Your privacy, in plain English

What we collect

• • Your account — your name, email, chosen handle, country, and a securely hashed password. Whether you opted in to occasional updates.
• • Your Jaguars — the details, photos, service history, story and honours you choose to add. A registration only if you give one — you choose whether it's shown, and it's private by default.
• • Messages you send us — feedback and contact messages, so we can read and reply.
• • The basics to run the site — an essential cookie to keep you signed in, and standard server logs for security and reliability.

How we use it

• • To run your garage and show only the pages you've chosen to make public.
• • To send you the emails that make the service work — verifying your email, resetting your password — and, only if you asked for them, reminders and occasional updates.
• • To make Oncat better, based on how it's used and what you tell us.

We do not sell your data, and we do not run advertising or third-party tracking.

Reading your documents

When you photograph a document — an MOT certificate, a service invoice, a receipt — to add it to your history, the image is sent to our AI reading provider (Anthropic) for one purpose only: to read the details off it, like the date, mileage and the work done. The image isn't used to train AI models. We don't store the photo — it's used to read the details and then discarded; only the record you confirm is kept.

Before anything is saved we automatically strip out personal details — names, addresses, postcodes, phone numbers, emails — and pricing, so they don't end up in the record. And you check every field yourself before it's added. If you'd rather not use this, you can always type a record in by hand instead.

Your registration & privacy controls

Everything is private by default — you choose what becomes public, page by page. Your registration is never shown on a public page, and nobody can search for it, unless you deliberately switch those on. Classic Jaguars are theft targets, so we treat your plate as sensitive.

Who we share it with

Only the trusted suppliers we need to run the service — hosting (DigitalOcean), email delivery, and AI document reading (Anthropic, used only to read a document you choose to scan; see above) — and only so they can do that job on our behalf. We never sell or share your data for advertising. If the law ever compelled us to disclose something, we'd only give what we're legally required to.

Your rights

Under UK data protection law you can ask us to show you the data we hold, correct it, delete it, or export it, and you can withdraw consent for optional emails at any time (there's a one-click unsubscribe on every one). Just email privacy@oncat.app. You also have the right to complain to the ICO (ico.org.uk).

Cookies

Only essential ones — the cookie that keeps you signed in, and one that protects forms from abuse. No advertising or tracking cookies, so there's no consent banner to click through.

Who runs Oncat

Oncat is run by an individual enthusiast in the United Kingdom. For anything about your data, or this policy, write to privacy@oncat.app.

Changes

If any of this changes, we'll update this page and move the date at the top. Nothing sneaky.