Privacy Policy

Last updated: 21 September 2026
This Privacy Policy explains what personal data gtplus.app collects, why it is collected, how long it is kept, who it is shared with, and which rights you have over it. gtplus.app is an unofficial, fan-made companion website for the video game Gran Turismo 7 and is operated by a private individual based in Austria.

1. Who is responsible for your data

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the operator of gtplus.app. You can reach us at any time at hello@gtplus.app with any question or request concerning this policy or your personal data.

2. Using gtplus.app without an account

Most of gtplus.app can be used without signing in and without providing any personal data. When you browse the site we process:
  • Server and request data that is technically required to deliver the website (IP address, requested URL, date and time, browser and operating system). It is processed by our hosting provider to serve the site and keep it secure, and is not used to identify you.
  • Anonymous usage statistics, collected with a self-hosted installation of Plausible Analytics. Plausible sets no cookies, does not store IP addresses and builds no cross-site or cross-device profiles. We use it only to see which pages are used.
  • Local browser storage for preferences and for ratings, garage and wishlist entries you create while signed out. That data stays in your browser and only reaches us if you later sign in, in which case it is imported into your account.

3. Signing in with Google, Discord or Twitch

gtplus.app has no password-based registration. You create an account by signing in with an external identity provider. We request only basic profile scopes and receive from the provider:
  • your email address,
  • your display name,
  • the URL of your avatar image,
  • the account identifier issued by the provider, together with the token needed to keep you signed in.
This data is used exclusively to create and authenticate your gtplus.app account, to show your name and avatar in your profile, and to contact you about your account should that ever be necessary. We do not use it for advertising, we do not sell it, and we do not pass it on to third parties. We never receive your password.
Google user data. gtplus.app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only the openid, email and profile scopes; we use the resulting data solely to provide the sign-in and profile features described above; we do not transfer it to others except as needed to operate gtplus.app or to comply with the law; we do not use it for advertising; and we do not allow humans to read it except with your consent, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymised. You can revoke gtplus.app's access at any time in your Google account permissions.

4. Data you create while using gtplus.app

When you are signed in, the content you create is stored in our database and linked to your account:
  • ratings for cars, manufacturers, tracks, layouts, events and car/event combinations,
  • your garage, wishlist and tier lists,
  • your results and participation history in the Guess the Grid game,
  • the GT7 Online ID (PSN ID) you optionally enter in your settings and the players you follow. The Online ID is used to match the publicly available Sport Mode time trial results published by Gran Turismo to your profile.
Parts of this data (for example your display name, avatar, ratings and Sport Mode results) can be visible to other users, e.g. in aggregated rating scores, leaderboards and follower lists. Your email address is never shown publicly.

5. Cookies and advertising

  • Necessary cookies keep you signed in after authentication. Without them the account features cannot work.
  • Google AdSense displays the advertising that funds the hosting of gtplus.app. Google and its partners may set cookies and process data (including your IP address and ad interactions) to serve and measure ads; see how Google uses information from sites that use its services. You can manage ad personalisation at adssettings.google.com.

6. Legal bases

  • Art. 6(1)(b) GDPR - performance of a contract: providing your account, authentication and the profile features you ask for.
  • Art. 6(1)(f) GDPR - legitimate interests: operating, securing and improving the website, and anonymous usage statistics.
  • Art. 6(1)(a) GDPR - consent: personalised advertising cookies, where consent is required.

7. Processors and recipients

We do not sell your personal data and we do not share it with third parties for their own purposes. We rely on the following service providers to run gtplus.app:
  • our hosting and database providers, which store the website and the account data described above on our behalf,
  • Vercel Blob, for images used on the site,
  • Google, for AdSense advertising and for the Google sign-in you initiate,
  • Discord and Twitch, for the respective sign-in you initiate.
Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses or by an adequacy decision. Data may additionally be disclosed where we are legally required to do so.

8. Retention and deletion

Account data and the content linked to your account are kept for as long as your account exists. You can request deletion of your account and all associated data at any time by writing to hello@gtplus.app from the address associated with your account; we will delete it without undue delay. Server logs are kept only briefly, for security and troubleshooting. Anonymous statistics contain no personal data.

9. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you may withdraw that consent at any time with effect for the future. To exercise any of these rights, contact hello@gtplus.app. You also have the right to lodge a complaint with a supervisory authority. In Austria, the Datenschutzbehörde.

10. Security

gtplus.app is served exclusively over encrypted HTTPS connections, and access to the database is restricted to the operator of the site. No system can be guaranteed to be completely secure, but we take reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access.

11. Changes to this policy

We may update this Privacy Policy when the site or the legal requirements change. The current version is always available at https://gtplus.app/privacy, with the date of the last update at the top of the page.

12. Contact

For any question about this policy or your personal data, write to hello@gtplus.app. Our Terms of Use apply in addition to this policy.