Your data belongs to you.

What we collect.

Website account details, your chosen pseudonym and consent settings. If you connect Tesla, we store encrypted access/refresh tokens, an encrypted vehicle identifier with a separate keyed fingerprint, model, odometer observations, badge awards and minimal sync results.

What becomes public.

After email verification, your public profile shows your chosen pseudonym. New signups default to a public profile, with an option to choose private at signup or later in Account Privacy. Vehicle nickname, model, accepted mileage, observation dates, rank and badges appear only for vehicles you separately choose to share. A private profile returns a 404. VINs, email, real names, location, Tesla account details and live vehicle status are never public.

Control and deletion.

Turn off visibility in Account or My Vehicles to remove public standings immediately. Disconnect deletes local tokens and hides linked cars. You can also revoke consent in Tesla’s own account settings. Delete your account with password confirmation to remove vehicles, snapshots, badges, local tokens, sessions and password reset records immediately. Minimal audit records retain action, time and internal IDs, without credentials or personal contact details.

Retention and cookies.

Essential session and CSRF cookies support sign-in and account security. Third-party analytics are off. Operational sync/support records are pruned after 90 days and audit records after 365 days using the operator’s manual maintenance command. Encrypted backups can retain deleted data for up to 30 days under the proposed operator policy; the operator must implement and confirm that policy before launch.

No location or commands.

We do not request GPS permissions, store full vehicle responses, record speed or remotely control your car. Public page visits never contact Tesla.