MotoGust Privacy Policy
Effective date: July 7, 2026 Last updated: July 7, 2026
MotoGust is a motorsport data and community platform operated by DiscoverySmith LLC ("DiscoverySmith," "we," "us," or "our"), a limited liability company organized under the laws of Illinois, United States. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use:
- Our website at motogust.com and its subdomains, including the community forum at community.motogust.com (together, the "Site");
- Our MotoGust mobile applications for iOS and Android (the "Apps");
- Any related services, features, or content we provide (collectively with the Site and Apps, the "Services").
By using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree with this Policy, please do not use the Services.
For the purposes of the EU and UK General Data Protection Regulation ("GDPR"), DiscoverySmith LLC is the data controller of personal information collected through the Services.
1. Information We Collect
Information you provide to us
- Account information. When you create a MotoGust account, we collect your email address, display name or username, and password credentials. Authentication is handled by Google Firebase Authentication; if you sign in using a third-party identity provider (such as Apple or Google Sign-In), we receive the profile information that provider shares with us, such as your name and email address.
- Profile information. Information you choose to add to your profile, such as an avatar, biography, location, or favorite series, riders, or teams.
- Community content. Posts, topics, replies, comments, chat messages, images, and other content you submit to the community forum or to race-day chat. Please note that content you post publicly can be read by other users and may be indexed by search engines.
- Purchase and subscription information. If you purchase a subscription, the transaction is processed by Apple (App Store), Google (Google Play), or our web payment processor. We never receive or store your full payment card number. We receive transaction records and entitlement status (for example, your subscription tier, purchase date, renewal date, and an anonymized transaction identifier) through our subscription management provider, RevenueCat.
- Communications. If you contact us for support or feedback, we collect the contents of your message and your contact information.
Information collected automatically
- Device and usage information. When you use the Services, we automatically collect information such as your IP address, device type and model, operating system and version, app version, browser type, language settings, pages or screens viewed, features used, ads viewed or clicked, and timestamps of activity.
- Crash and diagnostic data. We use Sentry to collect crash reports and error diagnostics, which may include device information, operating system version, app state at the time of an error, and IP address. This data is used solely to identify, reproduce, and fix defects.
- Cookies and similar technologies. We use cookies and similar technologies as described in Section 5 below, including a strictly necessary authentication cookie that keeps you signed in across motogust.com and community.motogust.com.
Information from third parties
- Identity providers. As noted above, if you sign in with a third-party provider, we receive account information from that provider.
- App store platforms. Apple and Google provide us with aggregated or transaction-level information related to app downloads and in-app purchases.
We do not knowingly collect sensitive categories of personal information such as government identification numbers, precise geolocation, health information, or biometric data, and we ask that you not submit such information through the Services.
2. How We Use Personal Information
We use personal information for the following purposes, with the corresponding legal bases under the GDPR where applicable:
| Purpose | Examples | GDPR legal basis |
|---|---|---|
| Providing the Services | Creating and maintaining your account; authenticating you; displaying race data, standings, and community content; delivering race-day chat; syncing your subscription entitlements | Performance of a contract (Art. 6(1)(b)) |
| Processing purchases | Confirming subscriptions, managing entitlements, handling renewals and refunds | Performance of a contract (Art. 6(1)(b)) |
| Communicating with you | Sending transactional emails such as account verification, password resets, purchase receipts, and important service announcements | Performance of a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)) |
| Maintaining safety and integrity | Preventing spam, fraud, and abuse; enforcing our community guidelines and terms of service; moderating content | Legitimate interests (Art. 6(1)(f)); legal obligation (Art. 6(1)(c)) |
| Improving the Services | Diagnosing crashes and errors, understanding aggregate usage, testing and improving features | Legitimate interests (Art. 6(1)(f)) |
| Displaying advertising and sponsored content | Showing ads and affiliate offers that we curate and sell directly; measuring ad impressions and clicks in aggregate. Ads are placed contextually (based on the page or content you are viewing), not based on a profile of your personal information | Legitimate interests (Art. 6(1)(f)) |
| Legal compliance | Responding to lawful requests, enforcing our rights, complying with tax and accounting obligations | Legal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f)) |
Where we rely on consent (for example, for optional communications or non-essential cookies, if introduced), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
We do not use your personal information for automated decision-making that produces legal or similarly significant effects, and we do not use it to train third-party artificial intelligence models.
3. How We Share Personal Information
We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising. We disclose personal information only in the following circumstances:
Advertising and affiliate partners
The Services display advertising and sponsored content that we curate and sell directly. We do not use third-party advertising networks, and we do not permit advertisers to collect personal information through the Services or to target you based on your personal information. Ads are placed contextually — based on the page, section, or content being viewed — rather than on a profile of you. Advertisers and sponsors receive only aggregate statistics from us (for example, total impressions and clicks); they do not receive your personal information.
Some ads and sponsored placements contain affiliate or referral links. If you click one, you will leave the Services and be taken to the third party's website, and we may earn a commission if you subscribe to or purchase that third party's service. The link may include a referral code identifying MotoGust as the referral source; it does not include your name, email address, or other personal information held by us. Once you are on a third party's website, that party's own privacy policy — not this one — governs any information you provide to them or that they collect from you. We encourage you to review the privacy policies of any third-party services before subscribing.
Service providers (processors)
We use a small number of service providers who process personal information on our behalf under contractual confidentiality and data protection obligations:
| Provider | Purpose | Information involved |
|---|---|---|
| Google Firebase (Google LLC) | Account authentication and identity management | Email address, credentials, identity provider tokens |
| RevenueCat, Inc. | Subscription and entitlement management | Transaction identifiers, subscription status, device identifiers |
| Apple Inc. / Google LLC | Payment processing for in-app purchases | Payment details (processed directly by Apple/Google) |
| Stream.io, Inc. | Real-time race-day chat infrastructure | Chat messages, display name, user identifier |
| NodeBB / self-hosted forum infrastructure | Community forum | Forum account details, posts, messages |
| Sanity AS | Content management for editorial content | Not used to process end-user personal data |
| Postmark (ActiveCampaign, LLC) | Transactional email delivery | Email address, email content |
| Sentry (Functional Software, Inc.) | Crash reporting and error diagnostics | Device data, IP address, diagnostic data |
| Vultr (The Constant Company, LLC) | Cloud hosting and backups | All data stored by the Services |
Other users and the public
Content you post to the community forum, public profile fields, and messages you send in public chat channels are visible to other users. Public forum content may be visible to non-registered visitors and search engines.
Legal and safety disclosures
We may disclose personal information if we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request; to enforce our terms and policies; to detect or prevent fraud, abuse, or security issues; or to protect the rights, property, or safety of DiscoverySmith LLC, our users, or the public.
Business transfers
If DiscoverySmith LLC is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
4. International Data Transfers
We are based in the United States, and the Services are hosted on servers located in the United States. If you access the Services from the European Economic Area (EEA), the United Kingdom, Switzerland, or other regions with data protection laws that differ from U.S. law, your personal information will be transferred to and processed in the United States.
Where required, we rely on appropriate safeguards for such transfers, including the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, our service providers' certifications under the EU–U.S. Data Privacy Framework. You may contact us using the details in Section 12 for more information about the safeguards applicable to a specific transfer.
5. Cookies and Similar Technologies
We use the following categories of cookies and similar technologies:
- Strictly necessary cookies. These are required for the Services to function, including a session/authentication cookie that keeps you signed in across motogust.com and community.motogust.com, and cookies that support security and load balancing. These cannot be disabled through the Services, but you can block them in your browser settings (which will prevent you from signing in).
- Functional cookies. These remember your preferences, such as display settings.
We do not use third-party advertising cookies or cross-site tracking technologies on the Services, and the curated ads we display do not set third-party cookies or run third-party tracking scripts. If you click an affiliate or sponsored link, the destination website may set its own cookies under its own privacy policy. If we introduce analytics or other non-essential cookies in the future, we will update this Policy and, where required, request your consent through a cookie banner before setting them.
Do Not Track / Global Privacy Control. Because we do not track users across third-party websites, we do not respond to browser "Do Not Track" signals. Where legally required, we honor the Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information; note, however, that we do not sell or share personal information as those terms are defined under California law.
6. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Services, and afterward as necessary to comply with legal obligations, resolve disputes, enforce agreements, and maintain business records. As a general guide:
- Account data is retained until you delete your account, after which it is deleted or anonymized within 30 days, except where retention is legally required.
- Forum and chat content may be retained after account deletion in anonymized form (with your username removed or replaced) to preserve the continuity of community discussions, unless you request its deletion.
- Transaction records are retained as required by tax and accounting laws (typically 7 years).
- Crash and diagnostic data is retained for 90 days.
- Backups are retained on a rolling basis for up to 60 days before being overwritten.
7. Your Rights — European Economic Area, United Kingdom, and Switzerland
If you are located in the EEA, UK, or Switzerland, you have the following rights under applicable data protection law:
- Access — the right to obtain confirmation of whether we process your personal data and a copy of it;
- Rectification — the right to correct inaccurate or incomplete personal data;
- Erasure — the right to request deletion of your personal data ("right to be forgotten");
- Restriction — the right to request that we restrict processing in certain circumstances;
- Portability — the right to receive your personal data in a structured, commonly used, machine-readable format;
- Objection — the right to object to processing based on legitimate interests, and an absolute right to object to direct marketing;
- Withdrawal of consent — where processing is based on consent, the right to withdraw it at any time.
To exercise any of these rights, contact us using the details in Section 12. We will respond within one month, extendable by two further months for complex requests. We may need to verify your identity before fulfilling a request.
You also have the right to lodge a complaint with your local supervisory authority. A list of EEA supervisory authorities is available from the European Data Protection Board; in the UK, the supervisory authority is the Information Commissioner's Office (ICO).
8. Your Rights — California
This section applies to California residents and supplements the rest of this Policy, as required by the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA").
Categories of personal information
In the preceding 12 months, we have collected the following categories of personal information (as defined in the CCPA):
| Category | Examples we collect | Sources | Purposes | Disclosed to |
|---|---|---|---|---|
| Identifiers | Email address, username, IP address, device identifiers | You; your device; identity providers | Providing the Services; security; communications | Service providers listed in Section 3 |
| Customer records (Cal. Civ. Code § 1798.80(e)) | Name (if provided), account details | You | Providing the Services | Service providers |
| Commercial information | Subscription history, purchase records | You; Apple; Google; RevenueCat | Processing purchases; entitlement management | Service providers |
| Internet or network activity | Pages viewed, features used, ads viewed or clicked, crash logs | Your device | Improving the Services; diagnostics; security | Service providers |
| Audio, visual, or similar information | Avatar images or media you upload | You | Providing the Services | Service providers; other users (if posted publicly) |
| Inferences | Content preferences within the Services (e.g., followed series) | Your activity | Providing the Services | Service providers |
We do not collect the following categories: precise geolocation; biometric information; health information; government identifiers; or sensitive personal information as defined by the CPRA (beyond account log-in credentials, which we use only for authentication).
No sale or sharing
We do not sell personal information and have not done so in the preceding 12 months. We do not share personal information for cross-context behavioral advertising. The advertising displayed on the Services is curated and sold directly by us, is placed contextually rather than through behavioral profiling, and does not involve disclosing your personal information to advertisers. Affiliate links identify MotoGust as the referral source but do not transmit your personal information to the affiliate partner. We have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age.
Your California rights
You have the right to:
- Know/Access — request disclosure of the personal information we have collected about you, the sources, purposes, and third parties to whom it was disclosed;
- Delete — request deletion of your personal information, subject to legal exceptions;
- Correct — request correction of inaccurate personal information;
- Opt out of sale/sharing — not applicable, as we do not sell or share personal information;
- Limit use of sensitive personal information — not applicable, as we use log-in credentials only for authentication;
- Non-discrimination — you will not receive discriminatory treatment for exercising your rights.
To exercise these rights, contact us at the email address in Section 12 or use the account deletion feature described in Section 10. We will verify your request by matching the information you provide against our records (typically by requiring you to respond from the email address on your account). You may designate an authorized agent to make a request on your behalf; we will require proof of the agent's authorization and may require you to verify your identity directly. We respond to verifiable requests within 45 days, extendable once by an additional 45 days with notice.
9. Children's Privacy
The Services are not directed to children under 13 years of age (or the higher minimum age required in your jurisdiction, such as 16 in certain EEA member states without parental consent). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, please contact us and we will delete it promptly. If we learn that we have collected personal information from a child under the applicable minimum age, we will delete that information and terminate the associated account.
10. Account and Data Deletion
You may delete your MotoGust account at any time:
- In the Apps: Settings → Account → Delete Account. This in-app deletion option is available to all users as required by Apple App Store and Google Play policies.
- On the web: Account settings at motogust.com, or by emailing us at the address in Section 12.
When you delete your account, we delete or anonymize your personal information as described in Section 6. Deletion requests are processed within 30 days. Copies may persist in encrypted backups for up to 60 days before being overwritten.
11. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit (TLS), hardened server configurations, access controls, and encrypted backups. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. If we become aware of a data breach affecting your personal information, we will notify you and applicable regulators as required by law.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:
DiscoverySmith LLC (operating as MotoGust)
Attn: Privacy
680 N Lake Shore Dr
Suite 110 - 2452
Chicago, IL 60611
Email: support@motogust.com
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email, through the Services, or by prominently posting notice on the Site before the changes take effect. The "Last updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Services after changes become effective constitutes acceptance of the revised Policy.