Loading...
Loading...
PetrolManiac (the website petrolmaniac.com and the Petrolmaniac iOS app) is operated by Alexander Shabalin, Lisbon, Portugal, who is the controller of the personal data described here. We collect the minimum data needed to run the service and do no profiling or advertising.
You can use every data tool on this site — model pages, valuation, comparisons, the import calculator — and play every game in the app without creating an account or providing any personal information. Calculator and valuation inputs are processed to produce the result and are not stored or associated with you.
We use Vercel Analytics and Vercel Speed Insights to understand aggregate usage (page views, referrers, device classes, Core Web Vitals). These tools are designed to be privacy-friendly: they do not use cross-site tracking cookies and report to us in aggregate form. We do not run advertising trackers and we do not sell or share personal data with data brokers.
We use Sentry to capture application errors so we can fix bugs. Error reports may include technical context such as your browser type, operating system and the page where the error occurred. We do not attach names or contact details to error reports.
We use cookies and browser storage only for essential functionality (for example, remembering interface preferences) and for the privacy-friendly analytics described above. We do not set third-party advertising cookies.
The Petrolmaniac app for iPhone works without an account. It downloads public market data (models, sold prices, game decks) from petrolmaniac.com. Without an account your game progress — scores, streaks, badges and collected cards — is stored only on your device and is removed when you delete the app. The app contains no advertising and no third-party analytics or tracking SDKs, and does not access your location, contacts or advertising identifier. Daily reminders are local notifications scheduled on your device; we run no push server. Our servers see the usual technical request data (IP address, device type) needed to deliver the data, as with any website visit.
If you use Spot, the app asks for access to the camera or to the photo you pick — nothing else in your library is read. The photo is reduced in size and sent over an encrypted connection to our server, which passes it through OpenRouter (an AI routing service) to Google's Gemini model to recognise the make and model; we then match the answer with our catalogue and show market prices. We do not store the photo and do not link it to your account. OpenRouter and Google process it as our service providers only to return the answer: our OpenRouter account has prompt logging and training on our data switched off, and Google's paid API terms do not allow using the content to train its models. Legal basis: your request (Art. 6(1)(b) GDPR). Don't photograph people or number plates if you can avoid it.
If you are signed in and tap “add to My spots”, we keep that spot in your account: the model you confirmed, the date and the photo. Before upload the app removes location and camera data, blurs number plates and faces it detects and makes the photo smaller. Spot photos are stored with Supabase in a private folder only you can open; they are not shown to other players. You can delete a spot at any time, and all spots and their photos are deleted with your account. When you confirm a spot, the app also sends us, without your account, photo or IP address, which model was guessed first and which one you picked; we use these pairs only to improve recognition. Legal basis: your request (Art. 6(1)(b) GDPR) and, for the anonymous pairs, our legitimate interest in accurate recognition (Art. 6(1)(f) GDPR).
You can sign in with Apple or with Google to keep your progress across devices and to have a player profile. When you do, we receive from Apple or Google a unique account identifier and your email address (with Apple you can choose a private relay address). We store: that identifier and email; the nickname, avatar choices and favourite car you enter; and your game progress (XP, level, streaks, badges, collected cards). We use this data only to run your account and sync your progress. Legal basis: performance of our agreement with you (Art. 6(1)(b) GDPR).
Your public profile — nickname, avatar, level and card collection — can be seen by other players, together with a random internal account number that links your profile to your leaderboard entry. Your email and your Apple or Google identifier are never shown to anyone. Account data is stored with our database provider Supabase and accessed only by us.
If you are signed in, your nickname with your total and weekly XP appears on the public leaderboard. If you report another player, we store who reported whom, the reason and the time, and only we can see it; we use reports to remove offensive nicknames and abuse.
If you use My cars, we store the model, year, mileage, the name you give the car and, if you enter it, the purchase price. The purchase price and mileage are visible only to you; model, year and name are shown on your public profile only if you switch that on. Posts you write in Community (text and an optional model) are public until you delete them. In duels against other players we store the shared question set, both scores and the time. Reports on posts are handled like reports on players. Comments you write under posts are public until you delete them. If you follow players, who you follow and your number of followers are visible to other players; the player you follow gets a notification if they allowed it. You can unfollow at any time. Logbook entries are posts attached to one of your cars. If you add a photo, the app first removes its location and camera data, blurs number plates and faces it detects and makes it smaller; the photo is stored with Supabase and shown publicly with your nickname, under the licence you confirm when posting. If you switch on “Let players guess what I paid” for a public car, its model, year, name, photo and purchase price appear in the Garage Guess game with your nickname (never the mileage). All of this, photos included, is deleted with your account.
You can delete your account at any time in the app (Garage → profile → Delete account). This permanently deletes your account, profile and synced progress from our servers straight away. You can also ask us by email at the address below.
On petrolmaniac.com you can sign in with a one-time email link, a password, or with Apple or Google; it is the same account as in the app. We store your email address and, if you use them, your watchlist of models and the price alerts you set, so we can show and send them to you. Alert emails are sent through our email provider Resend, which receives only your email address and the text of the alert; every email has a link to stop them. If you take a Pro subscription, payment is handled by Stripe and we store only the subscription status, plan and Stripe customer reference — never card details. Legal basis: performance of our agreement with you (Art. 6(1)(b) GDPR). To delete your website data, write to us at the address below and we will erase it within one month (in-app deletion covers the game account).
If you buy something from our shop, payment is processed by Stripe and fulfilment (printing and shipping) by Printful. To fulfil an order we pass along the data those services need: your name, shipping address, email address and the items ordered. Your card details are handled entirely by Stripe and never touch our servers. Stripe and Printful process this data under their own privacy policies; we retain order records only as long as needed for fulfilment, support and legal (e.g. tax) obligations.
If you contact us by email we keep the correspondence for as long as needed to handle your request. We do not add you to any mailing list without your explicit consent.
Depending on where you live (for example under the GDPR), you may have rights to access, correct, export or delete personal data we hold about you, and to complain to a supervisory authority (in Portugal, the CNPD). Write to us and we will resolve your request within one month. Requests about listing data and attribution are covered on our data sources page.
Questions about your data: privacy@petrolmaniac.com.
Last updated: November 2026. We may update this policy as the service evolves; material changes will be reflected on this page.