Privacy & local storage

Policy version: September 9, 2026. This policy applies to every ev.guru edition.

Controller and contact

Autohaus Dörrschuck Handels GmbH
Marienborner Str. 49
55128 Mainz
Germany
Email: info@autohaus-doerrschuck.de
Phone: +49 (0) 6131 934070

Technical delivery and hosting

When you open a page, technically necessary request data are processed to deliver the site securely and reliably. These may include your IP address, time of access, requested path, browser or device information, connection data and security events. The legal basis for visitors in the EEA is Article 6(1)(f) GDPR; our legitimate interests are secure, stable delivery and diagnosing faults and attacks. The application does not create a separate access log.

Hosting is provided by Railway Corporation, 548 Market St PMB 68956, San Francisco, California 94104, USA. The service is configured for Railway’s EU West region in Amsterdam, Netherlands. Railway may process data as our processor and uses authorized subprocessors. Railway states that its services are largely operated from the United States regardless of hosting region and provides Standard Contractual Clauses and the EU–U.S. Data Privacy Framework as transfer mechanisms in its Data Processing Addendum. Railway privacy policy · Railway Data Processing Addendum

Railway documents deployment-log retention by plan: 7 days on Hobby/Trial, 30 days on Pro and up to 90 days on Enterprise. Data may also be retained where necessary for the service, legal obligations or dispute resolution. We limit access to authorized persons and do not combine these request data with calculator values.

Calculator values on your device

Calculations run in your browser. We do not transmit the values to an application server. “Save on this device” stores only the edition and calculation values in your browser’s localStorage under ev.guru.charging-profile.v1. Nothing is stored before you press that button. We read the record only when you select “Load saved settings”. It remains until you select “Delete saved settings” or clear it in your browser. Anyone with access to your browser profile may be able to read it.

Display preference

On a first visit, we do not store a theme setting. If you explicitly select Light or Dark, we store only the string light or dark in localStorage under ev.guru.theme.v1. On later visits, a local bootstrap and the theme control read that key solely to apply your requested appearance without a flash. Selecting System removes the key. The stored key and its value stay on your device. If you separately consent to session replays, a masked replay can show the resolved Light or Dark appearance as part of the visible page reconstruction; it does not include the localStorage record.

Installed app and offline notice

A normal website visit does not activate our offline storage. After installing ev.guru as an app, open it online once; the offline calculator is available after the readiness message appears. A service worker stores only the static document /offline.html in your browser’s Cache Storage under ev-guru-offline-v3. It contains an offline notice and a basic trip charging-cost calculator with no live prices. Values entered there stay only in the open page and are neither transmitted nor stored. Calculator profiles, addresses, routes, account pages and API responses are not stored in that cache. The cache has no fixed expiry and remains until a newer version replaces it or you clear ev.guru’s website data in your browser. It is not used for identification or tracking. The offline page reads a previously selected Light or Dark preference only to show the requested appearance; it does not store another preference. Offline storage is disabled and existing ev.guru offline caches are removed in the protected preview.

Sharing a calculation

“Copy link” writes calculation values into the URL fragment after #. Browsers do not send that fragment in the HTTP request. People who receive the link or can access your clipboard or browser history can read its values. Opening a shared link loads its validated calculation values into the calculator, without saving them to device storage. Do not place personal or confidential information in calculator values.

Location, station and route searches

Use current location requests your browser’s permission only after you press the button. Your browser or operating system determines the position under its own location settings. The selected coordinates remain in the open page until you explicitly search for stations or calculate a route. You can replace the location with an address or close the page to discard it.

A station search sends the center coordinates and selected filters in the request body to our server, which searches its own public-station database. These coordinates are not sent to the station-data providers, stored in profiles, placed in the URL or recorded in application logs or analytics. A short-lived keyed IP pseudonym limits excessive searches; it is held only in server memory and cleared within one minute. The public station ID used by Route here identifies the charging location, not your search center. In the EEA, providing the requested search and preventing abuse are our legitimate interests under Article 6(1)(f) GDPR.

A request is sent only after you explicitly search for an address or calculate a route. The address text is sent through our server to HeiGIT gGmbH, Schloss-Wolfsbrunnenweg 33, 69118 Heidelberg, Germany, for geocoding; selected coordinates and route parameters are then sent to its openrouteservice API for the road route. We do not forward your IP address, user agent, referrer, account or session identifier to HeiGIT, and do not save endpoints or returned routes in profiles or application logs. HeiGIT receives our server request and API-key association and describes its own purposes as service delivery, quality assurance, misuse prevention and statistics. Its public policy gives purpose-based retention criteria rather than a fixed route-request period. HeiGIT privacy policy

In the EEA we rely on Article 6(1)(f) GDPR for the requested route transmission and abuse control. Our legitimate interests are providing the route the user expressly requests, protecting the service and observing provider limits. The request is expected from the labeled action, endpoints are not retained by ev.guru, and less precise public locations can be used. For quotas, we create a keyed one-way pseudonym from the connection IP: the raw IP is not stored in that table, the pseudonym is removed after one minute, and the remaining request type and timestamp after 24 hours. HeiGIT is a separate recipient for its stated own purposes; its precise role split remains under clarification.

Optional OpenStreetMap map

Only after you choose to load the map, your browser requests the visible map tiles from the OpenStreetMap Foundation (OSMF). OSMF receives your IP address, browser details, ev.guru as the referring origin and the map area identifiable from tile coordinates. Tiles use a global cache network. The station list and route handoff work without this map. Close the map to stop further tile requests; this choice is not saved.

OSMF privacy policy · © OpenStreetMap contributors · ODbL

Optional usage analytics

Only if you agree, we use our own Umami instance at umami1.up.railway.app to understand which public pages are useful and improve their operation. Umami's scripts and collection endpoints receive no requests before your consent. The instance and its database are hosted by Railway in Amsterdam; the hosting and transfer information above also applies here. Umami Software does not receive these self-hosted analytics.

With usage analytics enabled, we send the public page path, website identifier, page label, language and screen dimensions. URL parameters, fragments, referring URLs, account identifiers, form values and route coordinates are excluded. Browser, operating system, approximate location and a pseudonymous session are derived on our Umami server from connection information including the IP address and user agent. The analytics database does not retain the raw IP address. We do not connect analytics sessions to user accounts.

Optional heatmaps and session replays

A separate choice allows heatmaps and session replays in addition to usage analytics. Each uses a sample of at most 15% of consenting page visits, with a maximum of five minutes per recording. They capture clicks, scrolling and a reconstruction of the page layout to help identify usability problems. All text and input values are masked; forms, calculators, tariff inputs, route planners and marked private areas are excluded. Account pages are never recorded. URL parameters and fragments are removed before transmission. No microphone, camera, canvas recording or network message contents are captured.

A daily deletion task removes ev.guru replay and heatmap records older than 30 days and usage analytics older than 90 days. The next daily run can add up to 24 hours to those periods. No analytics are shared for advertising or sold, and there are no advertising tags or marketing cookies.

Your choice and withdrawal

These optional services rely on your consent: Article 6(1)(a) GDPR and, where applicable, section 25(1) TDDDG in Germany or section 165(3) TKG 2021 in Austria. Rejecting them leaves every website function available. Your choice, its version and timestamp are kept in localStorage under ev.guru.consent.v1 for up to 180 days; this record has no visitor identifier and is used only to honor your choice. If local storage is blocked, the choice applies only in the current document. Global Privacy Control and Do Not Track disable optional collection even if an earlier choice allowed it.

You can change or withdraw consent here or using Privacy settings in every footer. Withdrawal stops collection and discards unsent recording data; it does not undo processing that occurred before withdrawal. For deletion or access requests, use the controller's contact above. Privacy settings

External sites

Fonts and images are delivered with the website. Provider and source sites receive data only when you follow an external link; we use a no-referrer policy. Any paid recommendation is labelled beside its link. The destination operator is responsible for its processing.

The labelled Lectron affiliate link is a direct Awin link and is not prefetched. Before you click it, ev.guru makes no request to Awin and sets no Awin cookie. After your deliberate click, Awin redirects you to the advertiser and may use cookies or other tracking to attribute a qualifying purchase. ev.guru adds no user identifier or sub-ID to the link and creates no server-side association with you. Awin states that it acts as an independent controller for its affiliate tracking; the advertiser's and Awin's own privacy notices apply after the click. Awin privacy notice

Optional account

Public content and calculators work without an account. If you use the optional account, we process your email address, user and session identifiers, session expiry, potentially IP address and user agent, short-lived hashed magic-link verification records, and calculator profiles you explicitly save. This is used only for authentication, abuse prevention and the storage you request. You can export or delete profiles and delete the account from the account area. Magic-link emails are delivered by Scaleway SAS Transactional Email as our processor. Scaleway receives the recipient address, sender, subject, message content and delivery metadata. Scaleway states that this processing takes place in France and that it uses no subprocessors specifically for Transactional Email. Scaleway privacy policy

Magic-link verification records become invalid after ten minutes. Sessions become invalid when they expire or you sign out. Better Auth removes an expired verification when it is checked and an expired session when it is accessed; ev.guru additionally removes expired verification, session and rate-limit records opportunistically during account requests. Records can therefore remain after becoming invalid while no account request occurs. Account and saved-profile data remain until you delete them or the account, subject to mandatory legal retention.

According to information provided by Scaleway on 9 September 2026, the body, subject and headers of a successfully delivered message are deleted from active systems almost immediately; remaining backup or replica copies are deleted within seven days. Undelivered messages or messages still being delivered remain for up to 36 hours. Bodies of messages blocked by the service are deleted 15 days after blocking or unblocking.

Scaleway says that sender and recipient addresses, delivery attempts, activity metadata and SMTP/API, delivery and bounce logs remain in active systems for the contractual period of the relevant TEM domain or account. Deleting the domain or closing the account starts deletion; residual replica and backup copies remain for up to seven days. Deleting an ev.guru account does not automatically delete these delivery records. Scaleway says that message content and headers can be considered for a recipient-specific deletion request, while operational logs kept as evidence of service delivery and deliverability cannot be erased individually. This is Scaleway’s stated retention practice, not a general exclusion of your data-protection rights. Requests can be sent to us using the contact details above or to privacy@scaleway.com. Scaleway Transactional Email Specific Conditions

Your rights

Where the GDPR applies, you may request access, correction, deletion, restriction and portability, and object to processing based on legitimate interests. Consent can be withdrawn for the future. You may complain to a data-protection supervisory authority, in particular in the EEA country where you live, work or believe an infringement occurred. There is no automated decision-making or profiling. Providing technical request data is necessary to receive the website; calculator values are optional. Send requests to the email address above.

Changes

We update the date above before materially changing the processing described here. New features such as analytics, advertising, accounts, forms or newsletters require a revised notice and, where required, consent before activation.