← evlogr

Privacy Policy

Last updated 13 August 2026

Who we are

evlogr (“we”) provides a hosted service that logs and visualises data from your electric vehicle. For the personal data described here we act as the data controller. Contact: privacy@evlogr.com.

What we collect

  • Account identity — depending on how you sign up: your email and (optionally) name and password, a Google account identifier if you use Google sign-in, and/or the identifier and email from your Tesla sign-in.
  • Vehicle data — via Tesla’s official Fleet API with your consent: battery and charging state, odometer, vehicle model/configuration, and (if you grant it) location, which we use to reconstruct trips and charging sessions.
  • Streamed telemetry (optional) — if you enable Fleet Telemetry, your car sends the same categories of data (battery, charging, speed, odometer, location, cabin/outside temperature) directly to a server we operate, over an encrypted, mutually-authenticated connection, at intervals of roughly 30–300 seconds while the vehicle is awake. This replaces repeated polling and is read-only: we cannot send commands to your car. You can turn it off at any time in the Tesla app (Security & Drivers → apps) or by disconnecting evlogr.
  • Supercharger invoices (optional, off by default) — only if you switch on Supercharger billing in settings, we read Tesla’s charging-history list for your car: site name, session times, kWh and the amount Tesla invoiced, so those sessions show the real cost instead of an estimate. Tesla bundles this permission with charging commands, so its consent screen mentions starting, stopping and scheduling a charge — evlogr never sends any command to your car, on this permission or any other; we only ever read. Leave it off and nothing about your account changes. You can withdraw it in the Tesla app (Security & Drivers → apps) or by reconnecting without the option.
  • Your settings — such as electricity tariffs, currency and timezone, saved places (e.g. Home, Work) and a home address you choose to enter (converted to coordinates to detect home charging).
  • Security & activity — to protect your account we record sign-in attempts with the IP address, approximate device/browser, and outcome; if you enable two-factor authentication we store the secret needed to verify your codes.
  • Referrals — if you invite a friend or join via a referral link, we record the connection between the two accounts to apply the reward.
  • Messages — anything you send us through the contact form.

Why, and on what legal basis

We process this data to provide the service you asked for (Article 6(1)(b), performance of a contract) and, for vehicle location and access to your Tesla account, on the basis of your explicit consent (Article 6(1)(a)), which you give in Tesla’s authorisation screen and can withdraw at any time by disconnecting. Enabling Fleet Telemetry is a separate, explicit opt-in per vehicle and rests on the same consent basis.

Who we share it with

We do not sell your data. We use a small number of processors purely to run the service: Tesla (vehicle data source), Vercel (hosting), Supabase (database, hosted in the EU), Stripe (payments — if you subscribe; card details go directly to Stripe and are never stored by us), Cloudflare (Turnstile, to block bots and abuse on our forms), Resend (sending transactional email such as password resets), Google (only if you choose to sign in with Google), Anthropic (only if you switch on Ask evlogr — to answer a question, the figures it needs are sent to Anthropic’s Claude model, processed in the United States under standard contractual clauses, and not used to train models; we never send your coordinates, home address, email or payment details), and OpenStreetMap/Nominatim (only the address you type, to geocode it), and Fly.io (only if you enable Fleet Telemetry — it hosts the telemetry server that receives your car’s stream, located in Paris, EU). Tesla access and refresh tokens, and two-factor secrets, are stored encrypted.

Cookies

We only use essential cookies — to keep you signed in, to carry a login securely through the two-factor and social-sign-in steps, and to remember a referral link. We don’t use advertising or third-party tracking cookies, so there’s no consent banner to click through.

Retention

We keep your data while your account is active. You can delete your data or your whole account at any time; deletion is permanent.

If you use Ask evlogr, your questions and its answers are kept for the calendar month you asked them in, so the page can show them back to you. You can clear them yourself at any time, and after that month only the count remains — which is what your monthly allowance is measured against.

Your rights

You can access, correct, export, or delete your data, and object to or restrict processing. Use Disconnect to revoke Tesla access, or Delete account to remove everything. You may also contact your local data-protection authority.

Changes

We’ll update this page when the service changes and revise the date above.