Privacy policy

Last updated: 11 October 2026

This policy explains which personal data Newton Telemetry processes when you visit newton-telemetry.com, use Newton Cloud (app.newton-telemetry.com), our desktop apps Velocity and Newton Configuration, or a Newton device connected to Newton Cloud.

Controller

Newton Telemetry GmbH
Am Paradeplatz 20
69126 Heidelberg
Germany
Email: info@newton-telemetry.com

Where your data is stored

Our servers, databases, backups and file storage run at Hetzner Online GmbH in Falkenstein, Germany. Some of the services listed below are provided by companies outside the European Union; see "Transfers outside the EU".

Visiting our website

When you open newton-telemetry.com, your browser sends your IP address, the requested page, the time, and its user agent to our servers. We need this to deliver the page and to protect our systems (Art. 6(1)(f) GDPR). The website sets no cookies, stores nothing in your browser, and uses no analytics, tracking or advertising services. Fonts and all other assets are served from our own servers.

Our servers keep technical logs of requests and errors to operate and secure the service (Art. 6(1)(f) GDPR). The download server (downloads.newton-telemetry.com) logs each request with IP address, time, requested file, referrer and user agent. Logs are kept for at most 60 days.

Newton Cloud accounts

To create and use an account we process your email address, your name, your password or the external sign-in you choose (Google or Microsoft), and, if your sign-in provider supplies one, the address of your profile picture. We also store your team memberships, roles and invitations. We process this data to provide Newton Cloud to you (Art. 6(1)(b) GDPR).

Sign-in, registration, email verification, password reset and team invitation emails are handled by WorkOS, Inc. (USA) on our behalf. WorkOS receives your email address, your name, your password or external sign-in, and technical connection data. If you signed in with Google or Microsoft, your browser loads your profile picture directly from that provider, which then sees your IP address.

For security we limit repeated requests; for this we store a keyed hash of your IP address, not the address itself (Art. 6(1)(f) GDPR).

To compute active-user statistics and to show account activity to administrators, we record the days on which you used Newton Cloud with the first and last time of use on each day. Performance measurements of page loads (Web Vitals) are sent to our own servers and only stored in aggregated form (Art. 6(1)(f) GDPR).

Administrative actions are recorded in an audit log. Our support staff can view your account as you see it in order to help you; every such session is logged with its reason (Art. 6(1)(b) and (f) GDPR).

Cookies and browser storage in Newton Cloud

Newton Cloud only uses cookies that are strictly necessary to provide the service you request (§ 25(2) no. 2 TDDDG). It uses no tracking cookies.

  • newton_session: keeps you signed in; contains your encrypted session. Deleted after 30 days or when you sign out.
  • newton_oauth_state, newton_oauth_return_to, newton_oauth_invitation_setup: protect and complete the sign-in process. Deleted after 10 minutes.
  • newton_email_verification: completes the email verification step. Deleted after 10 minutes.
  • newton_impersonation and sidebar:state: only used by Newton Telemetry staff in the administration area.

In addition, a value in your browser's session storage makes sure the daily activity record described above is sent at most once per day. It is deleted when you close the tab.

Devices, telemetry and video

When you use a Newton device or upload data to Newton Cloud, we process the data you and your team record: device serial numbers and their assignment to people and teams; outings with time, location and laps; telemetry including GNSS positions and tracks and vehicle data; driver names you enter; events, notes and documents; and video recordings. GNSS tracks can reveal where a driver was at a given time. We process this data to provide Newton Cloud (Art. 6(1)(b) GDPR) and keep it until you or your team delete it.

  • Video: recorded videos are stored on our servers. To deliver them efficiently we also hand them to Cloudflare Stream (Cloudflare, Inc., USA), which stores and streams the video. When you watch a video, your browser loads the player from Cloudflare.
  • Live video and live telemetry: live video is sent through Cloudflare Stream; live telemetry, including GNSS positions, is sent through Cloudflare's real-time network (WebRTC). Your browser, desktop app and device connect to Cloudflare for this, which sees their IP addresses. Recordings of live streams are deleted after 12 hours.
  • Restreaming: if you set up restreaming, your live video is sent to the platform you choose (for example YouTube or Twitch). That platform's privacy policy applies there.
  • RTK positioning: while precise (RTK) positioning is active, a Newton device sends its approximate position to a GNSS correction service once per second to receive correction data.

Sharing

You can create links that let others view outings or live sessions without an account. A link stays valid for the period you choose (by default one month) or until you revoke it. We log when playback links are issued or refused; these records are deleted after 90 days.

Maps, places and weather

  • Satellite maps in Newton Cloud, Velocity and the Newton device interface are loaded through our map service, which runs on Cloudflare Workers (Cloudflare, Inc., USA). It sees your IP address and, for Velocity, a random identifier of your installation, and uses them to prevent abuse. It fetches the map tiles from Mapbox, Inc. (USA) itself and passes on only which map area is requested, not your IP address.
  • Place search: when you search for a place, our server sends the search text to the Nominatim service of the OpenStreetMap Foundation. Your IP address is not passed on.
  • Weather and time zones: our servers send the coordinates of events and tracks to Open-Meteo to look up weather and time zones. No other personal data is passed on.

Desktop apps

Velocity and Newton Configuration check downloads.newton-telemetry.com for updates, which receives your IP address and the app version. Velocity signs you in through WorkOS and stores its sign-in token in your operating system's credential store. Neither app sends crash reports, usage analytics or advertising data.

Recipients and processors

We share personal data only as described in this policy. Our service providers process it on our behalf under data processing agreements (Art. 28 GDPR):

  • Hetzner Online GmbH, Germany: hosting, databases, backups and file storage.
  • WorkOS, Inc., USA: sign-in and account emails.
  • Cloudflare, Inc., USA: video, live video and live telemetry delivery, map service, and DNS.

Transfers outside the EU

WorkOS and Cloudflare process data in the USA. Where a recipient is certified under the EU-U.S. Data Privacy Framework, the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR); otherwise it is based on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR).

How long we keep data

We keep account data for as long as your account exists, and the content you and your team record until you or your team delete it. Temporary exports are deleted after one day. Deleted files remain in our storage's version history for up to 30 days and in database backups for a short period before they are removed. Some data must be kept longer to meet legal retention obligations, for example invoices.

If you ask us to delete your account, we delete or anonymise your personal data unless we are required by law to keep it.

Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), and to receive it in a portable format (Art. 20). Where we process data based on our legitimate interests, you can object at any time for reasons arising from your particular situation (Art. 21). To exercise these rights, email info@newton-telemetry.com.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

Obligation to provide data

You do not have to provide personal data to visit our website. To use Newton Cloud you need to provide an email address and a name; without them we cannot create an account. We do not use automated decision-making or profiling (Art. 22 GDPR).

Changes

We update this policy when our services change. The date at the top shows the latest version.