Legal documents
Local storage, cookies and similar technologies
Information about local storage, cookies and similar technologies.
This version is offered exclusively in Spain, France, Germany, Austria, Ireland, Malta and Luxembourg to people aged 18 or over. The owner is established in Spain. The interface, essential instructions and public documents are available in Spanish, English, French and German. New multilingual installations start with the “System” option: they use the device language if it is one of the four available languages, or English otherwise. Existing installations retain Spanish or the selected language. The language can be changed in the application settings; a manual choice is retained. Changing the language does not alter the entries made by the user.
Language and territory are separate decisions; nationality and residence are not inferred from the selected language. The territorial scope does not involve geolocation or IP-based blocking and does not limit applicable mandatory rules.
Terms relating to workdays, allowances and kilometres describe personal organisation features. Translation does not automatically adapt their calculations to another country's employment, tax or transport legislation. Amounts are expressed in euros and distances in kilometres unless a feature expressly states otherwise.
1. Current status
WorkDrivePro does not currently incorporate advertising, behavioural analytics, attribution, tracking pixels or marketing SDKs. Vercel Web Analytics is disabled in the audited project.
The technologies used by the application are necessary to create and protect the account, keep data on the device, allow offline use, synchronise and carry out the requested actions. Consent is not requested for these strictly necessary functions, and no banner is displayed suggesting the existence of optional purposes that are not used.
The CNIL explains the rules that apply to cookies and other trackers and publishes specific recommendations for mobile applications.
Vehicle and Refuelling receive only data entered manually by the user. They do not use GPS, request the device's location, read the number plate using the camera or connect to the vehicle, a fuel pump or a telemetry system.
2. Device technologies
| Technology | Information | Purpose | Duration or criterion |
|---|---|---|---|
| WorkDrivePro SQLite database | Profile, workdays, shifts, allowances, calendar, routes, number plates, kilometre readings, refuelling and synchronisation data | Offline use and synchronisation of the features used | While the account is used on the device; data associated with the account is purged on the current device after deletion is confirmed by the server, or when the app's data is cleared, depending on the system |
| Legacy Tachograph data in SQLite | Minutes of driving, other work and availability, identifiers, revisions and deletion markers created by earlier versions | Retain and synchronise legacy records during the transition, preserve the integrity of their erasure and delete them when the account is deleted; the current version does not offer a section for creating or viewing them | While legacy records associated with the account exist; they are purged on the current device after deletion is confirmed by the server, or when the app's data is cleared, depending on the system |
| Pending kilometre-reading entry | Account, vehicle and record identifiers, number plate, date, initial reading and technical dates | Allow a journey that does not yet have a final reading to be closed later on the same device | Until it is closed or deleted, or until the account's local data is purged. It remains only on the device, does not enter the synchronisation queue and, when closed, is replaced by a complete record that can be synchronised |
| System secure storage | Session, tokens, PKCE state and identifier/status of a pending account deletion | Maintain the session, protect authentication and allow an uncertain deletion to be checked without repeating it | The session, until sign-out on that device, revocation, account deletion or technical expiry; the deletion marker, until the flow is completed or safely resolved |
| SQLite recovery marker | Local indication that a password recovery flow is pending | Safely resume choosing a password after returning to the application | Until the flow is completed or cancelled, or until the local data associated with the account is purged |
| General application preferences | Appearance, interface language, text scale, notification preference and other general device settings | Remember the user's general choices | They are local, are not synchronised with Supabase and may persist after signing out or deleting an account; they remain until changed or the app's data is cleared |
| Personal dashboard order | Account identifier and selected order | Remember the selected order for the account on that device | It is local and is not synchronised with Supabase; it is deleted when the data linked to the account is purged on that device |
| Synchronisation queue and cursors | Pending changes, identifiers, relationships between vehicle, kilometre-reading and refuelling records, retries, errors and synchronisation position | Send changes, recover from interruptions and avoid duplicates | Successfully confirmed operations: maximum 7 days; failed or unresolved operations: maximum 30 days from the first failure. Cursors remain while necessary for consistency and are deleted when the local data associated with the account is purged |
| Record deletion markers | Identifier, revision, functional relationship and technical deletion date | Propagate and resolve deletion across devices without a deleted record reappearing | As a general rule, a maximum of 90 days from creation. For number plates, kilometre-reading and refuelling records, a marker not yet acknowledged by the server remains in a pending technical state until confirmation or reconciliation, hidden from ordinary features and used solely to prevent reappearance. Once confirmed, it is deleted in the next applicable cycle and no later than 90 days after confirmation. A number plate is retained while records or a pending entry refer to it. The narrow exceptions for referential integrity, legal obligations or claims described in the Privacy Policy also apply |
| PDF reports | Name, company and data from the selected sections and periods. They may show the number plate associated with a workday and, when Refuelling is included, the date, number plate, odometer reading, volumes and costs of diesel and AdBlue, total and note. They do not include pending entries or the initial readings, final readings or distances from the Vehicle section | Create the requested report | The user chooses the initial destination. WorkDrivePro cannot control or withdraw copies already saved or delivered; the device, application, cloud service or recipient may retain other copies |
| Legacy JSON copies | Files created by earlier versions | Defensive purging during account deletion; no new copies are generated | WorkDrivePro deletes only recognised internal copies belonging to the same account. It cannot control or withdraw external copies already saved or delivered |
| Authenticated form and private support inbox | Account identifier and email address, optional alias, category, subject, message, request UUID, reference, status and technical dates | Register the enquiry, display its reference and allow an authorised administrator account to filter and handle it | The draft is kept only while the screen is open and is not saved as a local preference. Open enquiries are retained for a maximum of 365 days; resolved or closed enquiries, for up to 180 days from that status without exceeding the overall 365-day limit. Deleting the account also deletes its enquiries from the inbox. The minimal anti-abuse receipt is retained for a maximum of 30 days; the email copy is subject to the Resend and support mailbox periods described in the Privacy Policy |
The language preference remains local. Only when password recovery is requested is the resolved language code added to an exact, pre-authorised return path so that Supabase can select the email language. This does not alter the recorded legal language or create a remote preference; the path may appear in technical authentication logs.
The SQLite database and PDFs do not incorporate WorkDrivePro-specific encryption or passwords; nor do JSON copies created by earlier versions. Secure session storage is separate from that database.
Number plates, closed kilometre-reading records and refuelling records are included in synchronisation with Supabase. A pending kilometre-reading entry is the only one of these structures that remains local until it is closed.
3. Public website, private dashboard and support API
The static website hosted on Vercel publishes legal information, account deletion information and the email confirmation result. The confirmation page also offers a return to the application.
The application sends the support form to an API hosted on Vercel. The API requires a WorkDrivePro session, validates the token with Supabase, applies anti-abuse controls and registers the enquiry in Supabase before confirming receipt. A Resend notification to the support mailbox is auxiliary: the enquiry remains available in the private inbox even if that notification cannot be delivered. The reference is displayed in the application and no automatic acknowledgement is sent to the account's email address. The administration dashboard uses a secure session cookie with HttpOnly, Secure and SameSite=Strict; the application's form does not install cookies or use browser storage.
On the public pages and the application's form, the audited code and configuration:
- do not install first-party cookies;
- do not use
localStorage,sessionStorageor IndexedDB; - do not load advertising or analytics scripts;
- do not integrate Vercel Web Analytics; and
- apply a restrictive connections policy and prevent the page from being cached.
The private dashboard cookie only maintains the administrative session for a maximum of one hour. It is not exposed to JavaScript, is not used for analytics or advertising and is deleted when signing out in that browser.
Vercel may generate technical delivery and security logs, such as IP address, user agent, URL, headers, date and time. These logs are not a cookie installed in the browser and are explained in the Privacy Policy.
Supabase and its security layer may apply technical anti-fraud or anti-abuse mechanisms when processing authentication links and requests. They are only considered exempt where necessary to transmit the communication, protect it or provide the requested function.
4. External services
Opening Google Maps, saving a file to an external service, clicking a provider link or writing to the Yahoo email address involves accessing a service separate from WorkDrivePro. Resend also acts as a technical provider when delivering operational and support emails. Each service may apply its own technologies and privacy information. WorkDrivePro does not control technologies installed by a third party once the user decides to leave the WorkDrivePro application or public website.
5. User controls
System settings allow users to sign out, clear the app's data or uninstall it. Browsers allow cookies and website data to be viewed and deleted. These actions may prevent a necessary session or link from working.
Deleting data on one device does not automatically delete the remote account, data on other devices or files already shared. To delete the account, the corresponding option within WorkDrivePro must be used and the operation expressly confirmed. Confirmed deletion clears the data associated with the account and the session only on the device running the flow; the dashboard order associated with the account is deleted, general preferences may remain and other devices require separate action.
6. Future changes
Before introducing analytics, advertising, attribution, cross-service tracking, A/B testing, profiling or any non-essential technology, a new audit will be carried out. Where consent is required:
- the technology will remain blocked until consent is obtained;
- accepting and rejecting will be equally easy;
- purposes may be configured separately; and
- withdrawing consent will be as easy as giving it.
The version and date of this information appear at the beginning. The inventory will be reviewed before every release and whenever the page, providers or dependencies change.
The local language preference accompanies the documents available in Spanish, English, French and German for the EU scope, including France. It does not add a remote translation service or tracking technologies. This information is not presented as consent and does not require a separate checkbox.
7. Controller and contact
Controller: Catalin Tudor Mocanu, owner of WorkDrivePro.
Contact: catalinu88@yahoo.com.
Full information about purposes, legal bases, providers, transfers, retention and rights can be found in the WorkDrivePro Privacy Policy.