DriveQuery
Privacy and data use
What the public website processes today, why it is needed and where you have control.
Responsibility and scope
The data controller is Markus Halonen, acting as an individual. DriveQuery is a project created and maintained by Markus Halonen. This notice covers the public tools and early access website. It does not describe a live Tesla account connection: automatic vehicle data services remain in development.
Browsing, security and measurement
Cloudflare delivers and protects the site and processes technical data such as IP address and request details. DriveQuery records limited page, language, referral-category and performance events to understand usage and faults. These application events omit raw IP addresses, full referring URLs and persistent visitor IDs; infrastructure logs are a separate data layer. The purpose and legitimate interest are reliable operation, abuse prevention and service improvement.
Browser storage
The site uses sessionStorage for temporary tool state and visit attribution, and localStorage for short-lived activity and automation-detection signals. A visit session expires after 30 minutes of inactivity. Local-storage entries can remain until cleared even when their signals are no longer used. This is not a claim that the site uses no browser storage. Cloudflare Turnstile also processes browser signals when protecting the waitlist form.
For privacy-first navigation analytics, DriveQuery creates a cryptographically random session-flow identifier that exists only in sessionStorage. It is not derived from IP address, User-Agent or fingerprinting, rotates after 30 minutes of inactivity, and is not designed to link later sessions or devices. Raw session-level flow telemetry is exposed for at most seven days; longer-term analysis uses aggregate counts and paths.
Maps, routes and VIN lookup
Place searches and route coordinates go through DriveQuery to Geoapify; some tools use OpenStreetMap Nominatim or OSRM. Map tiles and browser fallbacks to Overpass can send your IP address and visible map area directly to those providers. Location is used when you permit browser geolocation. Charger sources include Open Charge Map, NOBIL, OpenStreetMap and US AFDC. A VIN you submit is sent to the US NHTSA vPIC decoder; its cache key is hashed, but the decoder receives the VIN itself. These requests are needed to provide the tool you ask to use.
Manual mileage reports
Trip rows and report fields are held in the open page’s memory and exports are created in your browser. They are not saved to a DriveQuery account. Place searches and distance calculations still use external routing services. Export before closing or refreshing; downloaded files remain on your device until you delete them.
Early access and consent
With your consent, the waitlist receives your email, country, language, interest, optional Tesla model and consent record. Submission and landing pages, browser referrer and campaign parameters help identify which channels bring interest. Honeypot and form timing signals help reject spam. These details support early access administration and related messages. Joining is optional and is not required for public tools; consent can be withdrawn.
Retention and recipients
Waitlist details are retained while needed to manage early access and related communication, or until consent is withdrawn unless a legal obligation requires limited retention. Route-result caches last up to seven days; geocoding and VIN-result caches can last up to 30 days. These are cache lifetimes, not promises about provider logs. Infrastructure logs follow the provider settings and security needs. Cloudflare and the relevant tool providers process the data needed for their services. International infrastructure and the US VIN service mean processing is not exclusively within the EEA; provider notices describe their processing and transfer arrangements.
Raw session-flow telemetry is limited to a maximum seven-day analysis window in DriveQuery tools and is not copied into a separate long-term visitor store.
Your rights and changes
Where applicable, you can request access, correction, erasure, restriction and portability, object to legitimate-interest processing, and withdraw consent without affecting earlier lawful processing. You can complain to your local data protection authority, including Finland’s Data Protection Ombudsman. Requests normally receive a response within one month. This website does not make solely automated decisions with legal or similarly significant effects. Material changes and any future vehicle-data processing will be explained before they apply.
Contact form and AI-assisted review
The form stores your optional name, reply email, topic, message, language, receipt time and reference in Cloudflare D1. Raw IP addresses, Turnstile tokens and campaign data are not stored in the contact table. General enquiries use legitimate interest for responding and improving the service; statutory privacy requests use legal obligation. The owner may open messages through a secured connection in an AI service they use, which gives the selected provider access to the message content. Name and reply email are opened separately only when needed. Free text can itself contain personal data. An automatic receipt is sent to you and a notification to the owner. The message text is not included in these emails. Records are removed by daily cleanup once 12 months have passed since receipt, or earlier following an applicable erasure request. Sending a message does not join the waitlist or marketing.
Automatic email confirmations
Early access registrations and contact requests generate a confirmation from noreply@drivequery.com and a notification to the owner. Cloudflare Email Service and the recipient’s email provider process the address, email content and delivery metadata. The confirmation does not include your submitted message text. Email queue and delivery records are retained for up to 30 days; daily anti-abuse counters use hashed addresses and are cleared within three days. A confirmation acknowledges receipt, not access activation or a substantive response.
Sources and privacy information
Contact DriveQuery
Markus Halonen · DriveQuery
Contact DriveQuery