Draft template. Have a lawyer review it before launch.
1What we collect
For owners: name, WhatsApp number, an encrypted password, car details, and a delivery address when ordering. If an owner saves where they parked, we keep that spot until they clear or replace it.
For people scanning: the chosen reason, message text, an optional photo with its location removed, an optional contact method, a random session ID and, only if they tap “Add my location”, their position when sending. Only the owner sees it. No account is created.
On the order form: what you type is saved once a valid number is entered, even if you don't finish, so we can call you. It's deleted automatically after 7 days.
2What we never show
Your number, name, address and plate are never shown to the person scanning.
3Message checks
Message text is checked automatically before delivery to stop insults, threats and advertising. A stopped message doesn't reach the owner; it's kept for review and then deleted.
4IP addresses
We don't store IP addresses as they are, only an irreversible fingerprint used to limit abuse.
5Retention
Messages are deleted automatically after 90 days, with their photo and location. Orders are kept for accounting and delivery tracking.
6Tracking
No third-party analytics. We use technical cookies for your session and language. If an ad pixel is switched on, the website and order pages load Meta's pixel, and each order sends Meta a phone number hashed so it can't be reversed. The sticker scan page and your account never load it. Maps come from OpenStreetMap and directions from Google Maps, which only receive a position when the owner opens them.
7Your rights
You can ask to access, correct or delete your data through the Contact page.