Privacy Policy

1. Who we are

Tesla Delivery Check is a free, independent owner guide for checking a new Tesla before you accept delivery. It is made and run by Bantenna ("Bantenna", "we", "us") at bantenna.com. Bantenna is responsible for the information described in this policy.

Tesla Delivery Check is not affiliated with, endorsed by or sponsored by Tesla, Inc. "Tesla" and model names are trademarks of their owner and are used here only to describe the vehicles the checklist is for.

2. What we collect and why

Using the checklist without an account

As you use the checklist, it stores the following in your browser's local storage on your device, so you can close the page and come back later:

• The model you picked, the step you're on and your result for each check (Good or Issue)
• Your VIN and country, if you enter them
• Your name and email, if you type them into the report form

If you use "Scan" on the VIN field, the camera feed is read on your device to find the VIN, by your browser's barcode reader and a text reader (Tesseract.js, which your browser downloads from jsDelivr). Camera images are never uploaded or stored; only the VIN it reads is put in the field. The camera turns off as soon as you close the scanner.

Any top-down photo you add to replace the car drawing is stored in your browser's storage (IndexedDB) and is never uploaded. None of this reaches us unless you sign in or ask us to email your report, as described below. You can remove it by clearing this site's data in your browser.

Signing in with Google

Sign-in is optional. If you choose "Continue with Google", Google shares your name, email address, profile photo and a unique account ID with us through Firebase Authentication. We use them to:

• Keep your checks in your account, so they follow you to another phone or laptop
• Fill in your name and email on the report form
• Show your name and photo on the start screen while you're signed in
• Default the name on your share page to your first name

We never receive your Google password.

Photos of issues

When you mark a check as an Issue, you can add up to 4 photos of it. Photos are shrunk and kept in your browser on your device. If you're signed in, they are also uploaded to a private folder for your account in Firebase Storage, so you can see them on another device; only your account can open them. Photos of flagged items are included in the PDF report when you email it to yourself. They are never shown on share pages. Remove a photo with the × on it, and it's deleted from your device and your account.

Saved checks (signed in)

While you're signed in, each check you work on is saved to your account once you mark a result or enter a VIN. A saved check holds the model, your full VIN (if entered), the country, the step you're on, your result for each check, when it was last updated and, if you share it, its share link. Saved checks are private: our database rules only let your own account read or change them.

Emailed reports

When you use "Email it to me", your browser makes a PDF of your results and sends it to us with the name and email you entered. Our email provider, Resend, then delivers it to you. The PDF includes your full VIN, if you entered one, because it's for you and your delivery advisor. The email itself shows only the VIN's last 4 characters.

To keep track of requests and prevent abuse, we keep a record of each one with: the name and email you entered, the model, the last 4 characters of the VIN, the result, the number of good, flagged and unchecked items, the titles of any flagged items, your account ID and share link if you were signed in, whether the email was sent, and when. We don't keep a copy of the PDF.

Preventing abuse

To make sure requests to our database, storage and email service come from this website and not from bots, we use Firebase App Check with Google reCAPTCHA Enterprise. It runs invisibly and sends Google information about your browser, device and how the page is used, which Google uses to tell people from bots under its Privacy Policy and Terms.

To stop the email feature being used for spam, our server briefly uses your IP address to limit how many emails can be sent from one connection, and to one address, in an hour. This count lives only in the server's memory for about an hour and is not stored in our database.

Support payments

If you choose to buy us a coffee, the payment form is provided by Buy Me a Coffee inside a frame on our page, or on their site. Buy Me a Coffee and its payment processors handle the payment and any details you give them under their own privacy policy. We don't see or store your card details. We may receive the name and message you choose to leave with your support.

Analytics (only with your permission)

The first time you visit, we ask whether we may use Google Analytics. If you choose "Allow", Google Analytics 4 (through Firebase) records how the checklist is used, so we can improve it: which pages and steps are viewed, the model you pick, when a check is marked Good or Issue (not your VIN or any personal details), sign-ins, emailed reports, share links and opening the support window, along with general information Google collects such as your approximate location (city or country), device, browser and how you arrived. Google Analytics doesn't receive your name, email or VIN from us. Ad features and ad personalization are turned off. If you choose "No thanks", or don't choose, Google Analytics isn't loaded at all. You can change your choice any time with "Analytics settings" on the start screen.

Contacting us

If you email us, we use your email address and message to reply, and keep the conversation for as long as needed to help you.

Technical information

Like any website, our hosting provider (Google, through Firebase Hosting and Cloud Functions) automatically processes technical information such as your IP address, browser type, the pages requested and the time of the request, to deliver the site and keep it secure. These logs are kept under Google's standard retention. We don't use them to profile you.

3. Public share pages

When you're signed in and open the Review screen, we automatically create a page at an address like bantenna.com/c/Ab3dEf7h so you can share your result. The link is also included in your report email. A share page shows:

• A display name (your first name by default, which you can change)
• The model, the delivery date and your result, with the number of good, flagged and unchecked items
• The last 4 characters of your VIN, if you entered one
• The titles of your flagged items, only if you choose to show them

A share page never shows your full VIN, your email address or your photo. Anyone with the link can view it, links can be passed on, and the page can appear in search engines and in link previews on social media and messaging apps. You can change the name, date and flagged items, or remove the page entirely with "Stop sharing" on the Review screen. Once you stop sharing, we won't recreate the page for that check unless you ask us to. Copies already saved by others, or cached by search engines and apps, may take time to disappear and are outside our control.

4. Services we use

We use a small number of providers to run the site. They process information on our behalf, or as described in their own policies:

We don't sell, rent or trade your information, and we don't share it with advertisers or data brokers. We may disclose information if the law requires it, to protect the rights, safety or property of users, the public or Bantenna, or as part of a transfer of the service to a new owner who agrees to this policy.

5. Cookies and browser storage

We don't use advertising cookies, and we don't track you across other websites. The site uses your browser's local storage and IndexedDB to remember your checklist, your photos and your analytics choice, and Firebase Authentication uses browser storage to keep you signed in. These are needed for the features you use.

Only if you allow analytics, Google Analytics sets its cookies (_ga and _ga_*) to count visits and tell repeat visitors apart. If you don't allow it, these cookies aren't set. You can change your choice with "Analytics settings" on the start screen, and remove existing cookies by clearing this site's data in your browser. Third-party services in this policy (such as Buy Me a Coffee, when you open the support window) may set their own cookies under their own policies.

6. Legal bases

Where laws such as the EU and UK GDPR apply, we rely on:

• Performing our service to you: saving your checks, creating your share page and sending the report you ask for
• Consent: signing in with Google, choosing to email your report, and allowing analytics, any of which you can withdraw at any time
• Legitimate interests: keeping the service secure, preventing spam and abuse, and keeping a record of the emails we send
• Legal obligations, where they apply

7. How long we keep information

• In your browser: until you clear this site's data or use "Start over"
• Your account, saved checks and issue photos: until you remove them or ask us to delete them
• Share pages: until you stop sharing, or until you ask us to delete your account
• Report records: for as long as we need them to run and protect the service, and no longer than 24 months
• Abuse-prevention counts: about an hour, in server memory only
• Google Analytics data: 2 months at the event level (Google's standard setting), after which only aggregated reports remain
• Hosting logs: under Google Cloud's standard retention

8. Your choices and rights

You can always use the checklist without signing in, sign out at any time, change or remove your share page from the Review screen, and clear what's stored in your browser. When signed in, you can delete any saved check (with its photos and share page) from "Your checks" on the start screen, and delete your account and everything tied to it with "Delete account". That removes your saved checks, photos, share pages, report records and the account itself straight away.

Depending on where you live, including under the EU and UK GDPR, California law (CCPA/CPRA) and the Philippine Data Privacy Act of 2012, you may have the right to:

• Ask what information we hold about you and get a copy
• Correct information that's wrong
• Delete your account, saved checks, share pages and report records
• Object to or restrict some uses, and withdraw consent
• Receive your information in a portable format
• Complain to your local data protection authority (in the Philippines, the National Privacy Commission)

To use any of these rights, email shad@flowth.co from the address on your account, or tell us which address you used. We'll reply within 30 days. We don't sell personal information, and we won't treat you differently for using your rights.

9. Where information is stored

Saved checks, share pages and report records are stored in Google Cloud's Singapore region, and issue photos of signed-in users in Google Cloud's United States (us-east1) region. Our email provider processes emails in Japan and the United States, and our other providers may process information in other countries. Wherever information goes, we rely on our providers' safeguards, such as standard contractual clauses where they apply, to protect it.

10. Security

The site is served only over HTTPS. Database rules limit saved checks to their owner, share pages carry only the last 4 characters of a VIN, and our email service is protected against abuse. No system is perfectly secure, though, so please don't put information in the checklist that you wouldn't want stored.

11. Children

Tesla Delivery Check is meant for people taking delivery of a vehicle. It isn't directed at children under 16, and we don't knowingly collect information from them. If you think a child has given us personal information, contact us and we'll delete it.

12. Changes to this policy

We may update this policy as the service changes. We'll change the "Last updated" date at the top, and if a change is significant we'll make it clear on the site before it takes effect.

13. Contact

Questions or requests about privacy: shad@flowth.co

See also our Terms of Use.