-< All case studies
Case study / BMW Performance Driving School
In partnership with RITTA

Six years building the BMW Performance Driving School website.

Six years and 4,222 commits powering BMW USA's flagship performance driving school - a multi-brand booking platform built in partnership with RITTA.

Visit bmwperformancecenter.com->
gatsbyexpressmongodbmulti-brandlong-term-partner
4,222
Commits
shipped since 2019
6+ yrs
Partnership
and still shipping
57
Page routes
across BMW, M, MINI, Motorrad
19
Booking flows
forms with server validation
The engagement

A consumer brand site that has to move at the speed of a marketing calendar.

The BMW Performance Driving School is BMW USA's flagship driving experience - tracks in Thermal, California and Spartanburg, South Carolina, plus partnerships at Indianapolis Motor Speedway. The website at bmwperformancecenter.com is the consumer-facing booking surface for everything BMW does in this category: BMW Driver's School, M School, MINI Driving School, BMW Motorrad, Indy programs, and the M Drift Academy.

EliteCoders has been the engineering team behind that site since 2019, working as the technical partner to RITTA, the agency that owns the BMW relationship. Six years in, the codebase has 4,222 commits, 57 page routes, 19 booking flows, and an entire marketing-operations layer built around BMW's evolving calendar of programs, partnerships, and promotions.

The work isn't glamorous in the AI sense. It is engineering longevity at brand scale: a Gatsby + Express + MongoDB platform that has to ship reliably for a BMW USA-grade audience every week, year after year, while marketing campaigns, seasonal pushes, channel experiments, and new program launches land on top.

From bmwperformancecenter.com

“An open track, the Ultimate Driving Machine, and you in the driver's seat. Prepare for a BMW driving experience like no other.”

Architecture

Statically delivered site, dynamically captured leads.

A Gatsby build emits static HTML/JS/CSS that the CDN serves at scale. An Express API behind it handles every form submission - validation through Joi, bot protection through reCAPTCHA, persistence in MongoDB, admin tooling on top.

Multi-brand surface

Six programs. One codebase. Distinct brand identities preserved per program.

Each program has its own page tree, components, color treatment, and booking flow - while sharing the underlying form pipeline, validation layer, and admin tooling.

Driver's School

Core BMW Performance Driving School curriculum

One-Day, Two-Day, Teen, Car Control

M School

High-performance program for BMW M drivers

One-Day M, Two-Day M, Advanced M, Race License, M4 GT4

MINI Driving School

Performance driving for MINI

MINI School, Group Events, On-Tour

BMW Motorrad

Motorcycle performance and adventure tours

International Tours, U.S. Tours, Nurburgring

M Drift Academy

Specialty experiences and additions

Drift Academy, Performance Challenge, M Track Series

Indianapolis Programs

Half-day and full-day events at IMS

Indy Half-Day, Indy Full-Day
Marketing operations

An ops layer the marketing team actually uses.

The site isn't just pages and forms. It's a marketing-operations platform - schedule campaigns by date window, segment landing pages by acquisition channel, track attribution end to end.

Scheduled banners

Promotional banners with date windows that auto-publish and auto-retire. Father's Day, Half Off Full Summer, holiday promotions - the marketing team books the calendar, the site delivers.

Channel-segmented landing pages

Dedicated special-offer pages per acquisition channel: AMEX, Facebook, Instagram, LinkedIn, YouTube, Spotify, SEM, organic, social, retargeting, California, BMW AG, BMW USA. Each carries its own tracking and copy.

Attribution pixels

Server-rendered pixel placement (Blockboard, Google Analytics) that survives Gatsby static-build constraints and CDN caching.

Gift cards + special offers

Programmatic gift card flow, code-redeemable offers, and contest mechanics (LAAS, Grand Prix) wired through the same booking API.

Brand-grade posture

Security and accessibility are non-optional at this scale.

A high-traffic site for a BMW USA property gets scrutinized. Recent security work hardened the client bundle, removed inlined credentials, and tightened build hygiene. Accessibility statement is live, and ADA-grade work continues.

01
Server secrets stay server-side
Recent hardening removed inlined credentials from the Gatsby static bundle.
02
reCAPTCHA on every form
Bot protection on all 19 booking and contact endpoints.
03
JWT-based admin auth
Signed tokens for admin tooling, bcrypt-hashed credentials, cookie-bound sessions.
04
Joi schema validation
Server-side Joi validation on every form submission; no trust on client payload.
05
Accessibility page + ongoing work
Dedicated accessibility statement and an active workstream for ADA-grade UX.
Recent shipped

Six years in and still shipping.

  1. a1c24ec

    Blockboard attribution pixel on landing page

    New attribution source plumbed through the homepage without breaking Gatsby static caching.

  2. 0a5e991

    M Drift Academy, Performance Challenge, Father's Day cars & coffee

    Three new experience offerings added to the Experiences program with full schedule + booking integration.

  3. 3a80b28

    Security: remove inlined server secrets from client bundle

    Bundle hardening - server-only credentials stopped leaking into static JS. Defense-in-depth for a high-traffic BMW USA property.

  4. 3dbf1c3

    Half Off Full Summer banner: May 15 - Sept 13, 2026

    Seasonal promotion with date-windowed auto-publish, scheduled months ahead.

  5. 4fa2f5b

    Father's Day banner for MINI: May 15 - June 30, 2026

    Cross-brand promotion targeting MINI customers on the same calendar engine.

Tech stack

What it's built on.

Languages
JavaScript
+ SCSS
Gatsby SSG + Express API
Frontend
ReactGatsbyReach RouterFormikSCSSPostCSS
Backend
ExpressJWTbcryptcookie-parserhttp-proxy-middleware
Data
MongoDBgatsby-source-mongodbCSV exportJoi validation
Marketing ops
Google AnalyticsBlockboard attributionInstagram feedSitemap generation
Infrastructure
Docker ComposereCAPTCHACDN deliveryImage optimization
What we delivered

Six years of partnership. Still shipping.

The site at bmwperformancecenter.com is the work - and we're still adding to it.

1

A six-year engineering partnership

Since November 2019, we've shipped 4,222 commits to the BMW Performance Driving School platform - through redesigns, new sub-brand additions, seasonal calendars, security pushes, and BMW USA's evolving brand standards. Long-term partner, not a vendor.

2

A multi-brand surface under one codebase

BMW Driver's School, M School, MINI Driving School, BMW Motorrad, M Drift Academy, and Indianapolis programs all live in the same site - 57 page routes, shared components, distinct brand identities preserved per program.

3

A booking pipeline that handles real registration volume

19 distinct booking and inquiry flows from one-day school to international Motorrad tours, all backed by Joi-validated submissions, reCAPTCHA-gated forms, and MongoDB persistence with admin CSV export.

4

Marketing-ops infrastructure the team actually uses

Date-windowed promotional banners, channel-segmented landing pages, attribution pixels, gift cards, contest mechanics, and an admin tooling layer - the marketing team ships campaigns without filing engineering tickets.

5

Brand-grade security and accessibility posture

Recent security work hardened the client bundle, removed inlined secrets, and tightened build hygiene. Accessibility statement live, ongoing ADA work, and security incident IDs tracked in the commit log.

Build with us

Need a long-term engineering partner?

We build and maintain platforms that compound in value year after year.

Get in touch->