Privacy Policy

Who we are

Motolog is a car maintenance tracking service operated by Craig Newlands, based in the United Kingdom. You can contact us at hello@motolog.co.uk.

What data we collect

• Your name, email address and profile image (via Google sign-in)
• Vehicle registration history, VINs and vehicle details, including MOT test results, advisories and mileage returned by the DVLA and DVSA
• Maintenance job records you log, including dates, mileage, costs, notes, parts and custom labels
• Reminders you set for future maintenance
• Photos you upload for your vehicles or maintenance records
• Technical and usage information collected by our hosting and web analytics provider, such as page views, device/browser information and IP-address-derived information

How we use your data

• To provide, secure and improve the Motolog service (contract and our legitimate interests in operating it)
• To send the maintenance reminder emails you have requested (contract)
• To retrieve vehicle and MOT information when you add or refresh a vehicle (contract)
• To understand aggregate site use and keep the service reliable (our legitimate interests)

We do not sell your data to third parties or use it for advertising.

Service providers and transfers

We use Vercel to host Motolog and provide Vercel Web Analytics; Supabase to store our database, short-lived hashed email sign-in codes and private photo Storage; Google OAuth through Auth.js for optional Google sign-in; and Resend to deliver sign-in codes and reminder emails. We send registration numbers to the DVLA Vehicle Enquiry service and the DVSA MOT History service to retrieve vehicle and MOT data.

These providers may process data outside the UK or EEA. Where a transfer occurs, we rely on the provider's applicable transfer safeguards. Provider locations and safeguards should be checked before launch and when providers change.

Retention and deletion

We keep account, vehicle, maintenance, reminder and photo data while your account is open. You can delete your account from Settings; this deletes the account's relational records and associated private Storage objects. Provider backups and security logs may retain limited data for their configured retention period before expiry. We retain data longer only where necessary for legal claims, security or legal obligations.

Your rights and requests

Subject to applicable law, you may ask us to access, correct, erase, restrict or transfer your personal data, or object to processing based on legitimate interests. Signed-in users can download a portable JSON copy of their structured account data from Settings. Photo files and other requests can be made by email to hello@motolog.co.uk from the email address on your account. We may need to verify your identity and will normally respond within one month.

You may also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.

Cookies

We use authentication cookies to keep you signed in and protect the sign-in flow, plus a first-party preference cookie to remember whether you chose system, light or dark appearance. Vercel Web Analytics is enabled on the site. The current implementation does not set advertising cookies or a separate analytics cookie; Vercel may still process technical and usage information to provide analytics. We will update this notice if that behaviour changes.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. This is an operational draft for owner and professional review, not legal advice.