Privacy policy

The short version

What we collect

Site visits. The web server records the requested page, the date and time, the response code, the browser and operating system, the referring page and the IP address. These logs are kept for up to 30 days and then deleted or aggregated.

Email. If you email support, we keep your address and the message so we can answer. We keep it for 30 days after the question is closed, then delete it. Server backups are kept for up to 6 weeks.

Account and orders. A Tune Report or Full Custom order creates an account. You sign in with a link we email you; there is no password. We keep your email address, your orders, the build details you send, the messages we exchange, your tune file and logs, and the report or tune we make. If you give us a VIN or controller serial for a fitment check, it stays with that order.

Order messages are on a different clock from support email. A question you send from an order page is kept with the order, but the message itself is deleted 30 days after it is sent, even if the order is still open. A support email is kept for 30 days after the question is closed. If you need a record of an order conversation, save a copy before the 30-day mark.

Payment. Payments go through Stripe. We keep the payment record (amount, date, order number) as tax and payment rules require. We do not store your full card number.

Orders and files. Start on the site or from a platform hub. Your file and log are used only to prepare your report or tune, are not shown to another customer, and are deleted when you ask.

Files sent without signing in. If you start an order without signing in, we keep your email, answers and files in temporary private storage and send one link to confirm your address. We do not read the files until you confirm. An unconfirmed submission expires after 72 hours and is deleted with its files.

Cookies and third parties

Attribution cookie. If you arrive from a link with campaign labels, we store a first-party cookie named tb_src for 60 days with the source, medium, campaign and content from that link, the name of the referring site (not the full address), the first page you opened and when. We do not store your IP address or ad click IDs in that cookie. The same note is saved with your account and order.

Sign-in. When you sign in to the portal, a first-party session cookie keeps you signed in on that browser. It lasts up to 30 days or until you sign out.

Stripe. Stripe sets the cookies it needs to take a payment and prevent fraud. See Stripe's privacy policy.

Email delivery. Order and sign-in email is sent through our email provider. The provider sees the address and the message so it can deliver it. We choose a provider that handles the data under its own privacy terms.

Fonts. The site loads Barlow Condensed and Inter from Google Fonts. Your browser sends Google your IP address and browser details to fetch the files. See Google's privacy policy. We also use Microsoft Clarity, which records how visitors use pages (clicks, scrolling and anonymized session replays and heatmaps) and sets cookies; form input is masked. See Microsoft’s privacy statement. It runs on the public pages only; the account portal does not load it. We do not run Google Analytics, a Meta pixel or a Google Ads tag on the public pages of this site at launch. If that changes, this page changes first.

Tune files, logs and reuse

Your file and log are stored in private storage. Only the people preparing your report or tune can open them. We do not sell them and we do not publish them.

We do not ask for a VIN. If you put a VIN or controller serial in an order note, it stays with that order and is deleted with the order details when you ask.

We do not reuse your file for another customer's report or tune. If that changes, this page changes first and the change only applies to files sent after it.

How long we keep it

• Server logs: up to 30 days.
• Support email: 30 days after the question is closed.
• Order-page messages: deleted 30 days after the message is sent, even while the order is open.
• Order details, files and reports: while the order is open, then deleted when you ask. A free report or a paid order follows the same deletion request.
• Payment record: as long as tax and accounting rules require.
• Unconfirmed upload: 3 days.
• Server backups: up to 6 weeks. We keep no separate customer-file backup after a deletion.

Your choices

Email support@tunebible.com to ask for a copy of your data, to correct it or to delete it. We answer within one business day. We may need to confirm that the address belongs to you before we act.

If you ask us to delete your data, we delete the order details, files and reports from our server. The payment record described above remains, and the order becomes an empty cancelled record with no vehicle, build, VIN, files or messages. Backups can hold the deleted data until the backup is overwritten.

You can block cookies in your browser. Blocking the sign-in cookie stops the account portal from working. Blocking the attribution cookie does not stop you reading the site or ordering.

Security

The site and the portal run over HTTPS. Access to customer files is limited to the people preparing the work. No system is perfect; if we learn of a breach that affects your data, we contact the affected customers and explain what happened.

Children

The site is for people who work on their own cars. It is not directed at children under 16, and we do not knowingly collect their data.

Changes

If this policy changes, the effective date at the top changes with it. A change that affects how we use your file or log is announced on this page before it takes effect.

Contact