Privacy Policy
1. Data Controller
The entity responsible for data processing on this website is:
Tom Wagner
Winterhuder Weg 29, 7th floor
22085 Hamburg, Germany
Email: tuning.garage.ac@gmail.com
2. Hosting
This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) using Cloudflare Pages, Cloudflare D1, and Cloudflare R2. When you access the site, Cloudflare processes technical access data (IP address, user agent, timestamp, requested URL) to ensure the operation and security of the website. Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in secure operation. Cloudflare is certified under the EU-US Data Privacy Framework.
3. Server Log Files
The following data is recorded automatically with every request:
- IP address (anonymized or truncated by Cloudflare)
- Date and time of the request
- Requested URL
- Referrer
- User agent (browser / operating system)
This data is not merged with other data sources and is used solely for stable operation and to prevent abuse.
4. Cookies & Local Storage
We use strictly necessary cookies only. Once login is enabled, a signed session cookie is set; it contains only an opaque session ID and is required to maintain your logged-in state. No tracking cookies, no marketing cookies. Legal basis: § 25 (2) (2) TTDSG — technically necessary.
5. User Account and Uploads
When you upload a creation (tuning configuration, screenshot, build metadata) to Tuning Garage, we store the following data linked to your account:
- Username and account ID
- Uploaded screenshot file (stored on Cloudflare R2)
- Uploaded build configuration file (stored on Cloudflare R2)
- Build metadata (name, parts included, timestamps)
- Engagement data (downloads received, likes, ratings)
This data may be displayed on public listings (Explore, Builds, Garages, your profile page). Legal basis: Art. 6 (1) (b) GDPR — performance of a contract.
6. Downloads
Every download event may be logged in our database (account ID, creation ID, timestamp) in order to prevent abuse and compute popularity metrics. These logs are automatically deleted after 7 days. Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in preventing abuse.
7. Patreon Login
When you click "Sign in with Patreon", you are redirected to Patreon (Patreon, Inc., 600 Townsend St, San Francisco, CA 94103, USA). After a successful sign-in we receive the following data from Patreon:
- Patreon user ID (numeric identifier)
- Public full name and, where set, vanity handle
- Current membership amount (cents) — used to determine free vs. patron access tier
- OAuth access token — used only during the login transaction; the long-lived refresh token is not stored at this time
This data is stored in our database (Cloudflare D1) so we can recognize you on return visits and unlock tier-based features. Legal basis: Art. 6 (1) (b) GDPR — performance of a contract (login + tier-based access). Patreon's privacy policy: https://privacy.patreon.com/.
8. Cloudflare Web Analytics
We use Cloudflare Web Analytics, a cookieless analytics service. Aggregated, non-personal data is collected (pageviews, referrers, country, browser class). No IP addresses are stored, no fingerprinting, no cross-site tracking. Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in anonymous reach measurement.
9. Your Rights
You have the right at any time to:
- Access your data (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Lodge a complaint with a supervisory authority (Art. 77 GDPR)
Please send requests by email to tuning.garage.ac@gmail.com. An informal request is sufficient to delete your account; your user account and all associated uploads and downloads will then be removed without undue delay.
10. Changes to This Policy
We reserve the right to update this privacy policy if the legal situation or our services change. The current version is always available at https://tuning-garage.club/privacy.
Last updated: May 2026