Privacy

MonkeyOverlays processes telemetry on your PC and does not require an account. Two features communicate outside your PC without a separate activation step: the new version notice and usage statistics. Both are selected in the first-run guide. You can turn either off at any time in Options. Everything else (public link, OBS, Twitch chat, web widget) is enabled separately.

Last updated: October 22, 2026.

Names and broadcasting

The default format is AbbrevName; flags (FlairName) follow your settings. You can use initials or car numbers only. Full names of real members require opt-in. Widgets do not publish account identifiers. An OBS source’s visible content becomes part of your broadcast: review names, notes, images and text before going live.

Local history and iRating

History stays in %APPDATA%\MonkeyOverlays\data\results.sqlite3. Account, session and subsession keys use SHA-256 with a random 32-byte local salt. Driver names and original IDs are not stored. It stores your own context and results, with estimates clearly labeled. Demo and replay are not imported into real persistent history.

Salted hashes provide pseudonymization, not encryption or irreversible anonymization. The salt is in the same database; protect the database and complete backups. CSV export or sharing a copy is a separate action. The Data API is not queried to complete history.

Driver notebook

The notebook is local, without automatic synchronization or publication. Notes you write may contain personal information: avoid data you do not want to retain or show when capturing the app. Local storage does not make notes anonymous or encrypted.

Performance capture

You start the capture explicitly. When you stop it, it is saved as a local JSON file. It includes metrics, hardware configuration and widget/display/OBS context, without driver names or account IDs. It does not upload automatically. Captured data details.

Usage statistics

They tell us how many people use the app, with which widgets and on what hardware, so we can decide what to improve.

• How you are asked: in the first-run guide, with “Yes, share” already selected; “Skip” applies that selection. You can choose “No” right there. Sharing hardware information requires separate permission, which is unchecked by default.
• What is sent: once a day when you open the app, a small JSON payload to monkeyoverlays.com with:
  • a random installation ID, unrelated to your iRacing account or your name;
  • the day, channel (beta or stable), version, language and Windows version (10 or 11);
  • how many times you opened the app that day and which widgets were visible (only the type, such as relative);
  • only with the hardware permission: CPU cores, memory and GPU vendor, in ranges.
• Never sent: names, custid or other iRacing data, results, rivals, layout names, URLs or files.
• On the server: the country Cloudflare reports for the connection is added. The IP address is not stored.
• How long: with the ID, 30 days. After that only daily totals without an ID remain (installations and app launches by version, language, country and hardware range).
• Control: in Options → Privacy you can turn them off, see the exact JSON (“See what is sent”), change the ID (“New ID”) and erase from the server everything sent with your ID (“Delete what I sent”).

The ID identifies your installation during those 30 days, so we treat it as pseudonymous data, not anonymous. Internal test builds send nothing.

New version notice

If enabled (it is selected in the first-run guide), the app downloads monkeyoverlays.com/releases/windows.json when it opens and every 6 hours, with a plain HTTPS request. It sends no ID or usage data, and we do not store that request; Cloudflare handles the connection as with any website visit. Turn it off in Options.

OBS and external content

OBS connects only on this PC and starts disabled. Each automation has its own permission. The password is stored locally in layout.json, currently without DPAPI protection; it is not sent back to the interface or written to logs. The service does not read stream keys or publish recording paths. OBS setup.

The web widget contacts your chosen URL and its resources; even a local page may load external content. Selecting a Twitch channel enables an anonymous external connection to read chat. Those services have their own policies. Marquee and carousel serve text and files locally; OBS broadcasts them if you include the source in your output.

Recordings and folders

.motr files store raw frames and session data and may contain full names and identifiers. On-screen privacy does not anonymize files. Moment links do not upload or anonymize them either. Choose unsynced folders to keep files only on the PC; other software may upload a cloud-synced folder. Recorder.

Third-party test data is not distributed with the app or website. Telemetry is read through SDK shared memory without injection or graphics hooks.

This website

This website uses Cloudflare Web Analytics, without cookies, injected by Cloudflare. It measures visits and page loading separately from the app’s performance capture. Provider information. Search uses a static index from this website. Choosing a language saves only that preference in your browser’s local storage (mo-lang).

Forms use Cloudflare Turnstile to limit spam. Reports and subscriptions store what you submit in a Cloudflare database (D1), and the team receives it by email. An email address is optional for reports and lets us reply. News subscriptions require your explicit consent.

The IP address is not stored in the forms database: a daily hash is used to limit abuse. Subscriptions are kept until you unsubscribe; reports are kept for up to 12 months. To request access, deletion or unsubscription, see Your rights.

Apart from the version notice and statistics, the app sends no data outside your PC except through features you enable. The public link is optional: its traffic passes through Cloudflare and anyone with the link can see the content you share. The local network lets you use a phone or tablet without sending that traffic over the internet.

Donations, if enabled, link to an external checkout. This website does not receive card details or process payments; the selected provider’s policy applies. Donation links stay hidden while no providers are configured.

Providers

The website, the forms and statistics database, spam protection and downloads run on Cloudflare, on servers outside Chile. Form notifications reach the team in a Google (Gmail) mailbox. Each provider has its own privacy policy.

Your rights

You can request access to your data, ask for it to be corrected, deleted or provided to you, object to its use, and withdraw your consent at any time: turning a feature off stops further data transmission. You can delete your statistics yourself from the app. For everything else, email contacto@monkeyoverlays.com; we reply within 30 days. The controller is TechMonkey SpA, Chile.

If this policy changes, we update the date above and mention it in the release notes.