Privacy Policy

Last updated: June 2026 ## 1. Introduction Grand Theft Garage ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it. ## 2. Data We Collect ### 2.1 Account Information When you register, we collect: - Your email address - A password (stored as a secure hash — we never store your plain-text password) - A display name (optional) - A profile picture (optional, uploaded by you) ### 2.2 User Content We store data you voluntarily add to the Service, including: - Vehicle records (names, upgrades, notes, custom images) - Property records (garages, properties, floor layouts) - Garage assignments and reserved spaces ### 2.3 Session Data We use cookies to keep you logged in between visits. These are essential session cookies set by our authentication provider (Supabase) and do not track you across other websites. ### 2.4 Technical Data Our hosting provider (Vercel) may collect standard server logs including your IP address and browser type for the purposes of security monitoring and performance. We do not use this data for profiling or marketing. ## 3. How We Use Your Data We use your data solely to: - Provide and maintain the Service - Authenticate your identity and keep your account secure - Store and display your vehicle and property collection - Send password reset emails when requested by you We do not use your data for advertising, profiling, or any purpose other than operating the Service. ## 4. Cookies The Service uses the following cookies: | Cookie | Purpose | Type | |--------|---------|------| | sb-* (Supabase session) | Keeps you logged in | Essential | We do not use analytics cookies, advertising cookies, or any third-party tracking cookies. Because we only use essential cookies, we are not required to obtain cookie consent under most regulations — however we disclose their use here for full transparency. ## 5. Data Sharing We do not sell, trade, or rent your personal information to any third party. Your data is processed by the following sub-processors solely for the purpose of operating the Service: - **Supabase** — database and authentication hosting - **Vercel** — web application hosting and edge delivery Each of these providers maintains their own privacy and security standards. ## 6. Data Retention Your data is retained for as long as your account is active. If you delete your account, all associated data (vehicles, properties, profile information) is permanently deleted from our systems. Deletion is immediate and irreversible. ## 7. Your Rights Depending on your location, you may have the following rights: - **Access** — request a copy of the personal data we hold about you - **Rectification** — request correction of inaccurate data - **Erasure** — request deletion of your account and all associated data (available directly in the app via Settings > Delete Account) - **Portability** — request your data in a portable format - **Objection** — object to certain types of processing To exercise any of these rights, please contact us through the application. ## 8. Data Security We take reasonable technical and organisational measures to protect your data, including: - Passwords stored using secure hashing (managed by Supabase Auth) - HTTPS encryption for all data in transit - Row-Level Security (RLS) policies enforced at the database level, ensuring users can only access their own data No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security. ## 9. Children's Privacy The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly. ## 10. Changes to This Policy We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this document when changes are made. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy. ## 11. Contact If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us through the application.