Privacy Policy

The Gran Turismo Media Hub provides authorised media and partners with access to official photography, video and game captures from the Gran Turismo World Series. This policy explains what information we collect and how we use it.

When you register we ask for your name, company and email address. That's it.

We also store basic account data — your role and login timestamps — to manage access. We don't collect payment details, precise location, or any data from under-18s.

• To verify your identity and approve access to media content.
• To send you updates about new content — only if you haven't opted out.
• To keep the platform secure through access logs.

We only use essential cookies — a session cookie to keep you signed in, a short-lived cache cookie for performance, and a share-session cookie if you access content via a shared link. No advertising or analytics cookies.

Your data is stored with Supabase (database & auth). We use Resend for transactional emails and Dropbox for media file delivery. We don't sell or share your information with anyone else.

All data is encrypted in transit and at rest. Passwords are hashed. Access is controlled through role-based permissions. Your data may be processed in the US or EU where our infrastructure is hosted.

Active accounts are kept for as long as you use the platform. Pending registrations are removed after 12 months. Expired invitations are cleared after 90 days.

You can request access to, correction of, or deletion of your data at any time. You can also opt out of email updates. Just email us and we'll sort it out.

If you're in the EU, you have additional rights under GDPR including data portability and the right to lodge a complaint with your local data protection authority. Similar rights apply under CCPA (US), APPI (Japan), LGPD (Brazil) and PIPA (South Korea).

If we change this policy we'll update the date at the top. For significant changes we'll let you know.

Questions? Reach us at privacy@granturismo-mediahub.com