Privacy

Last updated 8 November 2026

is made by Bedroom Traders Ltd, trading as Boring Mods. There are two ways to use it, and they are very different.

Without an account: nothing is collected

Your photos, cars, points and rough places stay on your phone (or in your browser, on the website). Plates and faces are blurred on the device before a photo is saved, and the original photo is never kept. Car suggestions are worked out on the device. Nothing is sent to us.

Photos from your camera roll. You can also add a photo you already took. You pick one photo in your phone's own photo picker; the app sees only that photo, never the rest of your library. It reads two things from the photo's hidden data, on the phone: the date it was taken (so it counts for the day you saw the car) and, if the photo has one, where it was taken, which is turned into a rough place (about 100 m) and a nearby town on the phone. On Android the app asks to read photo locations for this; you can say no and pick the place yourself. The exact location in the photo is never sent to us or shown to anyone, and the saved copy has no hidden data. The map loads its tiles from OpenStreetMap when you open it, which shows OpenStreetMap your IP address, as any website does.

With an account: only what you choose to share

Accounts are optional. If you sign in with Apple or Google and post a spot, we hold:

• A random ID from Apple or Google, used only to recognise you, and which of the two you signed in with. If you add the other one (Apple and Google on the same account, so it opens on iPhone, Android and the web), we keep its random ID too. We don't ask for your name, and Apple's or Google's email address is not stored.
• Your age bracket (13-15, 16-17 or 18+) and birth year, worked out from the date of birth you give once when you make the account. We don't keep the day or month, and nobody else sees either.
• What you enter on your profile: display name, city, Instagram handle, photographer tag.
• The spots you post: the blurred photo, the car, the day, a named area such as a city, and whether it came from your camera roll with a date taken (a camera-roll photo without one is posted but earns no points). Exact location is never sent to us. The photo is re-encoded on our server, which strips any hidden data. Originals are never uploaded.
• Your likes, comments, follows, reports and blocks.
• A fingerprint of each posted photo (a short code worked out from its pixels, not the photo itself), so the same photo posted twice, by anyone, earns no points.
• A short-lived, one-way scrambled form of your IP address, for rate limits. It is deleted within two days.

If an owner has a car confirmed as theirs, they may see in their Activity list that you spotted the same model in the same city, with your handle and Instagram, once your spot has gone public. This never happens for teen accounts.

Why: to run the features you asked for (legal basis: our contract with you), and to keep the service safe (legitimate interests).

Who sees it: anyone using the app can see your profile and posted spots. Spots show to others straight away, but the area and the day only appear a few hours after you post (until then it says "Spotted recently"), and never an exact place, so nobody can use the app to find a car or a person live.

Telling cars apart

The car in your photo is recognised on your phone: the photo is not sent anywhere for it. To help, the app compares it with numbers worked out from photos on Wikimedia Commons, used under their licences (photo credits).

Google services in the Android app. Finding faces for the blur and reading the badge on a car use Google ML Kit on your phone: the photo stays on the phone, but ML Kit sends Google basic device and app details, performance figures and a per-install ID, to run and improve the service (Google's ML Kit disclosure). With an account, signing in with Google goes through Google, and each spot you post comes with a Google Play Integrity check, which tells us only whether the app and device are genuine; we don't keep it.

Keeping it, and deleting it

You can delete a post at any time. Deleting your account (You, then Delete my account) removes your profile, posts, photos, comments, likes and follows straight away. Reports you made stay, without your identity, for as long as needed to deal with them.

How to delete your account and data:

• In the app or on revhunt.boringmods.com: sign in, open You, tap Delete my account, then tap again to confirm. It works the same on Android, iPhone and the website.
• This deletes at once, from our server: your profile (name, handle, city, Instagram handle, age bracket and birth year), every spot you posted and its photo file, your comments, likes, follows, blocks, ownership claims, notifications, sign-in sessions and app check keys.
• What stays, with your identity removed: reports you made (so a reported problem can still be dealt with) and meeting places you suggested.
• Your garage on the phone is never on our server. To delete it, uninstall the app (or clear the website's data in your browser).
• If you can't sign in any more, ask us to delete your account through our contact form, giving your handle. We'll delete it within one month and confirm.

Your rights

Under UK data protection law you can ask for a copy of your data, or for it to be corrected or deleted, and you can complain to the Information Commissioner's Office (ico.org.uk). To contact us, use our contact form.

For teens and parents

Accounts are for people aged 13 or over. If we learn an account belongs to someone under 13 we close it and delete its data. If you think your child under 13 has an account, use the contact form and we'll remove it.

Accounts for 13 to 17 year olds are set up to be safer, following the UK Age Appropriate Design Code:

• Private from the start: only people the teen follows back see their spots. Under 16 it stays private; at 16 or 17 they can choose public.
• No Instagram handle and no home city shown to other people, and teens are left out of "your car got spotted" alerts.
• Only people the teen follows can comment on their spots. There are no direct messages, and no "people near you" suggestions.
• No exact location, for anyone: a spot shows only a named area such as a city, and only a few hours after it was posted, and hidden photo data such as GPS is stripped from every photo.
• Block and report on every profile, post and comment. A person checks every report.
• No ads and no selling of anyone's data.

Deleting the account (You, then Delete my account) removes the teen's profile, posts and photos straight away.

Bedroom Traders Ltd, trading as Boring Mods. Registered in England & Wales, company no. 14369814. Registered office: 20-22 Wenlock Road, London N1 7GU. Company details