Privacy Policy

Last updated: 1 March 2026

1. Who we are

PetrolPing is a UK fuel price tracking service operated as a sole trader business. Our registered contact is petrolping@gmail.com. We are not registered for VAT and do not collect more data than is necessary to provide the service.

2. What data we collect

We collect the following information when you use PetrolPing: • Email address — provided when you create an account, used to sign you in and send service-related communications. • Postcode — entered by you to find nearby fuel prices. Stored locally on your device and in your account preferences. • Fuel type preference — stored to personalise your experience. • Saved locations — postcodes or place names you save (Pro plan feature). • Subscription status — whether you are on a Free, Pro, or Intelligence plan, managed via Stripe. • Push notification subscription — a browser token if you opt in to price alerts (optional). • Vehicle details — registration plate and vehicle name if you choose to enter them (optional).

3. What we do not collect

We do not collect your precise GPS location. We do not sell your data to third parties. We do not serve advertising. We do not use tracking cookies for marketing purposes. We do not share your email with anyone other than the service providers listed below.

4. How we use your data

Your data is used solely to: • Provide the PetrolPing service (finding nearby fuel prices for your area) • Manage your account and subscription • Send price drop notifications if you opt in • Send transactional emails (sign-in links, payment receipts) via Resend • Improve the service through aggregated, anonymised usage patterns

5. Third-party services

We use the following third-party services to operate PetrolPing: • Supabase (supabase.com) — database and authentication. Your account data is stored on servers in the EU. Supabase is SOC 2 Type II compliant. • Stripe (stripe.com) — payment processing. We never see or store your card details. Stripe is PCI-DSS Level 1 certified. • Vercel (vercel.com) — application hosting. Servers are located in London (lhr1 region). • Resend (resend.com) — transactional email delivery. • Anthropic (anthropic.com) — AI analysis for Pro and Intelligence features. Only anonymised market data is sent to Anthropic, never personal data. • The Guardian Open Platform — verified news articles used for geopolitical market analysis. No personal data is shared. Each of these providers has their own privacy policy and data processing agreements in place.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Aggregated, anonymised usage data may be retained indefinitely for service improvement. Stripe retains payment records as required by financial regulations.

7. Your rights under UK GDPR

As a UK resident you have the right to: • Access the personal data we hold about you • Correct inaccurate personal data • Request deletion of your personal data ("right to be forgotten") • Object to or restrict processing of your data • Data portability — receive your data in a machine-readable format • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk To exercise any of these rights, email us at petrolping@gmail.com. We will respond within 30 days.

8. Cookies

PetrolPing uses only essential cookies required to keep you signed in (Supabase authentication tokens). We do not use advertising cookies, analytics cookies, or third-party tracking cookies. You cannot opt out of essential cookies without losing your signed-in state, but you can clear them at any time via your browser settings.

9. Security

All data is transmitted over HTTPS. Authentication is handled via Supabase with email magic links — we never store passwords. Payment data is handled entirely by Stripe and never touches our servers. Row-level security is enforced in our database so users can only access their own data.

10. Children

PetrolPing is not intended for use by anyone under the age of 13. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. Continued use of PetrolPing after changes constitutes acceptance of the updated policy. For significant changes we will notify you by email.

12. Contact

For any privacy-related questions or to exercise your rights, contact us at petrolping@gmail.com. We aim to respond within 5 working days.