Privacy Policy

Last updated: 12 October 2026

In short

• Plates and faces in your photos are blurred automatically.
• Unblurred photos stay private. Unsaved ones are deleted after 14 days.
• Nobody else sees your exact location. Others see the city only.
• Your profile and your cards are public.
• We do not sell your data and we do not show ads.

1. Who we are

The controller of your data is [COUNSEL REVIEW: company name, registered address, KRS number], a company registered in Poland. Contact us at support@carspottone.com.

2. What we collect

2.1 Stored on our servers

We store this in Supabase, hosted in the EU.

• Your email address.
• Your username, avatar and rating.
• Your photos. See section 6.
• The location of each spot (exact GPS, city and country) and the time you captured it.
• The weather at the spot.
• Your cards, decks, duels and match history.
• Your friends, your blocks, and the reports you make.
• Your purchases: your Stripe customer ID, what you bought, and the time you waived your right of withdrawal.
• Your subscription tier.
• Your withdrawal requests and what you wrote in them.
• Removal requests. See section 11.
• Feedback you send: the text, an optional screenshot, your device and OS, and your recent screens.
• Your push tokens.
• Your email preferences.
• Your 18+ confirmation (or your under-18 answer) and its date.
• Your setting for photo use. See section 5.
• Your IP address, briefly, for security and rate limiting.

2.2 Stored on your device

• Your sign-in session.
• Your settings: theme, haptics, reveal speed, default garage and others.
• An offline queue of spots waiting to upload.
• Cached card images.

On the web, we keep the same things in your browser storage, plus Supabase sign-in cookies. That is all. We use no advertising or analytics cookies, so there is no cookie banner.

2.3 Sent to services that process it for us

These services process your data for us under their data-processing terms.

• OpenRouter sends your photo to Google (Gemini) and OpenAI. They identify the car and find plates and faces.
• Open-Meteo gets the exact coordinates of the spot, to give us the weather.
• OpenStreetMap Nominatim gets the exact coordinates, to give us the city and country.
• Stripe gets your email and your payment. We never see your card details.
• Resend or Amazon SES gets your email address and the message, to send our emails.
• Expo (mobile) and your browser’s push service (web) get your push token and the notification text.
• Sentry gets error reports. When an error happens, it also gets a replay of the screen session. Both are linked to an anonymised user ID.
• Vercel hosts the app.
• Supabase runs our database, sign-in and file storage.

We use no analytics or ad trackers. We do not sell your data and we do not share it with advertisers.

3. How we use it

• To run your account, your cards, your decks and your duels.
• To identify the car in your photo and find plates and faces.
• To tag each spot with a place and the weather.
• To process purchases and withdrawals.
• To handle removal requests and reports.
• To stop cheating, keep the service secure and limit abuse.
• To find and fix errors.
• To send you notifications and emails.

4. Legal bases

Under the GDPR (Article 6), we rely on these bases.

• Contract: your account, cards, duels and purchases.
• Legal obligation: purchase records, withdrawals and removal requests.
• Legitimate interest: anti-cheat, security, rate limiting and error reports.
• Consent: push notifications and the location permission. You can withdraw consent at any time.

The photo uses in section 5 are opt-out. You can switch them off at any time.

5. Your photos in shared cards and AI

By default, we may use your photos to:

• be the picture on pay-to-win (P2W) deck cards that other players receive, and
• improve car recognition.

To turn this off, go to Settings and switch off “Use my photos for P2W cards”. It applies to future photos. Cards already made keep their picture. We never use your photos in ads.

6. How your photo is handled

1. We read the GPS position and time from the photo.
2. We strip all metadata from the photo on our server before we store it.
3. We detect plates and faces automatically and blur them.
4. Until the photo is final, we keep the unblurred version stored privately. It is never public. You can use it to review or redo the blur.
5. We make public copies only of the final photo.
6. Unsaved spots, pre-crop copies and extra photos are deleted automatically after 14 days (spots waiting on a car request are kept until it’s resolved). A saved card waiting for its plate check keeps its private photo until you finish it. A daily cleanup does this.

Detection can miss something. You can also mark a detection as wrong (for example “No plate”) and continue. Then we publish the photo as you confirmed it, and you are responsible for it. See our Terms.

7. What others can see

• Your public profile at carspottone.com/u/your-name. Anyone can see it without an account. It shows your username, avatar, rating, rarity score, card count and your cards. Each card shows the car, stats, photo, and the city and date you spotted it.
• The public leaderboard shows your username, avatar, rating, card count and rarity score.
• Your exact location is never shown to anyone else. Others see the city only.
• Nearby alerts (coming): if you turn them on, we may tell you a specific car was spotted near you. The alert gives only the car and an approximate area (within about 5 km). It never says who spotted it or the exact place.

8. Push notifications

We notify you when:

• your spot is ready,
• a card’s stats or details are corrected,
• a car you requested is added, and
• a nearby alert applies, once they launch (opt-in).

We store your push token. Turn notifications off in Settings or in your device settings.

9. Location

We ask for location permission to tag your spots. If you refuse, we use the photo’s GPS if it has one. Your exact coordinates stay private to you. See section 7.

10. Children

carspottone is for people aged 18 and over. You confirm this when you sign up. If you say you are under 18, we block the account and it stops working. If we learn that an account belongs to someone under 18, we close it and delete its data.

11. Removal requests

Car owners and people in a photo can ask for removal at /removal.

• Car owners upload their vehicle registration certificate. You can cover personal details. We only need the make and model.
• We store it privately and delete it 30 days after we resolve the request.
• We reply within 30 days.

To report illegal content or a copyright problem, use /legal/report.

12. How long we keep it

• Account data: while your account exists, and 30 days after you delete it.
• Backups: your account may remain in an encrypted daily backup for up to 30 more days after it is deleted, in addition to the 30 days above.
• Unsaved spots, pre-crop copies and extra photos: deleted after 14 days (spots waiting on a car request are kept until it’s resolved). A saved card waiting for its plate check keeps its private photo until you finish it.
• Removal documents: 30 days after we resolve the request.
• Purchase and withdrawal records: as long as tax and consumer law require [COUNSEL REVIEW: Polish retention period].
• Error reports: as long as Sentry keeps them [COUNSEL REVIEW: confirm days].

13. Deleting your account

You can delete your account yourself. In the app or on the web, open Settings, choose Delete account, type DELETE and confirm.

• Your account is locked right away and deleted for good after 30 days.
• Sign in within those 30 days and you can restore it.
• Your subscription is cancelled now. Restoring your account does not bring it back.

We delete your login, profile, cards, decks, spots, photos, friends and blocks, feedback, notifications and push tokens. We keep:

• Past duels, for your opponents. You show up as “Deleted player”.
• Purchase and withdrawal records, with no link to you. Polish tax and consumer law requires this.
• Photos already used on shared cards, with plates and faces blurred and no link to you.

More on /delete-account. Can not sign in? Email support@carspottone.com.

14. Your rights

Under the GDPR you can:

• access your data,
• correct it,
• delete it,
• take a copy of it (portability),
• object to our use of it,
• restrict our use of it, and
• withdraw your consent.

To take a copy of your data now, open Settings and choose Download my data. You need your password, or a sign-in from the last 10 minutes. For anything else, email support@carspottone.com. We reply within one month. You can also complain to the Polish supervisory authority, the Prezes Urzędu Ochrony Danych Osobowych (uodo.gov.pl), or to the authority in your own country.

15. International transfers

Some of our services are outside the EU, for example in the US. We rely on the EU–US Data Privacy Framework or on Standard Contractual Clauses.

16. Security

• Your data is encrypted in transit and at rest.
• We strip metadata from photos.
• Admin access is limited.

17. Changes

If we make a material change, we tell you in the app and by email 30 days before it takes effect.