DRAFT · LAST UPDATED 5 NOVEMBER 2026
Privacy policy
WiperNote lets people message the owner of a parked car without either side seeing the other’s phone number. We keep as little data as the service needs and delete it on a fixed schedule.
Who is responsible
SEMNOS SRL, [ADDRESS], CUI [CUI], Trade Register no. [J…/…/…], operating WiperNote (wipernote.com). Contact for anything about your data: privacy@wipernote.com.
What we keep, and for how long
| Data | Kept for | Why |
|---|---|---|
| Owner email address, language, plan | Until you delete your account | Signing in and sending your alerts (contract) |
| Car nickname, sticker code, car mode | Until you delete the car or account | Linking the sticker to you (contract) |
| Chat messages and the reason picked | Deleted at the daily clean-up after 24 hours without a new message | The anonymous chat (contract) |
| A random code in a cookie on the phone of the person who scanned | 2 days | Keeping their chat open to them only |
| Telegram chat ID, if you connect Telegram | Until you disconnect | Sending you alerts there (contract) |
| Mobile number, if you add one for backup alerts (Plus) | Until you remove it or delete your account; check codes 15 minutes | Backup alerts by SMS or WhatsApp (contract) |
| Record of each SMS or WhatsApp sent: country code, provider, cost, time (not the number or the text) | 13 months | Costs and invoices (legal obligation, legitimate interest) |
| If you pay for Plus: name, billing and postal address, VAT number if you add one, Stripe customer and subscription IDs, plan status and dates (never your card details: Stripe keeps those) | For as long as you are on Plus, then invoices and payment records 10 years | Taking payment and posting your sticker (contract); keeping accounts (legal obligation) |
| Phone notification address from your browser | Until you turn notifications off or it expires | Waking your phone when an alert arrives |
| Sticker scans: sticker code, time, country | 90 days | Spotting abuse; usage numbers |
| Sign-in links | 20 minutes, single use | Signing in without a password |
| Sign-in sessions (cookie) | 30 days | Keeping you signed in |
| Launch-list email, if you joined | Until launch email is sent or you ask us to delete it; unconfirmed addresses within 48 hours | One launch email (consent) |
| Counters for rate limits | 2 days | Stopping spam and harassment (legitimate interest) |
We never store IP addresses. To limit abuse we keep a one-way scrambled value that changes every day and can’t be turned back into an address. We don’t ask people who scan a sticker for any personal data, and we never show anyone your email address or phone number. There is no lookup by number plate.
Cookies
Only these cookies, all needed for the site to work: wn_s keeps an owner signed in (30 days), wn_v lets a person who scanned see their own chat (2 days), wn_ck opens one chat from an owner’s own alert link (1 day), and wn_lang remembers the language you chose (1 year). No analytics, advertising or tracking cookies.
Who processes data for us
Cloudflare, Inc. hosts the site, the database and the email sending. Data can be processed outside the EU; Cloudflare relies on the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. If you connect Telegram, Telegram delivers your alerts. On Plus, backup alerts are sent by SMS through BulkGate s.r.o. (Czech Republic) or Twilio Inc. (USA), or by WhatsApp through Meta Platforms Ireland, if you choose it; they receive your number and the alert text, only to deliver it. Payments for Plus are handled by Stripe Payments Europe Ltd (Ireland), which receives your email, name, addresses and card details and also acts as a controller for fraud prevention and its own legal duties. Phone notifications pass through your browser’s push service (Apple, Google or Mozilla), which receives only a wake-up signal, never the message. We don’t sell or share data with anyone else.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it, by writing to privacy@wipernote.com. You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or the authority where you live.
Changes
If we change this policy we’ll update the date above, and tell owners by email about any important change.