Privacy policy

1. Controller

[Company name and legal form], [Street and number], [Postcode and city], [Country]. Email: [contact@example.com].

For all privacy questions and requests, write to [privacy@example.com]. We are not required to appoint a data protection officer.

2. Your account

We store your name, email address, a hash of your password (never the password itself), your preferences (language, units, currency, date format, time zone, notification settings), your plan, the storage you use, the date of your last activity, and which version of these terms you accepted and when.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR). We keep this data until you delete your account; after a deletion request the account is locked and can be restored for 30 days, then everything is purged. If you don't confirm your email address, the account is deleted after 7 days. If you don't sign in for 3 years, we delete your account the same way; we email you at 24 and 35 months first, and signing in once keeps it.

3. Signing in and security

When you sign in we create a session (a random token in a cookie plus your browser's user agent) that ends 30 days after sign-in. If you use passkeys we store their public keys. We never store your IP address with your account or sessions.

To stop password guessing and email flooding we count requests per IP address in the server's memory only, for at most 5 minutes. Our web server keeps technical access logs (IP address, page, time, status) for 7 days to detect abuse.

Legal basis: Art. 6(1)(b) GDPR, and our legitimate interest in a secure service (Art. 6(1)(f) GDPR).

4. Your vehicles and logbook

Everything you enter about your vehicles: make, model and specifications, VIN or frame number, licence plate, purchase details, services, modifications, fuel and charging entries, meter readings, maintenance plans, costs, documents and notes, as well as uploaded receipts, photos and PDFs. All of this is optional.

VINs, licence plates, document and policy numbers, notes and all uploaded files are encrypted by us before they are stored (AES-256-GCM). Metadata such as location data is removed from uploaded images. Before storing a file we check it for malware on our own server (legitimate interest in a secure service, Art. 6(1)(f) GDPR); files that fail the check are not saved.

Legal basis: Art. 6(1)(b) GDPR. We keep the data until you delete it, the vehicle or your account.

5. Reminders and emails

We send emails you need for your account (confirmation, sign-in links, password reset) and, if you keep them switched on, maintenance reminders. Web push notifications are only sent once you allow them in your browser; we store the push address your browser gives us until you revoke it. Reminders contain your vehicle's nickname and what's due, never its VIN or plate. We keep your notification history for 12 months.

Legal basis: Art. 6(1)(b) GDPR. You can switch reminders off in the settings at any time.

6. Sharing and ownership transfer

You can create share links to show a vehicle's history, for example to a buyer. You decide what is included; the full VIN, plate, notes, costs, documents and receipts are hidden by default, and document numbers are never shared. Links expire after 7, 30 or 90 days and can be revoked at any time. We count views but don't record who viewed. A PDF with the same choices is created on our own server and not stored. When you transfer a vehicle to a new owner, we store their email address until the transfer is completed or expires (14 days). The new owner gets a copy of what you choose (service history, mods, schedule, fill-ups, photos and the VIN by default; plate, expenses, documents, receipts and notes only if you tick them; document numbers and your nickname for the vehicle never). Your vehicle then stays in your account as a read-only archive.

Legal basis: Art. 6(1)(b) GDPR, on your instruction.

7. Support

Our staff cannot see the content of your logbook. If you need help, you can grant support access for 24 hours; you can revoke it at any time. Every access is logged and the log is kept for 12 months.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

8. Closed beta and feedback

During the closed beta, signing up requires an invite code. We store only a hash of the code and, if the invite was sent to you personally, your email address; unused invites are deleted after 60 days. Feedback you send us (stored encrypted, with the page you were on and an optional screenshot) is kept for 12 months or until it has been dealt with.

Legal basis: our legitimate interest in a controlled launch and in improving Revlog (Art. 6(1)(f) GDPR).

9. Statistics and error reports

We count page views with a self-hosted, cookieless analytics tool that stores no IP addresses and doesn't access your device. Technical error reports are collected with a self-hosted tool after removing personal data, and kept for 30 days.

Legal basis: Art. 6(1)(f) GDPR (a stable and improving service).

10. Cookies

We only use cookies that are strictly necessary to provide the service you request: the session cookie that keeps you signed in and a short-lived cookie used while signing in with a passkey (§ 25(2) no. 2 TDDDG). We use no tracking or advertising cookies, so there is no cookie banner.

11. Service providers

We use the following processors, each bound by a data processing agreement (Art. 28 GDPR):

• Hetzner Online GmbH, Germany: servers, database and encrypted backups.
• Cloudflare, Inc. (R2 storage, EU jurisdiction): stores your uploaded files, which are encrypted before they leave our servers. Cloudflare never has the keys.
• Hostinger International Ltd. (mail servers in the EU): sends our emails.
• Browser push services (e.g. Google, Mozilla, Apple): deliver push notifications, which are end-to-end encrypted and contain only a short title and a link.
• NHTSA vPIC (US Department of Transportation): to recognise your vehicle we send only the first 11 characters of the VIN, which identify the model but not the individual vehicle, and no information about you.

12. Transfers outside the EU

Cloudflare's parent company is based in the USA. Transfers are covered by the EU-US Data Privacy Framework and standard contractual clauses (Art. 45, 46 GDPR). As your files are encrypted before upload, Cloudflare cannot read them.

13. Your rights

You have the right to:

• access your data (Art. 15 GDPR) and receive a copy of it in a portable format (Art. 20 GDPR): in the app via Settings → Privacy → Export;
• have incorrect data corrected (Art. 16 GDPR): everything is editable in the app;
• have your data deleted (Art. 17 GDPR): Settings → Privacy → Delete account;
• restrict processing (Art. 18 GDPR) and object to processing based on legitimate interests (Art. 21 GDPR);
• withdraw consent at any time with effect for the future (Art. 7(3) GDPR);
• lodge a complaint with a supervisory authority (Art. 77 GDPR), for example [Competent data protection supervisory authority].

14. Minimum age

Revlog is intended for people aged 16 and over. By signing up you confirm that you are at least 16.

15. Security

All connections are encrypted (TLS). Sensitive fields and files are additionally encrypted in our application, backups are encrypted and kept for 30 days, and access to production systems is restricted to a small number of people. We have no automated decision-making or profiling.

16. Changes

If this policy changes materially, we will inform you in the app and ask you to confirm the new version before you continue.