Privacy policy

Last updated: 19 February 2026

Data Controller

The data controller for personal data collected via the FuelLog.ch website is:

DSTec is a Swiss sole proprietorship specialising in web application development. As data controller, DSTec determines the purposes and means of processing Fuel Log users' personal data.

Data Collected

When using Fuel Log, we collect the following categories of data:

Account data

  • Email address (login identifier)
  • First name and surname
  • Password (stored as a bcrypt hash, never in plain text)
  • Preferred language
  • Account creation date

Vehicle data

  • Vehicle make, model and year
  • Mileage
  • Fuel type
  • Number plate (optional)

Fill-up data

  • Fill-up date
  • Fuel quantity (litres)
  • Price paid and price per litre
  • Mileage at the time of fill-up
  • Petrol station (optional)
  • Notes (optional)

Maintenance data

  • Type of maintenance (oil change, tyres, etc.)
  • Date and mileage
  • Cost
  • Notes and description (optional)

Technical data

  • Session and preference cookies (see Cookies section)
  • Login logs (IP address, date, time, browser) retained for 90 days

Legal Basis for Processing

Fuel Log processes your personal data in accordance with the Swiss Federal Act on Data Protection (nFADP), which entered into force on 1 September 2023, as well as the General Data Protection Regulation (GDPR) of the European Union for visitors located in the EU/EEA.

The processing of your data is based on the following legal grounds:

  • Performance of a contract (Art. 6(1)(b) GDPR / Art. 31(1) nFADP): Processing is necessary for the provision of the Fuel Log service (account creation, fill-up recording, vehicle tracking).
  • Consent (Art. 6(1)(a) GDPR / Art. 6(6) nFADP): For the display of personalised advertising via Google AdSense and the placement of non-essential cookies. You may withdraw your consent at any time.
  • Legitimate interest (Art. 6(1)(f) GDPR / Art. 31(1) nFADP): For securing the service (login logs, abuse prevention) and improving the application.

Data Hosting

All Fuel Log data is hosted in Switzerland by:

  • Hosting provider: Infomaniak Network SA
  • Headquarters: Geneva, Switzerland
  • Certification: ISO 27001 (information security)
  • Energy: 100% renewable

Your data never leaves Swiss territory. No data transfers to third countries are carried out for the operation of the service. Switzerland benefits from an adequacy decision by the European Commission, guaranteeing a level of data protection equivalent to that of the EU.

Cookies

Fuel Log uses cookies to ensure the proper functioning of the website and to improve your experience. Here are the cookies used:

Cookie Purpose Duration Type
PHPSESSID User session (authentication) Session (deleted when the browser is closed) Essential
fuellog_lang Stores your language preference 1 year Essential
mobility_consent Stores your cookie choice 1 year Essential
Google AdSense cookies Display of personalised advertisements Variable (according to Google) Third-party - with consent

Essential cookies are necessary for the website to function and cannot be disabled. Google AdSense advertising cookies are only placed after your explicit consent via our cookie banner.

Google AdSense

Fuel Log uses Google AdSense to display advertisements to users of the free version. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google AdSense may use cookies and similar technologies to display personalised advertisements based on your previous visits to this or other websites. These third-party cookies are only placed with your explicit consent, obtained via our cookie banner.

You can:

  • Refuse advertising cookies via our cookie banner
  • Manage your Google advertising preferences at adssettings.google.com
  • Disable third-party cookies in your browser settings

Supporters: Users who have made a donation (supporters) enjoy a completely ad-free browsing experience. No advertising cookies are placed for these users.

Your Rights

In accordance with the Swiss nFADP and the European GDPR, you have the following rights regarding your personal data:

  • Right of access: You may request a copy of all personal data we hold about you.
  • Right to rectification: You may request the correction of inaccurate or incomplete data. Most data can be modified directly from your account.
  • Right to erasure: You may request the deletion of your account and all associated data.
  • Right to data portability: You can export your data in CSV and PDF formats directly from the application (Export menu).
  • Right to object: You may object to the processing of your data for advertising purposes by refusing AdSense cookies.
  • Right to withdraw consent: You may withdraw your consent to non-essential cookies at any time via the cookie settings.

To exercise your rights, contact us at: admin@dstec.ch. We will respond within 30 days.

If you believe your rights are not being respected, you may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or with the competent data protection authority in your country of residence.

Data Retention

We retain your personal data according to the following principles:

  • Account and vehicle data: Retained as long as your account is active. Deleted within 30 days of an account deletion request.
  • Fill-up and maintenance data: Retained as long as your account is active. Exportable at any time before deletion.
  • Login logs: Retained for 90 days, then automatically deleted. These logs are used solely for service security (intrusion detection, abuse prevention).
  • Preference cookies: Expire after 1 year.
  • Session cookies: Deleted when the browser is closed.

After deletion of your account, all your personal data is permanently erased from our servers. This action is irreversible.

Security Measures

We implement appropriate technical and organisational measures to protect your personal data:

Mandatory HTTPS

All communications between your browser and our servers are encrypted via SSL/TLS

bcrypt hashing

Passwords are hashed with bcrypt and never stored in plain text

CSRF protection

Anti-CSRF tokens protect all forms against cross-site request forgery attacks

SQL injection prevention

Prepared statements (PDO) are used systematically to prevent SQL injection attacks

Despite these measures, no system is infallible. In the event of a data breach likely to affect your rights, we will notify you as soon as possible, in accordance with our legal obligations.

Contact - Data Protection

For any questions regarding the protection of your personal data, the exercise of your rights or this privacy policy, you may contact the data protection officer:

Changes to This Policy

We reserve the right to modify this privacy policy at any time. Any changes will be published on this page with an updated date.

In the event of a substantial change affecting the processing of your data, we will inform you by email or through a visible notification on the website.

We encourage you to check this page regularly to stay informed of any changes.

Last updated: 19 February 2026

Ready to simplify your vehicle management?

Free registration in 30 seconds

Create my free account