Privacy Policy
Last updated: September 27, 2026
AutoTrack ("we," "us," "our") provides a vehicle maintenance tracking service at autotrackbay.com. This policy explains what information we collect when you use it, why we collect it, and what control you have over it.
What we collect
When you create an account, we collect the email address and password you provide. Your password is never stored in plain text — it's hashed with bcrypt before it touches our database, so we can't see it and neither can anyone who might gain unauthorized access to the database.
When you use the app, we store the data you enter about your own vehicles: VIN, year, make, model, trim, color, license plate, purchase details, and any nickname you give a vehicle. We also store the maintenance records, mileage logs, and cost data you log, along with the preferences you set (units, currency, reminder timing).
For security, we log login attempts (the email used, whether it succeeded, and the IP address it came from) so we can detect and lock out repeated failed login attempts on an account.
What we don't do
- We don't sell your data to anyone.
- We don't run ads or ad-tracking scripts on this site.
- We don't use analytics cookies or third-party tracking pixels.
Third parties we rely on
A few features send a narrow slice of data to outside services in order to work:
- NHTSA (vpic.nhtsa.dot.gov) — when you decode a VIN, your browser sends that VIN directly to the U.S. government's public vehicle database to look up the year/make/model. This request comes from your browser, not our server, and carries no other information about you.
- TomTom — if you use the nearby gas station or fuel price lookup, we send the location you provide to TomTom's API to find nearby stations and prices.
- Cloudflare — our infrastructure provider, which sees standard connection metadata (like your IP address) for any request to our site, as any hosting provider would.
How long we keep it
We keep your data for as long as your account exists. If you delete your account, your vehicles, maintenance records, mileage logs, and login history for that account are permanently deleted immediately — this isn't a request you have to wait on, it happens right away from your account settings.
Your rights
You can access, correct, export, or delete your data at any time without contacting us:
- Access & correction: edit your profile, vehicles, and records directly in the app.
- Export: download a CSV of everything you've logged from Settings → Export Your Data.
- Deletion: permanently delete your account and all associated data from Settings → Danger Zone.
If you're in the EU/UK, EEA, or California, these self-service tools are how we fulfill GDPR/UK GDPR access, rectification, erasure, and portability requests, and CCPA/CPRA rights to know, delete, and obtain your data. If you need help exercising these rights, or want to reach us for any other reason, contact us at [your contact email].
Security
Passwords are hashed with bcrypt. Sessions use short-lived access tokens plus a revocable refresh token — you can sign out of every device at once from Settings. All traffic to the site is encrypted (HTTPS/TLS). Accounts are automatically locked after repeated failed login attempts.
Children's privacy
AutoTrack is not directed at children under 13, and we don't knowingly collect data from them.
Changes to this policy
If this policy changes in a material way, we'll update the date at the top of this page.
Contact
Questions about this policy or your data: [your contact email].