Your privacy, in plain English

What we collect

• • Your account — your name, email, chosen handle, country, and a securely hashed password (if you've set one). Whether you opted in to occasional updates.
• • Your Jaguars — the details, photos, service history, story and honours you choose to add. A registration only if you give one — you choose whether it's shown, and it's private by default.
• • Messages you send us — feedback and contact messages, so we can read and reply.
• • The basics to run the site — an essential cookie to keep you signed in, and standard server logs for security and reliability.

How we use it

• • To run your garage and show only the pages you've chosen to make public.
• • To send you the emails that make the service work — verifying your email, resetting your password — and, only if you asked for them, reminders and occasional updates. If you make a rarity page, we also send your link back to it and a few tips on building your car's full page, which you can switch off with one click.
• • Only if you say yes, to feature your public posts and photos on Oncat's own social pages (such as Facebook and X), always credited to you. It's off unless you turn it on under Featuring your posts in your settings, and you can turn it off at any time.
• • To make Oncat better, based on how it's used and what you tell us.

We do not sell your data, and we do not run advertising or third-party tracking.

Reading your documents

When you photograph a document — an MOT certificate, a service invoice, a receipt — to add it to your history, the image is sent to our AI reading provider (Anthropic) for one purpose only: to read the details off it, like the date, mileage and the work done. The image isn't used to train AI models. We don't store the photo — it's used to read the details and then discarded; only the record you confirm is kept.

Before anything is saved we automatically strip out personal details — names, addresses, postcodes, phone numbers, emails — and pricing, so they don't end up in the record. And you check every field yourself before it's added. If you'd rather not use this, you can always type a record in by hand instead.

Your registration & privacy controls

Everything is private by default — you choose what becomes public, page by page. Your registration is never shown on a public page, and nobody can search for it, unless you deliberately switch those on. Classic Jaguars are theft targets, so we treat your plate as sensitive.

Photos can give things away too, so while a car is public we automatically check its photos for a visible number plate, a VIN or chassis number, and personal details like a name, address or signature. Anything we spot is held back from your public page until you blur it, with the spot already boxed for you (a plate only while your registration is private; a VIN or personal details always). To check a photo we send it to our AI provider (Anthropic) once; the photo isn't stored there or used to train AI models, and we keep only a note of what was found and roughly where. It helps, but it can't catch everything, so it's worth a look yourself too. You can always blur anything by hand.

Your rarity page works differently: see Your rarity page below.

Your rarity page

When you look up how rare your Jaguar is and make its rarity page, that page is public, so you can share it. It shows your first name, the photo you chose, and your car's model with its DVLA licensing figures and its DVSA MOT record (when it was first registered, its mileage at each MOT, and how many MOTs it has passed). It never shows your registration.

Your photo appears exactly as you uploaded it. We don't check it for number plates or blur anything, so if you'd rather your plate didn't show, choose a photo where it can't be read. You can hide the page at any time, and your car's full page stays private until you choose otherwise.

To make sure the photo really is of a car, we send it once to our AI provider (Anthropic) for a quick check. It isn't stored there or used to train AI models.

We use your email to send you your link back to the page, and a few tips over the following weeks on building your car's full page. Every one of those has a one-click unsubscribe, and you can switch them off in your email settings.

Who we share it with

Only the trusted suppliers we need to run the service — hosting (DigitalOcean), email delivery, and AI (Anthropic, used only to read a document you choose to scan, to check public photos for sensitive details, and to check a rarity page photo is of a car; see above) — and only so they can do that job on our behalf. We never sell or share your data for advertising. If the law ever compelled us to disclose something, we'd only give what we're legally required to.

Your rights

Under UK data protection law you can ask us to show you the data we hold, correct it, delete it, or export it, and you can withdraw consent for optional emails at any time (there's a one-click unsubscribe on every one). Just email privacy@oncat.app. You also have the right to complain to the ICO (ico.org.uk).

Cookies

Only essential ones — the cookie that keeps you signed in, and one that protects forms from abuse. No advertising or tracking cookies, so there's no consent banner to click through.

Who runs Oncat

Oncat is run by an individual enthusiast in the United Kingdom. For anything about your data, or this policy, write to privacy@oncat.app.

Changes

If any of this changes, we'll update this page and move the date at the top. Nothing sneaky.