PUBLIC BETA PRIVACY NOTICE
Workshop data stays local by default.
This notice describes the anonymous WrenchGuide public beta at wrenchguide.com. Public account sign-in is deliberately disabled for this beta; this notice will be updated before account-backed features are enabled.
Effective: 18 August 2026
Who is responsible
WrenchGuide is an independent project operated by Frank Haughton in the Netherlands. For a privacy, access or deletion request, use the Beta feedback form, write Privacy request in the message, and include a WrenchGuide feedback receipt (WG-…) when the request relates to a previous submission. Add a reply email only if you want a direct response. Do not send a VIN, registration plate, home address or other unnecessary private information.
What stays in your browser
Garage profiles, workshop progress, readiness choices, notes, photos, theme preference and local backup data are designed to remain on your device in browser storage unless you deliberately use a server-backed feature. WrenchGuide also uses a service worker/offline cache for public application content; API and account responses are excluded from that cache.
The current anonymous beta does not use advertising or behavioural-analytics cookies. Local browser data remains under your browser/device control and can be removed by clearing WrenchGuide site data; export a workshop backup first if you want to keep it.
When data leaves your device
Beta feedback
If you submit feedback, WrenchGuide stores the vehicle description you choose to enter, a 1–5 usefulness rating, your feedback text, the page path, submission time and an optional reply email. Please do not put a VIN, registration plate, address or other sensitive/private information into free text.
Abuse prevention
For feedback rate limiting, WrenchGuide derives a keyed one-way fingerprint from request network metadata and user-agent data. The application stores that fingerprint, not the raw IP address or user-agent string, in its feedback rate-limit table.
RDW vehicle lookup
When you request a Dutch registration lookup, the registration is sent through WrenchGuide's server-side lookup route to RDW so the requested public vehicle information can be returned. Do not use a number plate belonging to someone else without a legitimate reason.
Normal web delivery
Cloudflare processes ordinary request information such as IP address, request headers and security signals to deliver and protect the site. WrenchGuide's application is self-hosted in the Netherlands behind Cloudflare Tunnel; its PostgreSQL database is not exposed directly to the internet.
Why this data is processed
The beta processes feedback, limited request metadata and security signals for the legitimate interests of operating the service, preventing abuse, diagnosing failures, improving repair journeys and responding when a tester asks for a reply. RDW data is requested only when you deliberately invoke the lookup feature. WrenchGuide does not sell personal data or use beta feedback for targeted advertising.
Retention
- Beta feedback: scheduled for deletion after 365 days.
- Feedback rate-limit fingerprint: scheduled for deletion after one day.
- Local Garage/workshop data: remains on your device until you delete site data or replace it through WrenchGuide's local backup/restore controls.
- Operational/security request metadata: retained only as needed for service operation, abuse investigation and security, then rotated according to the active infrastructure logging policy.
- Backups: protected database backups exist for disaster recovery. They are not used as an alternate live dataset; deletion requests are reconciled if recovery from an older backup is ever required.
Recipients and international processing
Personal data is not sold. Data may be processed by Cloudflare for web delivery/security and by RDW only when you request a Dutch vehicle lookup. The WrenchGuide application/database itself is operated on private self-hosted infrastructure. Raw beta feedback is kept first-party and is not copied wholesale into public issue trackers.
Cloudflare and its subprocessors may process some protected request data outside the European Economic Area. Cloudflare's published Data Processing Addendum provides for the EU Standard Contractual Clauses and additional safeguards where a transfer is not covered by an adequacy mechanism. See the Cloudflare Data Processing Addendum for the current terms.
Your rights
Where the GDPR applies, you may have rights to access, correct, erase, restrict or object to processing of your personal data, and in some circumstances to portability. Because the anonymous beta intentionally stores little identifying information, a WG feedback receipt is the safest way to identify a feedback submission without collecting more identity data just to service a request.
You can also lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
Accounts are not part of this public beta
Account persistence and Google sign-in code exists behind a disabled production gate, but public sign-in is not enabled. Before that changes, WrenchGuide will publish an expanded account privacy notice covering authentication, synced Garage data, processors, retention, export and deletion controls.