Privacy

[DRAFT] Electric Drive Club is run by [company name, registered address, company number]. Contact: [privacy@ address]. We are the data controller for the club website and apps.

What we collect

• Your account: email address, username, and anything you add to your profile (name, region, cars), plus the topics and owner clubs you follow.
• What you post: threads, replies, photos, votes, charger reviews, reports and the members you block. Posts and reviews are public; votes, reports and blocks are not.
• Sign-in: if you use a passkey we store its public key, never your fingerprint or face. Sessions are stored as one-way hashes.
• Abuse protection: your IP address is used to rate-limit sign-ups, sign-ins and the newsletter form. Those records are deleted automatically after a day.
• Notifications: if you turn on browser notifications, the push address your browser gives us. Pushes carry no content: your browser fetches the notification from us. The apps check for notifications themselves and show them on your phone; no push token is needed.
• Sponsors: sponsor slots are labelled “Sponsored”. We count total views and clicks per slot only, never who saw or clicked them, and share nothing about you with sponsors.

Why we use it

To run your account and show your posts (contract), to keep the club safe from spam and abuse (legitimate interests), and to send the weekly digest only if you ask for it (consent). [DRAFT: confirm lawful bases.]

Cookies

One cookie, edc_session, keeps you signed in. It is strictly necessary, can't be read by page scripts and is never used for tracking. We don't use analytics or advertising cookies.

Who else handles it

• Cloudflare hosts the website, the apps' API and the database.
• Cloudflare Email Service sends sign-in codes and the emails you have asked for (the digest, and notification emails you turn on in your settings).
• Article photos load from Unsplash, which sees your IP address when it serves them.
• If you turn on browser notifications, your browser's push service (for example Google, Apple or Mozilla) delivers an empty wake-up signal.

We don't sell your data or share it with advertisers. [DRAFT: list international transfer safeguards.]

Your choices

From your profile you can download everything we hold about you, change your notification settings, or delete your account. Deleting removes your email, profile and sign-in at once. Your posts stay so threads still make sense, but they show as written by a deleted member.

You can also ask us to correct or erase data, or complain to the ICO or your local data protection authority. [DRAFT: retention periods for backups and moderation logs.]