cookies.

We provide an on-site consent prompt so you can accept or decline analytics cookies before those services are enabled.

4.2 Affiliate Links, Advertising, and Sponsorship

We use affiliate links, sponsorship placements, and related click redirects to support the free site. When you click a monetized link, we may record limited non-payment metadata such as the page, placement, destination host, and timestamp so we can measure link performance and prevent abuse. The destination retailer or affiliate network may process additional information under its own privacy policy.

Legal basis (EU/GDPR): Legitimate interests (Article 6(1)(f)) in operating, measuring, and funding the Service. Where consent is required for advertising storage or personalization, we request it through the on-site consent prompt.

5. Third-Party Content and Data Sources

5.1 F1 Data APIs

We use the following data sources for Formula 1 statistics and media — these are server-side requests and do not collect your personal data:

• Jolpica F1 API (Ergast) — Historical race data and standings
• OpenF1 API — Circuit images and current season data
• FastF1 Python Library — Detailed race timing data
• Formula1.com Media CDN — Official team logos and driver images

5.2 News Sources

We aggregate headlines from public RSS feeds (Motorsport.com, Autosport, RaceFans.net, The Race, Formula1.com, F1Technical.net). Clicking a headline takes you to the publisher's website, where that site's own privacy policy applies.

5.3 Google Services

We use the following Google services that may collect data about you:

• Google Analytics 4 — Website analytics. Google's privacy policy: policies.google.com/privacy. Opt-out: Google Analytics Opt-out Browser Add-on.
• Google Consent Mode — Communicates your consent choice for analytics and advertising storage when Google tags are enabled.

5.4 Newsletter, Affiliate, and Retail Partners

Newsletter signups are processed by Substack. Affiliate and shopping links may route through Amazon or other disclosed retail partners. We do not receive your payment details or retailer account information. If you complete a purchase or subscribe on a third-party site, that site's terms and privacy policy apply.

6. Cookies and Tracking Technologies

Cookies are small text files stored on your device. We and our third-party partners use cookies for the following purposes:

Managing Cookies

You can control cookies through:

• Browser settings — Most browsers let you block or delete cookies. Note that blocking all cookies may affect site functionality.
• Google Analytics opt-out — Install the browser add-on
• Industry opt-out tools — Your Online Choices (EU) or NAI Opt-Out (US)
• Affiliate transparency — We describe affiliate link behavior and labeling in our Affiliate Disclosure.

7. Data Storage and Retention

F1 Daily Brief temporarily caches news content from RSS feeds (up to 5 minutes) and F1 statistical data on our servers. This cached data contains only article metadata and F1 statistics — no personal user data is stored on our own servers.

Analytics data collected by Google is retained for 14 months by default in Google Analytics 4 (as configured by us). Affiliate click metadata is kept in short operational logs or in-memory aggregates used for reporting and abuse prevention. Newsletter subscription records are maintained by Substack under Substack's retention practices.

8. Your Rights

8.1 EU / EEA Residents — GDPR Rights

Under the GDPR you have the following rights in relation to your personal data:

• Right to access — Request a copy of the personal data we hold about you
• Right to rectification — Request correction of inaccurate data
• Right to erasure ("right to be forgotten") — Request deletion of your data
• Right to restrict processing — Request that we limit how we use your data
• Right to data portability — Receive your data in a structured, machine-readable format
• Right to object — Object to processing based on legitimate interests
• Right to withdraw consent — Where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint — You may complain to your local data protection authority (e.g. the ICO in the UK, or your EU member state's DPA)

Because the most identifiable newsletter, analytics, and purchase-related data is handled by third-party providers, some rights may be most effectively exercised directly with Google, Substack, or the relevant retailer/affiliate network. For analytics data, use the Google Analytics opt-out add-on.

8.2 All Users

All visitors can manage cookies and analytics tracking as described in Section 6. You are free to use the site with cookies disabled, though some features may be affected.

9. International Data Transfers

F1 Daily Brief is operated from Canada. Data collected via Google Analytics is processed by Google LLC in the United States. Newsletter data submitted to Substack and information processed by affiliate or retail partners may also be processed outside your country of residence. Google relies on Standard Contractual Clauses (SCCs) and other approved mechanisms to transfer data from the EU/EEA to the US in compliance with GDPR Chapter V.

10. Children's Privacy

Our website is intended for general audiences. We do not knowingly collect personal information from children under 13 (or under 16 in the EU). If you believe a child has provided personal information through our site, please contact us so we can take appropriate steps.

10b. California Residents — CCPA / CPRA

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to know — Request disclosure of the categories and specific pieces of personal information we (or our service providers) have collected about you
• Right to delete — Request deletion of your personal information, subject to certain exceptions
• Right to opt out of "sale" or "sharing" — We do not sell personal information for money. Some affiliate or advertising technologies may be considered "sharing" under California law, and you can decline optional analytics/advertising storage through the consent banner or browser settings.
• Right to non-discrimination — We will not discriminate against you for exercising your CCPA rights
• Right to correct — Request correction of inaccurate personal information we hold about you
• Right to limit use of sensitive personal information — We do not collect sensitive personal information as defined under CPRA

Categories of personal information collected (via third-party services): Identifiers (IP address, cookie IDs, device identifiers); internet or other electronic network activity (pages visited and usage patterns for analytics); commercial information or inferences limited to affiliate click metadata such as page, placement, label, destination host, and timestamp.

Categories of third parties with whom data is shared: Google LLC (Analytics), Substack (newsletter), and affiliate or retail partners such as Amazon when you click outbound monetized links.

To exercise your CCPA rights, please contact us using the details in Section 12 or use the opt-out tools linked above. We will respond within 45 days as required by law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact F1 Daily Brief. We will respond within 30 days (or within the timeframe required by applicable law).