How the MoreMiles website handles your personal data.
Last updated: 2026-08-25
This policy covers the public MoreMiles website at moremiles.autos: what we collect when you browse it, when you submit the demo / contact form, and through website analytics.
It does not cover the MoreMiles application used by auto-service shops to manage their own customers. When a shop uses MoreMiles to process its customers' data, that shop is the data controller and MoreMiles acts as its processor under a separate agreement.
Demo / contact form: the name, email address, phone number and any message you enter. We use this only to reply to your request and, if you ask for a demo, to arrange it. Legal basis: taking steps at your request before a possible contract (GDPR Art. 6(1)(b)), or our legitimate interest in replying to your enquiry (Art. 6(1)(f)). Providing these details is not a legal obligation, but without them we cannot reply.
Website analytics (traffic): aggregate, cookieless measurement of page views, referrers, approximate region, and device type, provided by Vercel Web Analytics. No cookies are set and you are not individually identified. Legal basis: our legitimate interest in understanding and improving the site (Art. 6(1)(f)).
Behaviour analytics (heatmaps and session replays): provided by Microsoft Clarity, and used only to see where visitors click, how far they scroll, and where the page confuses them, so we can improve it. This runs only if you accept it in the cookie banner. Legal basis: your consent (Art. 6(1)(a)). Clarity masks text input by default.
Analytics and ad measurement (Google): with your consent we use Google Analytics 4 to understand where visitors come from and how they move through the site, and Google Ads conversion tracking to measure which ads lead to a demo request. Google may set cookies and build remarketing audiences so our ads can reach past visitors again. This runs only if you accept it in the cookie banner. Legal basis: your consent (Art. 6(1)(a)).
Server logs: our hosting provider records standard technical data (IP address, timestamp, requested page) for security and reliability. Legal basis: legitimate interest (Art. 6(1)(f)).
Anti-abuse checks: when you submit a form (for example the giveaway entry), we run Cloudflare Turnstile to tell real visitors apart from bots. For this it may process technical signals from your browser, such as your IP address and device/browser characteristics. In its default mode it sets no cookies. Legal basis: our legitimate interest in preventing spam and abuse (Art. 6(1)(f)).
We use a small number of service providers who process data on our behalf, under contract and only on our instructions:
• Vercel — website hosting and cookieless traffic analytics. • Microsoft Clarity — behaviour analytics (only after consent). • Google (Analytics & Ads) — website analytics and advertising measurement / remarketing (only after consent). • Supabase — database that stores demo / contact form submissions. • Resend — sends us the email notification when you submit the form. • Cloudflare — anti-abuse challenge (Turnstile) on form submissions.
We do not sell your personal data. We use Google for advertising measurement and remarketing only after you consent, as described above.
Some of these providers may process data on servers outside the European Economic Area (for example in the United States). Where that happens, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can request a copy of these safeguards by contacting us at the address above.
Demo / contact submissions: until your request is handled, and no longer than 12 months afterwards, unless we agree a business relationship.
Behaviour analytics (Clarity): retained for up to 30 days by default.
Google Analytics: retained for up to 14 months.
Traffic analytics: aggregate figures only, with no data identifying you.
Under the GDPR you can ask us to give you access to your data, correct it, delete it, restrict or object to its use, or provide it in a portable format. Where we rely on your consent, you can withdraw it at any time — this does not affect processing done before you withdrew.
Where we rely on legitimate interest (traffic analytics and server logs), you have the right to object to that processing at any time. We do not make decisions about you by automated means, and we do not use your data for profiling.
To exercise any of these, email us at the address above. You also have the right to lodge a complaint with the Romanian supervisory authority.
If we change how we handle data, we will update this page and the date shown at the top.
You may lodge a complaint with:
ANSPDCP (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal)
B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, 010336 București
anspdcp@dataprotection.ro · https://www.dataprotection.ro