Deze pagina is alleen in het Engels en Grieks geschreven en wordt daarom in het Engels getoond.
Privacy notice
Last updated 14 Oct 2026
GarageTab is a free, non-commercial fuel and car-cost log run by Lazaros Filippakos. This page says what it keeps about you, why, where, and how to get it back or deleted.
Who is responsible
Lazaros Filippakos runs GarageTab and is the controller of your data under the EU General Data Protection Regulation (GDPR). Contact: support@garagetab.com.
What we keep
Your account: email address and password. The password is stored only as a one-way hash by our sign-in provider; nobody can read it.
What you enter: cars (make, model, year, plate, VIN, photo), fill-ups (date, odometer, amount, price, station name, notes), other costs, reminders and your settings (language, theme, currency).
If you turn on reminder notifications: the push address your browser gives us, so we can reach that phone or browser.
For security: server logs with a request reference, your account id and short one-way tags of email and network address (not the address itself). To stop password guessing, your network address is counted against limits for at most one day.
For each sign-in: when it started, when it was last used and the browser’s name, so you are signed out after 8 hours without use or 30 days after signing in. Removed about a day after that sign-in ends. The Account page lists these sign-ins so you can end any of them.
To warn you about sign-ins from a new browser: a one-way hash of the browser family and system (for example “Firefox on Windows”) for each one you have used, forgotten after 180 days without use. We email you when your password or email address changes and when a browser new to your account signs in; these notices cannot be turned off, because they protect the account.
Why (legal basis)
To run the service you signed up for (GDPR Art. 6(1)(b)): keeping your log, showing totals, sending the reminders you switch on.
To keep the service safe (Art. 6(1)(f), legitimate interest): rate limits, logs, breach-password checks.
There are no ads, no analytics and no tracking. Your data is never sold or shared for marketing.
Where it lives and who helps
Database and sign-in: Supabase, with your data stored in the EU.
Website hosting: Vercel Inc. (USA). The app’s server runs in the EU; pages may be delivered from Vercel’s servers nearest to you. Vercel keeps short request logs.
Email that sends reset links and security notices: Brevo (Sendinblue SAS, France, EU). It receives your email address and the message.
Domain and the support address: Cloudflare, Inc. (USA). Mail you send to support@garagetab.com passes through Cloudflare on its way to Lazaros Filippakos.
These providers process data only to deliver the service. Transfers outside the EU rely on their standard data protection terms.
Exchange rates: Frankfurter (frankfurter.dev). Only dates and currency codes are sent, nothing about you.
VIN lookup, when you use it: the VIN is sent to the US NHTSA vehicle database (vpic.nhtsa.dot.gov).
Password checks: the first 5 characters of a one-way hash of a new password are sent to Have I Been Pwned (k-anonymity). The password itself never leaves our server.
Notifications, when you turn them on: encrypted messages pass through your browser maker’s push service (Google, Apple or Mozilla), which cannot read them.
On your device
Cookies: only the sign-in session, your language and your theme. No consent banner is needed because nothing else is set.
For offline use the app keeps a copy of your log and any fill-ups waiting to be sent in this browser’s storage. Signing out removes it. After an automatic sign-out (8 hours without use) the copy goes, but fill-ups not yet sent stay until the same account signs in again.
The table lists everything GarageTab keeps in your browser. All of it is needed for the app to work; none of it tracks you or is shared.
| Name | Kind | What for | How long |
|---|---|---|---|
| sb-*-auth-token | Kind: Cookie | What for: Keeps you signed in. Scripts on the page cannot read it. | How long: Until you sign out; you are signed out after 8 hours without use and 30 days after signing in |
| locale | Kind: Cookie | What for: The language you chose. | How long: 1 year |
| theme | Kind: Cookie | What for: The look (theme) you chose. | How long: 1 year |
| mode | Kind: Cookie | What for: Light, dark, or the same as your device. | How long: 1 year |
| ft.user | Kind: Local storage | What for: Which account was last signed in here, so its offline copy opens without a connection. | How long: Until you sign out |
| ft.active | Kind: Local storage | What for: When this browser was last used, so every tab signs you out after 8 hours without use. | How long: Until you sign out |
| ft.install | Kind: Local storage | What for: How many visits, whether a fill-up was saved, and when “Install GarageTab” was last closed, so it is not offered too often. | How long: Until you clear this site’s data |
| ft.pageSize.* | Kind: Local storage | What for: Rows per page you chose for each list. | How long: Until you clear this site’s data |
| ft.visit | Kind: Session storage | What for: This visit was already counted. | How long: Until the tab closes |
| fueltrack | Kind: Database (IndexedDB) | What for: A copy of your log for offline use, and fill-ups saved offline that wait to be sent. | How long: Until you sign out; after an automatic sign-out, unsent fill-ups stay until the same account signs in |
| ft-static-* | Kind: Offline cache | What for: The app’s own files (scripts, styles, icons), so it starts without a connection. Nothing about you. | How long: Replaced with each update |
| ft-pages-* | Kind: Offline cache | What for: The app’s pages you opened, without your data, so they open offline. | How long: Until you sign out |
How long
Until you delete your account. Deleting it removes your cars, fill-ups, costs, reminders, photos and notification addresses at once. Server logs are kept for up to 30 days.
Your rights
Access and portability: Account → Your data → Download (JSON or CSV), any time.
Erasure: Account → Delete account.
Correction: edit anything in the app. For anything else, including objection or restriction, write to support@garagetab.com; you will get an answer within one month.
You can also complain to a data protection authority; in Greece that is the Hellenic Data Protection Authority (dpa.gr).
Children
GarageTab is meant for drivers. Do not create an account if you are under 16.
Changes
When this notice changes, the date at the top changes. Changes that matter are announced on the sign-in page before they apply.