Privacy Policy

This policy explains how Ride Labs handles personal data when you use our platform. Last updated on November 12, 2025.

Data we collect

We collect only the data strictly necessary to authenticate users through Google OAuth.

• Your name and email address provided by Google during login.
• A unique Google account identifier (UID) used to manage sessions.
• Timestamps for account creation and last login, used for security and minimal audit purposes.

Purpose of processing

We use your data exclusively to provide secure access to the platform and manage your sessions.

• User authentication and server-side verification of Google ID tokens.
• Session management, including logout and session revocation.
• Technical communications strictly related to service operation.

Legal basis

The processing of your data is based on the execution of a service agreement and the legitimate interest of ensuring security and proper functioning of the platform.

Cookies and technical storage

We use only essential technical cookies required for authentication and session handling.

• rl_session — A signed, secure session cookie (HttpOnly, Secure, SameSite=Lax).
• rl_next — A short-lived cookie that manages post-login redirect.
• rl_nonce — A short-lived cookie used to validate login requests and prevent CSRF attacks.

We do not use tracking, analytics, or advertising cookies.

Data retention

We retain account and session data only as long as necessary to provide the service and maintain security. Sessions automatically expire after a predefined duration.

Data sharing

We do not sell or share your data with third parties for marketing purposes. Authentication data is verified through Google as an identity provider, following Google’s privacy terms.

Your rights

You can access, export, or delete your data directly from your account settings or via our public endpoints.

• Export your profile data via the GDPR export endpoint.
• Delete your account and sessions via the GDPR delete endpoint.
• Revoke active sessions with logout or logout_all actions.

Contact

For privacy inquiries or data requests, you can contact us at info@ridelabs.it.