Who holds this data
Richard Willars, an individual, is the data controller, contactable at hello@mooseclimate.com. If you are unhappy with how your data is handled you can complain to the Information Commissioner's Office at ico.org.uk, or to your own supervisory authority if you are in the EU.
Everything that is stored
This is the complete list. There is nothing else.
- Your Volvo account identifier. The opaque id Volvo issues for your account. It is how your schedules are recognised as yours. No name, no email address and no password is stored — there is no account here to have one.
- The VIN and label of each car you connect. The VIN is what commands are addressed to. The label is so you can tell two cars apart.
- Your schedules. The times, the days, the head start in minutes, and your timezone.
- A refresh token for your Volvo account, encrypted. This is what lets the service send a command at 6am while you are asleep. It is encrypted before it is written down and is never displayed anywhere.
- A log of command attempts. Which schedule, when it fired, and whether Volvo accepted it. This is the only feedback the app can give you, because Volvo's API reports nothing about your car's climate.
What is never collected
No location, no journey history, no mileage, no charging or fuel data, no diagnostics, no analytics, no advertising identifiers, and no cookies beyond the one that keeps you signed in. There is no tracking on any page — this site runs no JavaScript at all.
What it is used for
Only to send the climate command you scheduled, and to show you your own schedules and their history. It is not used to build a profile of you, to infer anything about you, or to make decisions about you. It is never sold, never shared, and never handed to an advertiser or a data broker.
The legal basis is the contract between you and this service — the terms you accept when you connect a car. Without this data the service cannot do the one thing it does.
Where it lives
In a Cloudflare D1 database hosted in Western Europe, reachable only by this service. Volvo tokens are encrypted at rest. Cloudflare processes the data on our behalf and does not use it for its own purposes.
How long it is kept
- Command history is deleted automatically once it is 30 days old.
- Everything else is kept while your car is connected, and no longer. If your Volvo grant expires and you do not reconnect, the data is deleted rather than left sitting there.
Disconnecting deletes it
Disconnecting a car revokes this service's access at Volvo and deletes your stored token, your schedules, your vehicle records and your command history. It is immediate and it cannot be undone — there are no backups to restore you from and no soft-delete to recover you from.
You can also ask for a copy of your data, a correction, or deletion, by emailing hello@mooseclimate.com — though disconnecting does the deletion faster than an email can.