Privacy by design

Privacy and cookies

Clear controls for what AutoSOS stores, why it is needed, and how long it is kept.

Last updated August 13, 2026

Your analytics choice

Optional first-party analytics are disabled until you accept them. Rejecting analytics does not limit diagnostics, accounts, reports, marketplace access, or payments.

Cookies used by AutoSOS

Necessaryhomesos_session

Keeps a signed-in account authenticated. Secure, HTTP-only, SameSite cookie; up to 30 days.

Necessaryautos_admin_session

Protects owner operations access. Secure, HTTP-only and short-lived.

Necessaryautos_analytics_consent

Remembers Accept or Reject so the banner does not repeatedly ask. Up to one year.

Optional analyticsautos_visitor_id

Created only after acceptance. Its random value is hashed before analytics storage and is never displayed to administrators. Up to one year.

What optional analytics collect

AutoSOS records named product events such as page views, vehicle selection, diagnostic start and completion, OBD lookup, report creation, pricing and checkout steps, marketplace viewing, and account completion. For signed-in users who consent, events may be associated with the account so support and product operations can understand the journey.

What the analytics system does not collect

Retention and safeguards

Optional analytics events are retained for no more than 90 days. URL query strings are removed and record identifiers in private paths are replaced before storage. Event names and metadata fields are allowlisted server-side; unknown or sensitive fields are rejected.

Service providers and transfers

Cloudflare hosts AutoSOS and processes requests as infrastructure. Stripe handles payment and billing interfaces. Google handles Google sign-in when selected. Their services may set strictly necessary cookies or process request information under their own terms. AutoSOS does not use optional analytics data for behavioural advertising or sell it.

Your choices and access

You can change analytics consent at any time using the button above. You may also request information about account data, correction, or deletion through the site owner. Withdrawal stops new optional analytics collection; necessary security and transaction records may remain where required to operate the service or meet legal obligations.

Résumé en français

Les mesures d’utilisation facultatives restent désactivées sans votre accord. Elles ne recueillent ni mots de passe, ni données de paiement, ni NIV, ni adresse exacte, ni texte de diagnostic, ni messages privés. Les événements sont conservés au maximum 90 jours. Vous pouvez accepter, refuser ou modifier votre choix à tout moment.