Privacy policy.

What ProjectTruck collects, why we collect it, and who else ever sees it. This covers the website and the ProjectTruck Hunt Saver browser extension.

Last updated · August 11, 2026

The short version Plain English

› We don't sell your data, and we don't run ad networks or analytics trackers.
› The browser extension reads a page only when you click its toolbar icon. It doesn't watch your browsing.
› Your garage — vehicles, projects, service records, hunts — is private to your account unless you publish a listing.
› You can revoke any API token or delete your account at any time.

What we collect

Account details.

Your email address and a password, which is stored only as a salted hash — we never see or store the password itself. If you use "remember me" or reset your password, we store the timestamps and single-use tokens that make those work.

Your garage content.

Everything you enter: vehicles, projects, milestones, service records, shopping lists, hunts, and saved listings. Photos you upload are stored as files alongside them.

Listing location.

If you publish a vehicle listing with a location, we convert that address into map coordinates so the listing can show a map.

Buyer enquiries.

When someone contacts you about a listing you published, we store the name, email, phone number, and message they submitted, plus the IP address the message came from, so you can follow up and so we can deal with spam.

API tokens.

Tokens for the bookmarklet, the browser extension, and any agents you connect. We store only a SHA-256 hash of each token plus when it was last used — the raw value is shown to you once and never kept.

We do not collect analytics, behavioural profiles, advertising identifiers, or location data from your device. There are no third-party trackers on this site.

The browser extension Hunt Saver

ProjectTruck Hunt Saver exists to do one thing: copy a vehicle listing you are looking at into one of your hunts.

How it behaves

01 It does nothing until you click it. Nothing watches your browsing, no content script runs on page load, and it keeps no list of sites to monitor.
02 When you click the toolbar icon on a listing page, it reads that page only and pulls out the title, URL, price, main image, description, mileage, and location.
03 It sends those details to your ProjectTruck account, and nowhere else. The extension talks to no third-party server of any kind.
04 It stores your API token, your ProjectTruck address, and the last hunt you saved to in the browser's own extension storage. If you have Chrome profile sync switched on, Chrome syncs the token and address between your own devices.

Permissions, and why

activeTab Grants access to the one tab you clicked on, only for that click.

scripting Lets us run the extraction code in that tab once you have clicked.

storage Holds your API token and ProjectTruck address so you don't re-enter them, and the last hunt you saved to.

We do not sell or transfer extension data to third parties, do not use it for anything beyond saving listings to your hunts, and do not use it to assess creditworthiness or for lending. Uninstalling the extension removes its stored token from your browser; revoke the token itself from your ProjectTruck settings.

How we use it

We use what we collect to run the service and nothing else: to sign you in, to store and show your garage back to you, to publish the listings you choose to publish, to pass buyer enquiries to you by email, and to keep the service secure and working.

We do not use your content to train machine-learning models, and we do not send you marketing email you did not ask for.

Who else touches your data

We don't sell your data or share it for advertising. A small number of infrastructure providers process it on our behalf so the service can function:

DigitalOcean Hosting and image storage (Spaces)

Your photos and all application data

OpenStreetMap · Nominatim Geocoding

Listing addresses you choose to publish

Email delivery Transactional email

Your address, for password resets and enquiry notifications

We may also disclose data if the law requires it, or to protect the rights and safety of our users.

Your choices

Revoke a token

Kill any bookmarklet, extension, or agent token from settings.

Unpublish

Take a listing private again at any time.

Delete

Ask us to delete your account and everything in it.

Export

Ask for a copy of your data.

Retention

We keep your data for as long as your account exists. Delete your account and we remove your content, apart from anything we're required to keep or that has been anonymised.

Security

Traffic is served over HTTPS. Passwords are stored as salted hashes and API tokens as SHA-256 digests, so neither can be read back out of our database. No system is perfectly secure, but we take reasonable measures to protect your data.

Children

ProjectTruck is not directed at children under 13, and we don't knowingly collect their data.

Changes

If we change this policy we'll update the date at the top of the page, and note anything significant in the app.

Contact

Questions, deletion requests, or anything else about your data:

privacy@projecttruck.net