Privacy policy

Last updated: 11 November 2026

In short

To use the tool you need an account (email and password).
Your email and your projects are stored, on servers in the EU.
No advertising or tracking cookies are used, and you are not followed across websites.
You can delete your account and all your projects whenever you want from the app itself.

Data controller

[FULL NAME]. Contact: [CONTACT EMAIL].

Your account

When you create an account we store your email, your password (encrypted: nobody can read it, not even us) and an account identifier, and from then on your projects (designs, variants and thumbnails) are saved in the cloud so you can open them on any device. Each account can only see its own projects.

Where: at Supabase, on a server in Frankfurt (EU). Supabase acts as data processor.
What for: to give you the service you ask for when you create the account (saving and syncing your projects), under the terms of use you accept when you create it. The version of those terms and the date you accepted them are also stored, as proof.
How long: for as long as you have the account. With «Delete my account», in the account menu, the account and all its projects are deleted from the cloud immediately.
Your session is remembered in your browser (local storage) until you sign out. When you sign out, the local copy of the account is deleted.

What is stored on your device

So that the tool is fast and you can keep working offline, the website stores in your own browser (local storage and IndexedDB) a copy of your projects, your session, your preferences (theme, favourites) and the cabinet thumbnails. This is essential for the tool to work, so it does not need consent. The copy of your projects is deleted when you sign out, and everything else whenever you like from your browser settings («clear site data»).

Sharing links

When you share a design, the whole design travels inside the link itself, in the part after the «#». That part is not sent to our server: it is only read by the browser of whoever opens the link. Anyone who has the link will be able to see the design.

Hosting

The website is served from Cloudflare. Like any web server, it receives your IP address and technical data from your browser in order to deliver the page and protect it from attacks. Cloudflare acts as data processor and may process data outside the EU with the safeguards of the EU-US Data Privacy Framework and standard contractual clauses.

Visit statistics

To know how many visits the website gets, Cloudflare Web Analytics is used, which counts visits in aggregate without cookies and without identifying you or following you across websites.

Driver database update

Once a day, the app checks whether there is a new version of the open driver database, published on GitHub Pages (GitHub, Inc.). As with any download, GitHub receives your IP address. No other data is sent.

Contact form

The website has a form to ask questions, request a cabinet or a driver, suggest improvements or report bugs. Only what you send in it is stored:

What: the type of message and the message and, if you give them, your name, your email, a link and your browser details (only when reporting a bug, and you see them and can delete them before sending).
Why: to read your message and reply.
Legal basis: your consent, when you send the form.
Where and for how long: at Supabase, on a server in the EU, for 12 months at most; after that it is deleted automatically.
Against spam: a fingerprint of the connection that changes every day (not your IP address) is stored to stop mass sending, and Cloudflare Turnstile checks that you are not a robot. Turnstile does not use advertising cookies.

Legal basis and retention

Account data is processed because it is necessary to give you the service you ask for when you create it (performance of the terms of use). Technical connection data is processed on the basis of legitimate interest, to serve the website and keep it secure, and is kept for as long as the providers set in their logs. No data is sold, none is passed to third parties for advertising and no automated decisions are made about you.

Your rights

You can delete your account yourself from the app, and download any project from «Projects». You can also request access, rectification, erasure, objection, restriction and portability of your data by writing to [CONTACT EMAIL]. If you think your request has not been handled properly, you can complain to the Spanish Data Protection Agency (AEPD). Spanish law applies.

Changes

If the website adds features that use other personal data, this policy will be updated before they go live.