Loading...
Loading...
Last updated: February 2026
We use account contact details for authentication and service delivery, bicycle and provenance details for the logbook, and minimal verification outcomes from Shufti. Full frame numbers are encrypted and restricted to authorised server workflows; public records show only limited bicycle provenance data.
Your data is used to create and maintain your bicycle logbook, provide public verification pages, facilitate ownership transfers, generate PDF logbooks, and communicate important account updates.
Application records and private files use Supabase; the website runs on Cloudflare. Access controls restrict private records. Public verification can show bicycle details, partial frame details, provenance events and verified town/country. Those details can still relate to a person; public lookup must not show owner email, phone, address or identity documents. Full private logbooks are separate from public lookup. Hosting regions, backup locations and log retention remain under review.
We plan to use Stripe for payments, Shufti for identity and address checks, SignWell for signed no-receipt declarations, Supabase for application data, and Documentero for logbook generation. Each provider is limited to the information needed for its role and requires launch due diligence and contractual review. The referral page loads Viral Loops sharing tools only when you choose to load them. Loading sends connection and browser information to Viral Loops and allows campaign data to be stored on this device. Details submitted in the tools go to Viral Loops; choosing to link rewards also sends your verified account email.
Sign-in uses Supabase browser local storage, readable by website scripts, rather than an HttpOnly authentication cookie. Language choices use the NEXT_LOCALE cookie. Clearing local data does not revoke sessions on other devices. Campaign storage and affiliate attribution have separate controls.
For access, correction, export or deletion requests, contact hello@registermybike.com. Automated account deletion and complete provider, file, backup and log cleanup are not fully available. Account deletion and logbook withdrawal are different. Retention periods and exceptions still require approval; removing an account link or hashing identifiers does not necessarily anonymise a record.
Under GDPR, you have the right to access, rectify, erase, restrict processing, and port your personal data. You may also object to processing. To exercise these rights, contact us at hello@registermybike.com.
For privacy-related inquiries, email hello@registermybike.com or use our contact form.