Privacy notice

Who is responsible

MyCar NL is currently a public beta project operated by Mikhail Bylov as an individual. It is not yet operated through a registered company and therefore has no KVK or VAT number. Mikhail Bylov is the controller responsible for the personal data described in this notice.

What this beta processes

When you check a licence plate, MyCar sends it to the MyCar server so public vehicle records can be requested from RDW. Vehicle identity may also be sent server-side to configured specification and representative-image providers. MyCar does not sell this information.

Information kept on your device

Garage vehicles, mileage, maintenance, expenses, checklist progress, comparisons and document metadata are stored in your browser. PDF and image files selected for the digital glovebox are stored separately in browser storage on this device. Clearing browser data or changing device can remove these files. They are not uploaded by this beta.

Optional account and Garage synchronization

If you sign in, the authentication provider processes your email address and secure session information. MyCar stores an account identifier and account profile protected so that each signed-in user can access only their own records. Garage information is uploaded only when you explicitly choose to back it up. You can choose whether to replace the cloud copy or the copy on your current device when they differ. Document names, categories and sizes may be included in the Garage record, but the document files themselves are not uploaded in this stage.

Retention schedule

• Successful public vehicle checks may be cached for up to five minutes. Cache identifiers are hashed.
• Hashed rate-limit identifiers derived from network information expire after the 60-second protection window.
• On the current Vercel Hobby hosting plan, runtime request logs are available to the operator for up to one hour. Build, deployment and provider security records follow their separate provider retention rules.
• The language-preference cookie lasts for up to one year. Other information stored in your browser remains until you remove it or the browser clears it.
• Account details and an explicitly synchronized Garage copy are retained while the account remains active. A verified deletion request will be handled within 30 days by removing the account and Garage copy from the active database. Residual provider backups and security logs expire according to the provider’s backup and retention cycle.

Logs, cookies and browser storage

MyCar’s structured application logs exclude licence plates, raw IP addresses, provider payloads and credentials. The hosting provider creates essential request logs to deliver, protect and troubleshoot the service. Because the current vehicle-result and API addresses contain the checked licence plate, that plate can appear in hosting request logs. Access is limited to authorised project administrators and the hosting provider. These logs are not used for advertising or sold, and their retention follows the hosting configuration and provider retention rules. This beta does not currently use advertising cookies or product analytics. See Cookies and browser storage for the storage used by MyCar features.

Your choices and rights

You can remove locally stored Garage information using the controls in My Garage or by clearing this site’s browser storage. You may ask for access, correction, export, restriction or deletion of account data by emailing the privacy contact. MyCar may need to verify that the request concerns your account. You may also submit a complaint to the Dutch Data Protection Authority.

Contact

For privacy questions or a data request, contact Mikhail Bylov at feedback@mycarnl.nl.