Your privacy, in plain English

Oncat is run by David and Tracy, two Jaguar enthusiasts in the United Kingdom. Together we're responsible for your data (the law calls us the "controller"). For anything about your data or this page, write to privacy@oncat.app.

• Your account: your name, email, username, country and region, and a securely scrambled password if you set one. Anything you add to your garage (a photo, banner, location, a few words about you, links). Your email settings, and whether you ticked "occasional updates" or said yes to featuring your entries. Where you first came to us from (for example a Facebook post or a link a member shared).
• Your Jaguars: the details, photos, story, honours and history you add, the registration if you give one, and its MOT record from the DVSA. We strip location data out of photos when you upload them. Videos you add to an entry are kept by Mux (below), and deleted there when you delete the video, the entry or your account.
• Your entries, tours and events: each entry and its attachments, kudos and comments, the tours you plan or record (including the places, which can come from your photos), and the events you've said you're going to.
• Messages: your messages with friends, messages about a Jaguar that's for sale, and anything you send us through feedback or the contact page.
• Friends you invite: if you invite someone, the first name and email you give us for them, so we can send the invitation. The invitation runs out after 30 days.
• How the site is used: which pages are visited, where visitors came from, how long they stayed, the steps people take when adding a Jaguar, whether Oncat was opened from the home screen, and the steps of putting it there and turning on notifications.
• Notifications on your phone: for each phone you turn them on for, the address your browser's maker gives it for notifications, its security keys (kept encrypted), a plain name such as "iPhone (Safari)", and when one last got through.
• What you're browsing on: just the kind of device, operating system and browser, for example "phone, Android, Facebook's browser". We never store your IP address or your browser's full details for this. To count visitors roughly, we use a code worked out from them that changes every day and can't be turned back into either.
• The basics to run the site: the cookies listed below, and server logs for security and fixing faults (these can include IP addresses).

The law asks us to say why we're allowed to use your data. There are three reasons:

• To give you the service you joined for: your account, garage, entries, tours, events, messages, your rarity page, reading a document you scan, the emails that run your account, and your MOT, insurance and service reminders.
• Because we have a sound reason, in ways you'd expect (the law calls this "legitimate interests"): looking up a registration before you join and keeping your place for 7 days, checking public photos for sensitive details, counting how the site is used so we can make it better, keeping it secure, stopping abuse, keeping backups, replying to feedback, and sending "This week in the Paddock" and the rarity tips (see Emails).
• Because you said yes: "occasional updates", and featuring your public entries and photos in Oncat's own posts and ads (on Facebook, Instagram and X), always credited to you. Both are off unless you turn them on, and you can turn them off at any time.

We do not sell your data, and we do not use advertising or third-party tracking on Oncat itself.

Some emails are needed to run your account: confirming your email (and, until you do, a few reminders over a month, which you can stop from any of them), sign-in codes and links, password resets, and the link to your rarity page when you make one. Apart from those, we only email an address once you've confirmed it.

These are on when you join, and you can switch any of them off in your email settings:

• MOT, insurance and service reminders for your Jaguars.
• "This week in the Paddock", a Friday round-up of what members have shared, and what’s new at Oncat that week.
• If you make a rarity page, a few tips over the following weeks on building your Jaguar's full page.
• Notifications about your Jaguars, the people and Jaguars you follow, events and messages: for example a new message, a follow, kudos or a comment, a new entry from someone you follow, friends going to an event, or a Jaguar you follow going up for sale.
• A few one-off notes: a word after an event or tour, a heads-up if we've held back a photo or one shows your plate while your reg is hidden, and once, a while after you join, asking whether we may feature your entries.

You can have notifications as they happen, or gathered into one email a day or a week. Most emails have a one-click unsubscribe that switches off that kind of email; the daily and weekly round-ups link to your settings instead.

Occasional updates (news about Oncat itself) are separate: we only send them if you tick yes, and you can change that in your email settings.

If a member invites you or shares a link with you by email, we send that one email on their behalf.

If you put Oncat on your phone's home screen, you can choose to get notifications on it. They're off until you turn them on, and you choose which kinds in Settings, Notifications on your phone. A notification only ever comes as well as an email, never instead of one, and never for sign-in codes, security notices or news from us.

They say who, never what: for example "Andy sent you a message" or "Your XF's MOT is due soon". Never your message's words, a registration, a place, a date or that a Jaguar is for sale; you see the rest only once you open Oncat. Your phone can also hide notification previews on the lock screen.

Nothing comes from someone you've blocked or who has blocked you. To turn them off: Settings, Notifications on your phone, or your phone's own settings. Signing out on that phone turns them off too.

A Jaguar you add is public: everything on it (its details, photos, story, honours, MOT and service history, and what it’s cost) and its published entries can be seen by anyone, and its registration shows unless you hide it. A Jaguar saved from its rarity page starts private instead. We say which when you add it, and you can make it private, or hide its registration, its MOT history or what it’s cost, any time under Who can see it, in its Manage menu (⋯). Tours are public too, once you’ve confirmed your email, and you can make any one private. A public Jaguar can be found by search engines, including by its registration if that's shown. Nobody can find your Jaguar by typing its registration into Oncat unless you switch that on.

Some things are always visible:

• Your garage page (oncat.app/your-username), with your username, your public Jaguars and what you've put at the top of it (photo, banner, location, a few words, links).
• Your first name and initial ("John S."). Your first name also shows on your public Jaguars and when you share them ("John's S-Type"). We never show your full surname. You can switch your name off in Settings, and your username shows instead.
• Your season page (oncat.app/your-username/season), which lists the upcoming events you've said you're going to.
• Comments you leave on public pages, and a "Meet my Jaguar" introduction once you've shared it, even if that Jaguar later goes private.
• Your rarity page, if you make one (see below).

Your friends list is never public. Files attached to a public entry can be opened by anyone who can see that entry, and we don't check attachments for personal details, so have a look before you attach one.

Photos can give things away, so while a Jaguar is public we automatically check its photos for a visible number plate, a VIN or chassis number, and personal details like a name, address or signature. A VIN or personal details are held back from your public pages until you blur them, with the spot already boxed for you. A number plate never hides a photo: if a Jaguar you own now has its registration hidden and a photo shows the plate, we let you know so you can blur it. We keep the original of each photo privately, so a blur can always be undone. Your photos also get a gentle automatic lift to their brightness, contrast and colour, done on our own server, and you can switch an entry’s photo back to how you took it in Photos and videos. Profile photos and banners aren't checked. It helps, but it can't catch everything, so it's worth a look yourself too.

When you photograph a document (an MOT certificate, a service invoice, a receipt), we read the details off it, like the date, mileage and work done. We don't keep the photo: we automatically strip out personal details (names, addresses, postcodes, phone numbers, emails) and prices, and you check every field before it's saved. You can always type a record in by hand instead.

Both of these use our AI provider, Anthropic (see Who we share with).

When you look up how rare your Jaguar is and save its rarity page, that page is public straight away, so you can share it. It shows your first name (or your username, if you've switched your name off), the photo you chose, and your Jaguar's model with its DVLA licensing figures and a summary of its DVSA MOT record (when it was first registered, its mileage at each MOT, and how many it has passed). It never writes your registration on the page, though your photo may show the plate.

Your photo appears as you uploaded it, with the same gentle lift to its brightness and colour as all your photos. We check it's a Jaguar, but we don't look for number plates or blur anything, so if you'd rather your plate didn't show, choose a photo where it can't be read. You can hide the page at any time, though its photo can stay reachable at its old address for a while, and a copy someone has already saved, or a preview Facebook has already made, can't be called back. Your Jaguar's full page stays private until you choose otherwise.

Only the suppliers we need to run Oncat, and only so they can do that job for us:

• DigitalOcean: hosting, the database and file storage.
• Resend: sends our emails, so it sees your name, email and the email itself. Proton holds our own mailbox, including anything you send us.
• The DVSA: we send it any registration you type in, to fetch the MOT record, and check it again each month.
• Anthropic (AI): reads documents you scan, checks photos for sensitive details, checks a rarity page photo is of a Jaguar, helps polish words when you ask it to, and helps write event summaries. What we send isn't used to train AI models, and Anthropic keeps it only for a short time for safety checks.
• Maps and places (Geoapify, Photon by Komoot, Nominatim and OpenStreetMap, and FOSSGIS): what you type when searching for a place, the places on a tour (including those taken from your photos), roughly where an entry's photos were taken, to offer you its town, and, when a map shows, your IP address so the map can load.
• Mux: stores and plays the videos you upload to your entries. It sees a viewer's IP address when a video plays. Videos play in Oncat's own player, which sets no cookies.
• YouTube: pages with a YouTube video load it from YouTube, which sees your IP address, and may store information on your device once you press play.
• Apple, Google, Mozilla or Microsoft (whichever made your browser): they carry notifications to your phone. They see your phone's notification address and when one is sent, but not what it says, which is encrypted so only your phone can read it.
• Facebook, X and WhatsApp read a public page's preview (its title, words and picture) when someone shares the link.

Some of these (Anthropic, Resend and Mux) are based in the United States, so your data can be handled there, under the safeguards UK law requires for sending data abroad.

We never sell your data or share it with advertisers. The only thing we use in our own ads is what you've said yes to, under Featuring your entries. If the law ever made us disclose something, we'd give only what we're required to.

• Your account and everything in it: until you delete your account. A comment or message you delete is hidden straight away and removed with your account; messages you sent also leave the other person's conversation.
• A Jaguar you start adding but don't finish: 7 days.
• A note of each email we send (the address, the subject and when), so we can check what's gone out, including an invitation or link a member sends someone: 90 days, or until you delete your account.
• Page visits: a year.
• Your phone's notification details: until you turn them off, sign out on that phone or delete your account, or after 90 days with none getting through.
• How many notifications of each kind we send, and how many are opened: 90 days. Just the kind and the time, never who or what.
• The steps people take when adding a Jaguar: kept, so we can compare over time, with no set end date. They don't include your name, email or registration, and the link to your Jaguar goes when you delete it.
• Feedback you send us: kept, with no set end date, so we can look back at what members asked for. It stays, with your email address, if you delete your account.
• Server logs, and accounts whose email was never confirmed: kept for now, with no set end date.
• Backups: we back up the site every night. When you delete something it's removed from the site straight away, but copies can stay in our backups and our storage for a while after.

• Your session: keeps you signed in as you move around. We also use it to join up the steps one visit takes (for example, from looking up a registration to saving a Jaguar) and to remember where you first came from until you join, so we can see what works.
• Remember me: keeps you signed in on that device for about 13 months, until you sign out. It's set when you join, when you sign in with "Keep me signed in on this device" ticked (it starts ticked), and when you sign in from a link we've emailed you.
• Form protection: stops other websites sending forms in your name.
• Your place: while you're adding your Jaguar, keeps your place for 7 days so you can carry on where you left off.
• An entry you're writing: the words of a new entry are kept in your browser as you type, so a reload doesn't lose them. They never leave your device until you save, and they're cleared when you save, discard the entry or sign out.
• This phone's notifications: remembers which phone this is, so signing out here turns its notifications off.
• When we last offered notifications: so we don't ask again within a week.
• Oncat's own files: a copy of the site's own design files, icons and an "offline" page, so Oncat opens quickly and can tell you when there's no signal. Nothing about you or your Jaguars, and it's emptied when you sign out.

There are no advertising or third-party tracking cookies, so there's no banner to click through. Counting page visits sets no cookie at all.

If you'd rather we didn't count your visits, email privacy@oncat.app. If you're a member, we'll delete the records linked to your account so far, though we can't yet stop new ones being recorded. If you're not a member we can't pick out your visits; blocking cookies for oncat.app stops us joining up the steps of a visit (page counts carry on, but can't be tied to you), and you won't be able to sign in while they're blocked.

Under UK data protection law you can ask us to show you what we hold, correct it, delete it, limit how we use it, or give you a copy. You can object to anything we do because we have a sound reason, and withdraw a yes at any time. Just email privacy@oncat.app. You can delete your account yourself in your settings. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).

If any of this changes, we'll update this page and move the date at the top. Nothing sneaky.