WannaSpot · TRANSPARENCY FIRST

Privacy notice — draft

Working draft to be completed before public launch. Controller, contacts and actual providers are not yet configured. This is not legal certification.

Data and purposes

Email, name, password hash and sessions manage your account. Favourites, collections, notes and vehicle dimensions serve the requested features. Reports enter the review queue. Technical metadata supports security and abuse limits.

Proposed retention, to be enabled in deployment

Sessions up to 14 days, reset tokens 30 minutes, verification 1 hour. Private data until account deletion. Reports for review and minimised audits: proposed 12 months; encrypted backups: proposed 30 days. Scheduled cleanup and actual retention must be validated in production.

Data control

After signing in, you can export and delete data from your profile page. Backups may retain copies until rotation; a restore must reapply deletion requests.

Maps and external services

Map view loads images from OpenStreetMap and shares your IP address, Referer and viewed areas with the provider. Street View links open Google on request. We do not send favourites or private notes to these services. See Cookies and external services for details.

Providers and rights

Hosting, SMTP, legal bases, any transfers and contact details for exercising rights must be completed with the controller’s actual information. Public release remains subject to this completion.