Last updated: 12 September 2026. This policy covers firstlap.app ("firstlap", "we"), part of the drivenerve family of driving tools. The data controller is the operator identified in full in the Imprint ("the operator"): name, correspondence address and VAT identification are stated there and nowhere else, so there is one record to keep correct. For anything in this policy, write to hello@drivenerve.com — we answer.
1. What firstlap does not do
- No user accounts and no sign-up.
- No cookies of any kind, and no similar tracking identifiers.
- No analytics, advertising or social-media scripts. The site makes no requests to third-party servers at all.
- No forms that transmit data to us. Your plan is never uploaded anywhere.
- No sale or sharing of personal information — we have none to sell.
2. Data stored on your device only
To function as a planner, firstlap saves your plan in your browser's local storage: your six wizard answers (vehicle type, experience level, weather, transport, trip type, circuit and date), which checklist items you have completed, and the optional emergency card (a contact name, phone number and medical notes).
This data never leaves your device. We cannot see it, receive it or recover it. It is processed by your own browser solely to provide the service you asked for, which is why no consent banner is required: this storage is strictly necessary for the tool you are actively using, and nothing else is stored.
You can erase it at any time with the planner's "Start over" button, or by clearing this site's data in your browser settings. If your browser blocks local storage, the planner still works for the current visit; it simply cannot remember your plan.
The emergency card deserves a special note. Medical information is sensitive. It exists so you can print it for the paddock, it is stored only on your device, and it is deliberately excluded from share links.
3. Share links
The "Share this plan" feature encodes your wizard answers and completed items into the link itself. Nothing is stored on a server; whoever opens the link reconstructs the plan locally. Two things to know: anyone you send the link to can see the plan it contains, and messaging platforms may log URLs you send through them. The emergency card is never included in share links.
4. Server logs (hosting)
Like virtually every website, the server that delivers these pages keeps standard access logs — IP address, requested page, time, browser type — for security and operation of the service. Our hosting provider and processor is Hostinger (HOSTINGER UAB, Vilnius, Lithuania, and Hostinger International Ltd, Cyprus), which states that it processes personal data under Regulation (EU) 2016/679 and, for any transfer outside the EEA, under the European Commission’s Standard Contractual Clauses. This is the only processing of personal data connected to firstlap, and its legal basis in the EU/UK is legitimate interest (Art. 6(1)(f) GDPR) in running a secure website. Logs are retained per Hostinger’s standard schedule and are not used for profiling or marketing.
5. Your rights
Depending on where you live — the EU/EEA or UK (GDPR), California (CCPA/CPRA), Canada (PIPEDA), Australia (Privacy Act 1988) or New Zealand (Privacy Act 2020) — you have rights to access, correct, delete or port personal data, to object to processing, and to complain to your local supervisory authority. Because your plan data exists only on your device, you exercise most of these rights directly: delete the site's data and it is gone, everywhere it ever existed. For anything relating to server logs, contact us at hello@drivenerve.com and we will coordinate with the hosting provider. Because the operator is established in Lithuania, the lead supervisory authority is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt); you may also complain to the authority where you live. We do not discriminate against anyone for exercising privacy rights.
6. Children
firstlap is not directed at children and, in any case, collects no personal data from anyone.
7. Partner links
Updated 12 September 2026; first links active since 28 August 2026. firstlap carries a small number of labelled partner links. This is the complete list of who they are, where they appear and how each one pays:
- Discover Cars (car hire comparison, in-house programme): one link on each of the 41 circuit pages. Pays per completed booking.
- Advance Auto Parts (street brake pads, fluid and general parts for US-market cars, ships in the US): on the 14 US circuit pages, in the planner’s Packing tab when a US circuit is selected, and on the packing guide. Pays per sale.
- Demon Tweeks (helmets, suits and fluids, UK retailer): on the 4 UK circuit pages, in the planner’s Packing tab when a UK circuit is selected, and on the packing guide. Pays per click.
- apexsimracing.com (sim racing rigs, US): on the 14 US circuit pages and in the planner’s Timeline tab when a US circuit is selected. Pays per click.
The Advance Auto Parts, Demon Tweeks and apexsimracing links run through the Takeads affiliate network. Every partner link sits below the free route, is marked PARTNER LINK where it appears, and is a plain outbound link: no script, no pixel and no partner image loads because of it, so these pages still make no third-party requests. If you follow one and, for the per-sale partners, later buy, we may earn a commission at no extra cost to you. From the moment you click, the network and the partner handle your data under their own privacy policies. What comes back to us is aggregate reporting tagged with a surface code such as fl-cota, fl-plan-pak, fl-plan-tl or fl-packing-list, never your identity. The planner chooses a partner only from the country of the circuit you picked, entirely on your device; circuits outside the US and UK show the free route alone. Nothing you enter into the planner is sent to anyone, and no partner link changes a single thing the checklist tells you.
8. If this ever changes
We may in future add a newsletter or privacy-respecting aggregate analytics. Neither is active today. If either launches, this policy will be updated before it goes live, with a new date at the top, and any feature that collects personal data (such as a newsletter) will use explicit opt-in consent with a working unsubscribe.
9. Contact
Questions about this policy or your data: hello@drivenerve.com. The operator’s legal details are on the Imprint.