Privacy Policy

Last updated 10 September 2026

The short version: your .vkx race file is sent securely to our server to be analysed — that's true for both Single Boat Analysis and Tuning Partner Analysis — and the results are sent straight back to your browser. We don't store a copy of your race file. The only personal data we hold is your sign-in email. If you choose to upload to an event, the boat name, sail number and race track you enter are shared with the other sailors in that event — and only with them — with your explicit consent each time. We don't run ads, we don't use tracking or analytics cookies, and we don't sell or share your data with anyone for marketing purposes.

Who we are

Sail Smarter Race Analytics (sail-smarter.com) is an independent project providing race-analysis tools for sailors using Vakaros or Velocitek instruments — Single Boat Analysis, Tuning Partner Analysis and Video Overlay Analysis. We are not affiliated with, endorsed by, or connected to Vakaros or Velocitek. For the purposes of UK data protection law, we are the "data controller" for the personal data described in this policy. You can reach us using the contact form on this site — see "How to contact us" below.

Your race data (.vkx and .vtk files)

When you use any of the tools, your race file (.vkx or .vtk) is sent securely (over HTTPS) from your browser to our server, where it's analysed and the results are sent straight back to you. Your file is processed in memory for the length of that one request only — it is never written to a database or any persistent storage, and we don't keep a copy of it or its contents. It isn't shared with any third party beyond the infrastructure provider that runs this processing for us (Supabase — see "Who we share data with" below). If you choose to export or save a result, that file is generated in your browser and saved directly to your own device. The one exception to "nothing is kept" is an event: if you consent to upload a race to an event, the resulting track and figures — but still never the file itself — are stored so the fleet can be compared. See "Events and sharing your race data with other sailors" below.

Your video footage

Video Overlay Analysis never uploads your footage. The video file is opened directly from your own device by your browser, decoded there, and drawn to a canvas with the overlay on top. It is not sent to us or to anyone else, we never receive it, and exported clips are encoded in your browser and saved straight back to your device. Only the race file is sent for analysis, exactly as described above.

Events and sharing your race data with other sailors

Events are the one place where data you provide is shown to other people, and it only ever happens because you asked for it. Before a file can be uploaded to an event you must tick a box confirming you are happy for that race to be shared with the other sailors in that event. Nothing is uploaded until you do; the upload is refused without it.

When you upload to an event, this is what the other entrants in that event can see:

• The boat name and sail number you type in — so choose what you're comfortable being seen. They are shown alongside everyone else's.
• The race track and derived performance figures for the races you upload — position over time, speed, heading and the analysis computed from them.

What is not shared, in an event or anywhere else:

• Your original race file. As with every other tool on this site, it is processed in memory and discarded — what is kept for an event is only the compacted track and results described above.
• Your email address or any other account detail. It is never shown to other entrants, and other entrants are not given a way to contact you through this site.
• Anything at all from your other analyses. Only the races you deliberately upload to an event are shared.

Who can see it. Event race data is visible to the sailors who have entered that event, so that everyone can compare their race against the fleet. It is not published on the open web, not indexed by search engines, and not shared with anyone outside the event.

Our lawful basis for this sharing is your consent (UK GDPR Article 6(1)(a)). We record the moment you gave it and the version of the wording you agreed to, so that we can show what you were told. If we ever materially change what is shared, we will ask again rather than rely on your earlier agreement.

Withdrawing it. You can ask us to remove your race data from an event at any time, through the contact form, and we will delete it. Withdrawing does not undo the fact that other entrants may already have seen or noted the results while it was shared — so please only upload data you are content to share. Separately, if you were the first to upload for a given day you can delete a race you set up yourself directly in the app, but only while no other boat has uploaded into it; once another sailor's data is in a race, that race can no longer be deleted, because it is no longer only yours to remove.

Account data

To use the tools, you sign in. This is handled by our authentication provider, Supabase, and gives us:

• The email address associated with your Google account, used to identify your account.
• An internal account ID, so your uploads and any events you join can be associated with your account.
• A record that you ran an analysis (a timestamp only — not the contents of your file), used for basic usage logging.
• If you upload to an event, a record of when you agreed to share that race and which version of the sharing wording you agreed to.

We don't receive or store your Google password — Google handles authentication directly, and Supabase only receives confirmation that you signed in successfully along with your email address.

Contact form messages

If you use the contact form, the name, email address and message you enter are sent via Web3Forms, a third-party form-relay service, directly to our inbox. We don't store contact-form messages in a database on our side — they live in our email, like any other message you'd send us.

Cookies and local storage

We don't use advertising or analytics cookies, and we don't run any tracking scripts. The only thing stored in your browser is a sign-in session token (via Supabase's authentication library), which keeps you logged in between visits — this is strictly functional and isn't used to track you across other sites.

Hosting and technical logs

This site is hosted on Cloudflare's infrastructure. Like most web hosts, Cloudflare's servers routinely log standard technical information for any request — for example your IP address, browser type, and the page requested — as part of normal, secure operation of the site. We don't use these logs to build profiles of individual visitors.

Who we share data with

We use a small number of third-party services to run this site and its tools, each acting as a data processor on our behalf:

• Supabase — authentication, account storage, and the server-side functions that briefly process your race file in memory to produce your analysis (see "Your race data" above).
• Web3Forms — relays contact-form messages to our inbox.
• Cloudflare — website hosting.
• Google — sign-in (as your OAuth identity provider).

We don't sell your data, and we don't share it with anyone for advertising or marketing purposes. Some of these providers may process data on servers outside the UK/EEA; each maintains its own safeguards for international transfers under their respective privacy policies and standard contractual clauses.

How long we keep your data

Your race file itself is never stored — it's processed in memory for the length of one analysis request and then discarded. We keep your account email for as long as your account exists. Race data you have consented to share with an event is kept for as long as that event's results are useful to its entrants, or until you ask us to remove it. If you ask us to delete your account, we'll remove your account record and any race data you have contributed to an event. Contact-form messages are kept in our inbox only as long as we need them to resolve your query.

Your rights

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you and get a copy of it.
• Ask us to correct inaccurate data.
• Ask us to delete your account and associated data.
• Object to or restrict how we use your data.
• Ask for your data in a portable format.
• Withdraw consent you have given — including consent to share a race with an event — at any time.

To exercise any of these, get in touch via the contact form. If you're not satisfied with how we've handled a request, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Children's privacy

This site is not directed at children, and we don't knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy from time to time — for example if we add a new feature or change a third-party provider. The "last updated" date at the top of this page will always reflect the latest version.

How to contact us

For any question about this policy or your data, use the contact form — messages go straight to our inbox and we'll reply by email.

← Back to home