doublestint.gg uses your iRacing account to sign in. There's no separate password to create — you authenticate with iRacing directly, and we only ever see the data you authorise. This page explains exactly what that means and what data we collect.
What happens when you sign in
When you click Login with iRacing, you're redirected to iRacing's own
official login page (oauth.iracing.com). You enter your iRacing credentials
there, on iRacing's site — never inside doublestint.gg.
This uses OAuth 2.0 with PKCE, the industry-standard way for one app to act on your behalf without ever handling your password. Once you approve the sign-in, iRacing sends us a temporary access token that lets us read the data described below. That's it.
We never see, receive, or store your iRacing password. Authentication happens entirely on iRacing's servers.
What data we access, and why
| Data | Why we need it |
|---|---|
| iRacing customer ID | Your unique account identifier — it's how we recognise you across teams and races. |
| Display name | So your teammates can see who's who on rosters, schedules and setups. |
| Email (if iRacing shares it) | Account-related contact only. We don't send marketing email. |
| Team memberships | To show the teams you belong to. Rosters are pulled live from iRacing. |
| Race & series data | Schedules, results and subsession info for the events you're planning. |
| Lap & telemetry data | Only when you use the Collector — to power live timing and analysis for your team. |
We pull this from iRacing's official data API as you use the app — for
example, when you open a team or a race. We request only the access scopes needed
for the above (iracing.profile and iracing.auth).
How your sign-in is kept secure
- The access and refresh tokens iRacing issues are stored encrypted, in secure HTTP-only cookies and on our server — never exposed to your browser's JavaScript or to other users.
- Tokens are short-lived and refresh automatically; you can revoke Endurance Manager's access at any time from your iRacing account settings.
- We don't post anything to iRacing on your behalf or change anything in your iRacing account.
Your data, your control
You're always in control of the data tied to your account:
- Download a copy — your Profile page has a "Download My Data" button that exports everything we hold about you as a JSON file.
- Delete your account — also on your Profile page; this permanently erases your account and associated data.
For the full details on how we collect, use and protect your data, see our Privacy Policy and Terms of Service.