Privacy Policy
This policy describes what information revsdb ("we", "our") collects when you use revsdb.com, how we use it, and the choices you have. If something is unclear, reach out and we'll explain.
What we collect
Account information. When you sign in, we use Google as an identity provider through Amazon Cognito. Google returns your email address and a stable user identifier to us. We do not receive or store your Google password. We store the email address, the identifier, a display name you choose, and a public profile slug.
Garage captures. When you log a car sighting to your garage, we store the photo you upload, plus the make, model, generation, trim, your caption, the timestamp, and — if you chose to include it — the coordinates of where the photo was taken. Photos are resized, watermarked, and stripped of EXIF metadata before they're saved. We keep a full-size copy of your original upload so you can re-download it.
Contact form submissions. When you send us a message through /contact/, we receive the topic you selected, your message, the email address on your Google account, and the IP address of the request. The IP is included so we can investigate abuse or spam; it is not published anywhere.
Automatic information. Our rate-limiting system temporarily records IP addresses and user identifiers to prevent abuse. Our hosting provider (Amazon Web Services) and CDN (Amazon CloudFront) log standard request information such as IP, timestamp, URL, and user agent in the course of serving traffic.
Analytics and advertising. We use Google Analytics to understand how the site is used, and Google AdSense to show ads on some pages. Both may set cookies or read device identifiers and receive information about your visit, including your IP address and pages viewed. See Google's partner-sites policy for details on what Google collects.
How we use it
- To sign you in and keep you signed in during a session.
- To display your garage to you, compute points, and rank you on the leaderboard.
- To show your public display name and avatar next to captures that appear in public listings.
- To respond to messages you send us through the contact form.
- To investigate and prevent abuse, spam, and misuse of the service.
- To measure how the site is used and to show ads, through Google Analytics and Google AdSense.
We do not sell your personal information, and we do not use your garage photos or profile information to train machine-learning models.
What's public
Your display name, public profile slug, total points, and capture count can appear on the public leaderboard. Individual capture photos may appear in public make/model listings attributed to your display name. Your email address, the IP address of your uploads, and the coordinates attached to a capture are not shown publicly.
Where your data lives
All revsdb data is stored in Amazon Web Services in the United States — photos in Amazon S3, profile and capture records in Amazon DynamoDB, identity records in Amazon Cognito, and contact-form messages are delivered by Amazon SES to the operator's inbox. If you access the site from outside the United States, your information will be transferred to and processed in the United States.
Who we share it with
- Google, when you sign in with a Google account (they see that you chose to sign in to revsdb).
- Amazon Web Services, our hosting and storage provider.
- Google Analytics and Google AdSense, for the measurement and advertising described above.
- Law enforcement or other authorities, if we are legally required to disclose information.
We do not share your information with any other third parties for their own marketing.
Cookies and browser storage
revsdb itself does not set any cookies. Sign-in tokens are kept in your browser's sessionStorage and are cleared when you close the tab or sign out. Google Analytics and Google AdSense set their own cookies under their own policies, which you can control through Google's ad settings or your browser's cookie controls.
Your choices
- Delete a capture. You can delete any capture from your garage, which removes the photo and its metadata from our storage.
- Delete your account. To have your profile, all of your captures, and all associated photos removed, send us a request through /contact/ from the email address on your account. We will delete your data within 30 days of verifying the request.
- Opt out of analytics and ads. You can install the Google Analytics opt-out browser add-on and manage ad personalization through Google's ad settings.
Retention
We keep your profile and captures for as long as your account is active. Raw uploads that are never finalized into a capture are deleted automatically after one day. Contact-form messages are retained in the operator's inbox under normal email-retention practices. Server logs kept by AWS roll off on a short cycle.
Children
revsdb is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us information, please contact us and we will delete it.
Changes to this policy
If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, notify you in the app. The current version is always available at https://revsdb.com/privacy/.
Contact
Questions about this policy, or requests to access or delete your data, can be sent through /contact/.