Last updated 5 October 2026
Privacy Policy
Who is responsible
revs.wtf (Postal address to be added before launch, Ireland) is the data controller. For anything about your data, email Revswtf@gmail.com.
What we collect
| Data | Why | Legal basis (UK/EU GDPR) |
|---|---|---|
| Email address and password (stored hashed by our auth provider) | To create your account, sign you in and send account emails | Contract |
| Username, display name, bio, profile picture, accent colour, social handles | Your public profile | Contract |
| Date of birth (never shown publicly), terms version and acceptance date | To check you are old enough and record your agreement | Legal obligation; contract |
| Photos you post, with caption, tags, make and model, an optional city or area, and alt text | To publish them. Photos are re-encoded and stripped of EXIF and GPS data before storage | Contract |
| Your garage (vehicles, specs, cover photo) | To show your garage and group photos into albums | Contract |
| Follows, favourites, collection, blocks and mutes | To build your feed and respect your choices. Favourites and follower lists are not public | Contract |
| Reports, appeals and copyright notices you send, and moderation decisions about your account | To keep the community safe and meet our duties under the Digital Services Act and copyright law | Legal obligation; legitimate interests |
| Anonymous page views: page path, approximate city/region/country and coordinates rounded to about 10 km, referring website, phone or desktop | To understand where visitors come from. No IP address, cookie or identifier is stored, so a visit can't be linked to you | Legitimate interests |
| Technical logs held by our hosts (IP address, browser, time) | Security and keeping the service running | Legitimate interests |
We don't use advertising, tracking pixels or third-party analytics, and we don't make automated decisions about you.
Who we share it with
Only the service providers that run revs.wtf, under contracts that require them to protect it:
- Supabase: database, sign-in and photo storage (hosted in the EU).
- Vercel: website hosting and delivery. It processes IP addresses to serve pages and to give us the approximate location used for anonymous page views.
- Our email provider: sends sign-in and confirmation emails.
Your public profile and photos are visible to anyone unless you make your account private. We disclose data to authorities only when the law requires it. Where a provider processes data outside the UK or EEA, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses.
How long we keep it
- Account and content: until you delete them. Deleted accounts are hidden at once and permanently erased after 30 days, with all photos.
- Anonymous page views: 90 days.
- Reports, appeals, notices and moderation records: as long as needed to handle the case and any dispute, and to meet legal obligations.
Your rights
You can do most of this yourself:
- Access and portability: Settings > Privacy > Download my data gives you everything in one file.
- Correction: edit your profile, garage and photo details at any time.
- Erasure: delete photos individually, or your whole account in Settings > Privacy.
- Restriction and objection: make your account private, hide it from search engines, or email us.
You can also complain to a data protection authority, such as the Data Protection Commission in Ireland or the Information Commissioner's Office in the UK. We'd appreciate the chance to help first.
California residents: we don't sell or share personal information for cross-context behavioural advertising. You can ask to know, delete or correct your information using the tools above or by emailing us.
Children
revs.wtf isn't for children under 13. If you believe a child under 13 has an account, email us and we will delete it.
Cookies
We only use cookies that keep you signed in. See the Cookie Policy for the full list.
Changes
We will tell you about important changes in the app before they take effect.