Privacy policy

1. Who processes your data

Data controller: Daniele Petrollo.

For any question or request about your data: [email protected].

2. Your account

To create an account we need your email and a password. We never store the password in clear text: we keep only an encrypted fingerprint of it (argon2id). We send to your email only verification and password recovery codes.

If you sign in with Google, from Google we read only your Google account identifier, your email (if Google has verified it) and your name. We never see your Google password.

In your profile you can add a name, your city, a photo and what you drive. On the phone you stay signed in for 90 days, renewed whenever you use the app; the session key is kept in the phone's secure storage.

Legal basis: performance of the contract, that is, providing the service you asked for (Art. 6(1)(b) GDPR).

3. The garage

Vehicles, mileage, deadlines, maintenance, expenses, documents and photos that you enter. Number plate and VIN are masked in the app.

Garage documents and photos are kept in a private store: only the owner can open them, through links that expire after 60 seconds.

A vehicle you mark «Visibile a tutti» (visible to everyone) shows in your profile only its model and the cover photo you chose.

If you read the VIN with the camera, we send only the VIN to the public NHTSA service (United States) to recognise make and model. The request leaves from the phone, so NHTSA also sees the phone's IP address. No other data of yours.

Price guides open in the browser, on the website of whoever publishes them, which has its own privacy notice.

Legal basis: performance of the contract.

4. Rides and location

While you record a ride the app reads the GPS even with the screen off (you can tell from the persistent notification). The points stay on the phone and reach the server together with the ride: track, distance, times, elevation, stops, photos and expenses. Only you see the expenses.

You choose who sees a ride, ride by ride: «Solo io» (only me; the default the first time), «La crew» (the crew) or «Tutti» (everyone). A ride shared with the crew or with everyone counts towards the crew's Zones («Zone della crew»). People you have blocked see none of your rides.

Home zone («Zona casa»): if you set it, the stretch near your home (at least 500 metres) is seen by nobody else, neither in rides nor in event routes. We never show your home point to anyone: it appears only in the export of your data.

Crew Zones are cells of about 1.8 km per side, lit up by every ride that crosses them, including the stretch near home: today the area around your home falls into a coarse cell, which the crew sees lit up, never the street.

Routes and navigation are calculated by our server, with no external providers. If you choose «Apri in Google Maps» (open in Google Maps), the app passes to Google the start, destination and stops of the ride or route, near home too. If you download the GPX, the file contains the track of the ride, near home too, and anyone you send it to can read it.

When you search for a place, our server sends LocationIQ the text you typed and an approximate area (about 1 km) to return nearby results. LocationIQ does not receive your IP address and does not know who you are.

The app asks Open-Meteo for the weather directly, with the location rounded to about 1 km: Open-Meteo sees the phone's IP address.

The base maps are our own. The app downloads the satellite (EOX) and topographic (OpenTopoMap) views directly from them: they see the phone's IP address and the area you are looking at.

Today the app does not record motion sensors (accelerometer, gyroscope). If this changes, we will update this notice first.

Legal basis: performance of the contract. You give the location permission to Android, and you can withdraw it whenever you want.

5. Live location

In «Chi ti vede» (who sees you) you choose who sees where you are while you ride or keep the Map open. At first you are «Nascosto» (hidden): nobody sees you.

• Crew only: the active members of your crews see your name, vehicle and location, precise or approximate to about 1 km, for the duration you choose (from 15 minutes to 12 hours).
• Visible to everyone: after you accept the rules of the public map, anyone using Hairpin sees your name, vehicle and location; from afar, on the map, only the number of people in an area, and only from three upwards.
• Only during the event: you decide separately for each event, and your location stays off until you turn it on; once on, the participants see your location, precise or approximate as you chose, and where you are on the route, from the start to the end of the event.

With the Home zone on, within 500 metres of home the app does not send your live location: whoever sees you does not know which street you are in. People you have blocked never see you.

We do not archive live locations: they stay in the server's memory only while they are valid, and then they expire. For 30 days we keep only the start, the end and the level of each session, with an identifier of the phone, without locations.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you give by choosing and withdraw whenever you want by going back to «Nascosto» or turning off the event location.

6. Crews, events, comments and photos

In crews we process who belongs to them and with which role; in events who takes part, the comments and the album photos, which the participants see.

Your profile is seen only by people who share a crew or an event with you: name, photo, crews in common, the rides they could already open and the vehicles you made visible.

Your profile photo and the covers of crews and events are kept at a public address, hard to guess but not protected: anyone with the link can open them.

If you block or report someone we record it to protect you and to moderate. The person blocked does not learn it from us.

Legal basis: performance of the contract; for reports and moderation, the legitimate interest in keeping the community safe (Art. 6(1)(f) GDPR).

7. Notifications

We keep the app's notifications (invitations, events, crews) on the server for 180 days.

Deadline reminders are scheduled by the phone itself: they do not go through third-party notification services.

8. Diagnostics and security

To find the problems nobody sees, the app sends us errors, crashes, slow screens, the state of ride recording, the screens you open and how long each use of the app lasts, with the app version, operating system, phone model and screen name.

We send no locations, no text you wrote and not your identifier: in its place there is a pseudonym calculated by the server. This data and the server's technical logs are kept for 7 days and then deleted automatically.

If you use «Segnala un problema» (report a problem) we receive the text you write and the app version: only the controller reads them.

We keep a log of important actions (for example the deletion of an account or a moderation): who, what and when, without content. Temporary counters curb abuse.

For app updates the phone contacts Expo's servers, which see the IP address, the app version and an identifier of the installation.

We count visits to the hairpin.it website with Umami, which runs on our own server: no cookies, no persistent identifiers and no personal data kept, not even the IP address. Only aggregate numbers remain: pages viewed, referring site, country and city, browser, operating system and device type. The app does not use Umami.

Legal basis: the legitimate interest in running and protecting the service (Art. 6(1)(f) GDPR). You can object by writing to us.

9. Where the data is and who helps us

Database, files and logs are on our own server at OVHcloud, in the European Union. An encrypted backup copy is kept on a computer of the controller, in Italy.

These providers help us, each only for its own part:

• OVHcloud (EU): the server that hosts everything.
• Cloudflare: the network the app's traffic passes through, to protect it and serve it fast. To do so it decrypts the communications on its servers, so it can see their content, locations included.
• Resend: sending the emails with the codes.
• Google: signing in with Google and «Apri in Google Maps», only if you use them.
• LocationIQ: searching for places.
• Open-Meteo: the weather.
• EOX and OpenTopoMap: the satellite and topographic maps.
• NHTSA: recognising the VIN, only if you use it.
• Expo: app updates.

Some are based in the United States. When data leaves the European Union, the transfer relies on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

10. How long we keep it

• Account, garage, rides and routes: as long as you have the account.
• Live location: only while it is valid, never archived; start, end and level of sessions: 30 days.
• Event comments: 30 days after the end of the event (or its cancellation).
• Event album photos and participation in past events: as long as the event exists, without your name after the account is deleted.
• Notifications: 180 days.
• Problem reports: 180 days.
• Reports by other users and the log of important actions: today without an expiry, even after the account is deleted. When we set a term we will write it here.
• Sign-in credentials: as long as you have the account, then until you ask us to delete them (section 11). The emails with the codes stay in the sign-in service, today without an expiry.
• Diagnostics and technical logs: 7 days.
• Internal system events: 90 days.
• Data export file: 15 minutes.
• Files (documents, garage and ride photos, profile photo and covers): today they remain even after you remove them from the app or delete the account, until you ask us to delete them (section 11).
• Database backups: 30 days; external encrypted copy: up to 6 months.

11. Deleting the account and exporting your data

You can delete your account whenever you want from your Profile, «Elimina l'account» (delete the account). It happens at once:

• you disappear from the map and from every live location;
• from the database we delete vehicles, documents, rides, routes, home, blocks, notifications and settings;
• from the profile we remove name, email, city and photo;
• comments and photos in events and participation in past ones remain, but without your name; participation in future events is deleted;
• the crews you are admin of pass to the longest-standing organiser, otherwise to the longest-standing member, or are deleted if you were alone.

Files (documents, garage and ride photos, profile photo and covers) today are not deleted automatically, neither when you remove them from the app nor when you delete the account: they stay in the store, and the profile photo stays reachable at its address. Write to [email protected] and we delete them within 30 days; they disappear from backups within 6 months.

Sign-in credentials (email and password fingerprint) today are not deleted automatically: write to [email protected] and we delete them within 30 days.

You can ask [email protected] for a copy of all your data, in a readable file (JSON): we send it to you within 30 days.

12. Your rights

You can ask us to access your data, correct it, delete it, restrict its use, receive it in a readable format, object to processing based on legitimate interest and withdraw a consent, without this affecting what was done before.

Write to [email protected]: we reply within one month. If you think we are mishandling your data you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

13. Minors

Hairpin is for people aged at least 14. If you are under 14 do not create an account. If we discover an account of a minor under 14 we delete it.

14. Security and changes

Communications are encrypted (HTTPS), passwords protected, private files reachable only through temporary links (not the profile photo and covers, see section 6), and access to the systems is limited to those who manage them.

We make no automated decisions that have legal effects on you.

If we change this notice we update the version and the date above, and for important changes we tell you in the app.