Privacy policy

Last updated: [date]

MotorFlip is run by [company name], [address], KvK [number] ("we"). This policy explains what we store about you, why, and for how long. Questions or requests: [email address].

What we store

• Your account: email address, name (if you give one), a hashed password (we can't read it), when you signed up and accepted the terms, and, if you turn it on, your two-factor sign-in secret and hashed recovery codes.
• What you create: your notes, starred and hidden cars, dashboard layout, appearance settings, and purchases you record.
• Sign-ins and security: the devices you're signed in on (browser, IP address, last activity), and a log of the pages you visit and actions such as signing in, with your IP address. We use these to keep accounts safe and to find problems.
• Payments: if you subscribe, Stripe handles the payment. We store your Stripe customer number and your subscription's status and period, never your card details.

Why (legal basis)

• To provide the service you signed up for (contract): your account, what you create, your subscription.
• To keep the service secure and working (legitimate interest): sign-in records and the activity log.
• To meet legal obligations, such as keeping payment records for tax purposes.

How long

• The activity log with IP addresses: 30 days, then deleted automatically.
• Sign-ins: until they expire or you sign out.
• Your account and what you create: until you delete your account. Purchases you recorded are then kept without your name, as anonymous price data.
• Backups: up to 7 days.
• Payment records: as long as tax law requires (in the Netherlands, 7 years), at Stripe and in our accounts.

Who else sees it

Nobody sells or receives your data for marketing. We use these processors: Stripe (payments) and [hosting provider] (servers in [country/EU]). Admins of MotorFlip can see account details and the activity log to run the service; your notes, stars and hides are private and not shown to admins.

Cookies and storage

MotorFlip doesn't use tracking or advertising cookies. Your browser keeps your sign-in token and a few display preferences (theme, filters) in local storage. The fonts are loaded from Google Fonts.

Your rights

You can see, correct and download your data (Settings → Your data → Download my data) and delete your account (Settings → Your data). You can also ask us to restrict or object to processing, and you can complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).