Privacy policy

This notice describes how Klarspur processes personal data under the Swiss Federal Act on Data Protection (FADP / nDSG) and, where it applies, the EU GDPR. It follows the structure of the Creabyte privacy notice and the retention rules in the project security notes. It is an operator draft, not a counsel opinion. Controller Creabyte (creabyte.com), Einzelunternehmen (inaktiv) Patriotenweg 9, 4500 Solothurn, Switzerland Phone: +41 62 390 11 22 Email: webform@creabyte.com UID: CHE-104.790.761 Contact: the contact form on this website What is processed Necessary: server logs. IP address and user agent are stored only as keyed hashes, for security and delivery. Rate limits store a hash, not the raw IP. Account: email and session. Passwords are stored only as a hash. Location: only for community reports, planned routes and active navigation. Live map presence: while you navigate and stay signed in, a coarsened position can appear to other drivers who are also navigating; your username is shown when they tap your icon. That is on by default; you can turn it off under Settings. The position is kept only for about two minutes and is never a history. Where enabled, positions are relayed in real time through our own message server (MQTT) on the same host; it stores nothing. Connected car account (Tesla, Smartcar, BMW CarData): if you link your car maker account, we store encrypted tokens and the last known battery level. When you allow location, we also keep the last reported position with a timestamp for route start and charging plans — not a track. You can turn live battery and car location off per vehicle, or disconnect anytime. We never wake or command the car. Community reports: content, place and photos. Photos are stored without EXIF. Contact form: email and message, used only to reply. Basis: pre-contractual steps or legitimate interest (FADP) and, where the GDPR applies, Art. 6(1)(b) or (f). Premium, where offered: payment data is handled by Stripe, not stored on our servers. Map: the browser loads tiles from the configured map provider (OpenFreeMap demo style when that option is on). That provider sees the IP address. CAPTCHA: only when an admin has set a provider (Cloudflare Turnstile or hCaptcha). Retention Guest routes: deleted 2 hours after planning unless navigation or a handoff still references them. Expired or revoked sessions: deleted 30 days after expiry or revocation. Report note and photos: removed 90 days after the report ended. History: 30 days on the free plan, 365 days on Premium. Account deletion: anonymised at once; residual data removed within 30 days. Rights You may request access, correction, deletion and restriction and, where the GDPR applies, portability and objection. Supervisory authority in Switzerland: FDPIC (EDÖB). Use the contact form. Do not send special-category data through the form unless it is necessary. Wingman: a signed-in driver can invite up to two co-pilots via a single-use link (15 minutes). A Wingman joins without an account, sees the same live navigation state, may change destinations and file traffic reports attributed to the driver (flagged “via Wingman”), and uses the driver’s Premium features. Wingmen cannot change account, billing, or vehicle connections. The Wingman session ends when the driver’s session ends.