Privacy.

Who we are

FuelHawk is operated as a sole-trader service in the United Kingdom. The data controller for the personal data described here is FuelHawk. Contact: [email protected].

What we collect

• Account data: email address (used for passwordless sign-in links, via Supabase Auth). Optional: postcode, default fuel type, monthly fuel budget.
• Subscription data: if you subscribe, Stripe processes your card details — we never see or store them. We retain your Stripe customer and subscription IDs and the tier you're on.
• Usage data: vehicles, favourite stations, price alerts, commute routes, fill-up logs, and loyalty cards you choose to add. All optional, all editable, all deletable.
• Push subscriptions: if you enable push notifications, we store the endpoint your browser provides. We never see the device's location or identifiers.
• Server logs: for security and debugging we keep request logs (IP address, user-agent, path) for 14 days, then they are deleted.

What we don't do

• We don't sell your data to anyone, ever.
• We don't share your data with advertisers or data brokers.
• We don't track you across other websites.
• We don't use third-party advertising cookies.
• We don't profile you for marketing.

Cookies & analytics

FuelHawk uses two categories of cookies:

• Essential — a Supabase session cookie to keep you signed in, and a short-lived Stripe cookie during checkout. Both are required for the service to work and are exempt from consent under PECR.
• Analytics (optional) — with your explicit consent via the banner shown on your first visit, we use Google Analytics 4 to understand which pages are useful. GA4 sets cookies beginning _ga and anonymises your IP address before storage. You can decline, and nothing on the site changes. Your choice is remembered in your browser; clear site data to see the consent prompt again.

Where your data lives

Your account and usage data are stored in Supabase (Postgres) on servers in the EU. Subscription data is stored in Stripe (also EU/UK). Email is sent through MailerSend. All providers are GDPR-compliant data processors with appropriate Data Processing Agreements in place.

How long we keep it

• Account & usage data: until you delete the account.
• Subscription records: 7 years after cancellation (HMRC requirement).
• Server logs: 14 days.
• Email delivery logs: 30 days.

Your rights

Under UK GDPR you have the right to access, correct, port, restrict, object to, and delete your personal data. Most of these are one-click in the dashboard. For a full data export or full account deletion, email [email protected] and we'll action it within 30 days.

If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We'll update the date at the top whenever this policy changes. Material changes will be flagged in your dashboard before they take effect.