Skip to contentSkip to main content
ChargeStreak

Privacy Policy

Last updated 3 July 2026 · v1.1.0

ChargeStreak ("we", "us", "the Service") helps Tesla drivers track which Superchargers they have visited by syncing charging history from the Tesla Fleet API. This Privacy Policy explains what personal data we process, why, who we share it with, and the rights you have under the EU/EEA General Data Protection Regulation (GDPR).

1. Data controller

The data controller responsible for your personal data is:

  • Company: Augum Holding AS
  • Organisation number: 918 952 128
  • Privacy contact: hi@chargestreak.com

If you have questions about this policy or want to exercise your rights, contact us at the address above.

2. What data we collect

We process the following categories of personal data:

  • Account & identity: a Tesla account identifier created when you sign in, and your account approval status. Where your Tesla account exposes them — or you provide them yourself (for example a waitlist or contact email) — we also store your name and email address.
  • Tesla OAuth tokens: access and refresh tokens used to sync your data on your behalf. These are encrypted at rest (see Security).
  • Vehicle data: Vehicle Identification Numbers (VINs), model, trim, colour, year, and — when you use vehicle features — battery/charge state, climate state, tyre pressure, odometer, software version, and vehicle location.
  • Charging history: Supercharger sessions including date, energy delivered (kWh), duration, cost, and location.
  • Vehicle command logs: an audit log of commands you send (e.g. lock, climate, media) and their outcome.
  • Contact form data: your name, email, topic, and message when you contact us.
  • Technical data: IP address (hashed for rate-limiting on the contact form; your last login IP is retained for administrative audit only and is never exposed in the app), and error/performance diagnostics.

3. Legal basis for processing

We rely on the following legal bases under GDPR Article 6:

  • Performance of a contract (Art. 6(1)(b)) — to provide the Service: syncing your charging history, showing maps, and running vehicle commands. This covers your account data, Tesla tokens, vehicle data, and charging history.
  • Legitimate interest (Art. 6(1)(f)) — for security, abuse prevention, and rate-limiting (hashed IP, login IP, command logs); error monitoring and uptime (diagnostics and error logs); responding to contact requests (contact form data); spam protection on the contact form (reCAPTCHA token); and anonymous product analytics (see Anonymous product analytics and session replay).

4. Third parties

We do not sell your personal data. We share personal data only with the processors below, and only what each needs to function:

  • Tesla, Inc. — source of your account, vehicle, and charging data via the Tesla Fleet API.
  • Convex — backend and database; stores your data in the EU (eu-west-1).
  • Mapbox — map rendering and routing; receives the coordinates needed to draw maps and compute distances.
  • Google (reCAPTCHA v3) — bot protection on the contact form; receives your IP address and interaction signals.
  • Google (Gmail API) — used to send and receive support email when you contact us.
  • Axiom — application logging; entries may include your internal user ID for debugging.
  • Telegram — used only to notify the administrator of incoming contact messages.
  • PostHog — anonymous product analytics and session replay, hosted in the EU (PostHog EU Cloud); receives anonymous usage events and masked interface recordings without any account identifiers (see Anonymous product analytics).

5. Data retention

We keep personal data only as long as needed for the purposes above:

  • Sync job logs and token access logs are automatically deleted after 30 days.
  • Account, vehicle, and charging data are retained while your account is active.
  • When you request deletion, we remove your personal data (see Your rights).

6. Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Erase your data ("right to be forgotten").
  • Data portability — receive your data in a portable format.
  • Restrict or object to certain processing.
  • Lodge a complaint with your supervisory authority. In Norway this is the Norwegian Data Protection Authority (Datatilsynet).

You can download a copy of your personal data at any time from Settings → Data → Download my data. The export is a ZIP containing your data in machine-readable JSON (plus a CSV of your charging sessions) and excludes Tesla access tokens and internal secrets.

To exercise any of these rights, contact us at hi@chargestreak.com.

7. Data security

  • Tesla OAuth tokens are encrypted at rest using AES-256-GCM.
  • Backend data is hosted in the EU (Convex, eu-west-1).
  • All data is transmitted over HTTPS.
  • Contact-form IP addresses are hashed, never stored in plain text.

8. Anonymous product analytics and session replay

We use PostHog (EU Cloud, hosted in the EU) to understand how the Service is used — for example which features are used and where users run into problems — including watching anonymous replays of how the interface is operated.

  • Analytics is fully anonymous: we never link analytics data to your Tesla account, name, email, or VIN, and we never create identified analytics profiles.
  • PostHog sets no cookies; identifiers live only in your browser's memory and are discarded when you close the page.
  • Session replays mask all text and all form inputs, so addresses, locations, and other personal details are not readable in recordings.
  • We process this data on the basis of our legitimate interest (Art. 6(1)(f)) in understanding and improving the Service.

9. Cookies and similar technologies

We use a minimal set of cookies and similar technologies:

  • A theme cookie to remember your light/dark mode preference.
  • Google reCAPTCHA v3 on the contact form, which sets cookies for bot detection.

We do not use advertising or cross-site tracking cookies. Our product analytics (PostHog) does not set cookies (see Anonymous product analytics and session replay).

10. Changes to this policy

We may update this policy as the Service evolves. Material changes will be reflected in the version number and "Last updated" date below. Continued use of the Service after an update constitutes acceptance of the revised policy.

11. Version

This is version 1.1.0, last updated 2026-07-03.