Privacy

FleetFault is a product of mixtape.works, run by Human Hygiene Kft., Datolya utca 40, 1163 Budapest, Hungary (company registration 01-09-464537). Human Hygiene Kft. is the controller of your sign-in and of the session that keeps you signed in. For your fleet’s own data (its name, its vehicles, the fault reports and their photos, and the alert addresses) the fleet is the controller, and FleetFault is its processor: it holds that data for the fleet and acts on the fleet’s instructions. Write to support@mixtape.works about anything here.

• Your sign-in: the e-mail address your mixtape account has verified, and the name it gives, which your profile button shows; each sign-in brings the current one. FleetFault never sees your password. The account keeps its own records, described on the mixtape.works privacy page.
• Your fleet: the fleet name you chose, the day it was created, the language you picked, the accounts that manage it, and its vehicles: plate, type, make and model, plus the internal number and note if you add them. Each vehicle has a random code, which is printed on its sticker.
• Your sessions: when each one started and when it ends, and a SHA-256 of its token. The token itself is only in your browser.
• Fault reports, sent from a sticker’s page by a driver who has no account: the fault, whether the vehicle can still be driven, the description, and if they are given, the odometer reading and the driver’s name and phone number. Location is kept only when the driver taps “Add my location”. Up to three photos, with the report. Each report gets the fleet’s next number and the UTC time it was filed. So that one internet connection cannot send a flood of reports, we keep a keyed fingerprint of that connection’s IP address for one hour, never the address itself; it is removed the next time a sticker’s page is opened after that hour.
• Alert addresses: the e-mail addresses your fleet lists under Settings → Notifications (your own is the first, by default), and each alert sent to them: the vehicle, its category, the description, the driver’s name if one was given, and a link to the report. Each alert goes through our mail service (Amazon Web Services, or Resend as the backup), and we keep the answer it gave us.
• Page views, counted without a cookie: how many times each public page is opened, and what each visit says about itself (see Page views below). Nothing else. FleetFault has no advertising and no tracking, and its pages load nothing from another site. FleetFault keeps no log of which page anybody reads. The hosting company may keep the ordinary server access records any host keeps.

We count how many times each public page (the front page, sign-up, this notice and the terms, in every language together) is opened each day, which site a visit came from (that site’s name only), the country it came from (as our network provider Cloudflare names it, in two letters) and whether it was a phone, a tablet or a computer. Each visit sends that one count to the statistics page of mixtape.works, which adds it to the day’s total. No IP address, no cookie, no identifier, and nothing that tells one visit from another.

The public pages are in 42 languages, each at its own address. The language menu at the top right switches between them.

To let you sign in, to show you your fleet, to send the alert e-mails you have turned on, and to delete it when you ask. Your e-mail address is used for nothing else: FleetFault sends no marketing e-mail. The legal basis is the contract with you for running the account (GDPR article 6(1)(b)). Page views are counted on our legitimate interest in knowing which pages are read (GDPR article 6(1)(f)); they set no cookie, so no consent is asked for them.

A session lasts 30 days, or until you sign out. The two hand-offs that take you to the mixtape account and back last ten minutes. Your fleet, its vehicles and their history, and the fault reports with their photos, are kept until the fleet deletes the fleet in Settings. A manager can also delete one report on its own page, with its photos, its history and its alert records; that cannot be undone, and the alert e-mails already sent are not taken back. Page views are kept as the daily totals the statistics page adds up, not as a record of each visit.

Our servers are in Finland, and Hetzner Online GmbH hosts them for us. Alert e-mails are sent through Amazon Web Services (Amazon Web Services EMEA SARL, from its data centres in Frankfurt, Germany). When AWS cannot take a message, it goes through Resend (Plus Five Five, Inc., United States) instead. That transfer relies on the EU Standard Contractual Clauses in Resend’s data processing agreement; Resend is also certified under the EU–U.S. Data Privacy Framework as an additional safeguard. Hetzner, Amazon Web Services and Resend act as our sub-processors. Page-view counts go to the mixtape.works statistics page, which is ours, not a third party’s. We do not pass your data to anyone else.

If you subscribe to the newsletter at the bottom of a page, the mixtape account service keeps your e-mail address, the list, your language and the dates you confirmed or left, to send you that list’s news (and mixtape news, if you ticked the box) until you unsubscribe. Nothing is sent before you confirm with the link we e-mail you, and every newsletter has an unsubscribe link. The mails go through Amazon Web Services from Frankfurt.

In Settings you can delete your fleet at any time. That removes the fleet, its accounts, its vehicles, its sessions and any files uploaded for it, and it cannot be undone. To ask for a copy of what we hold about you, or for a correction, write to support@mixtape.works. You may also ask us to restrict how we use it, to object to a use we base on our legitimate interest, and to receive what you gave us in a machine-readable form: write to the same address. You may also complain to the Hungarian data protection authority, NAIH (naih.hu).

FleetFault sets only the cookies it needs to run the service you asked for. None is set for statistics or advertising.

• ff_session: keeps you signed in. HttpOnly, and Secure on the public site. Thirty days, or until you sign out.
• ff_signin: carries the state of a sign-in to the mixtape account and back. Ten minutes.
• ff_identity: carries the verified address while you name a new fleet. Ten minutes.
• lang: remembers the language you picked in the settings menu. One year. The menu sets it in your browser.
• ff_report_lang: the language a driver picked on a sticker’s report page. One year. It is set only when the driver taps a language there. HttpOnly, Secure on the public site.

The palette and text size you pick in the settings menu stay in your browser on this device. They are never sent to us.