Privacy

Your account

If you sign in with Google, Cybercab Hunter receives your Google account identifier, email address, name and profile picture, and uses them to create and recognize your account. Normal sign-in does not give Cybercab Hunter any access to your Gmail.

Ride receipts

Your rides come from Tesla Robotaxi receipt emails. A receipt can reach Cybercab Hunter by being forwarded to your private receipt address, by being imported, or — only if you choose to connect it — directly from Gmail (below).

From each receipt, Cybercab Hunter keeps the ride details it needs for Rider Data: the ride date, pickup and drop-off times, pickup and drop-off locations, distance, duration, fare and the vehicle’s license plate. The email itself is read to extract those details and is not stored. Your name and payment details that appear in a receipt are not kept.

Optional Gmail connection

• What it is. From Rider Data you can choose to connect the Gmail account you signed in with. This is separate from signing in and asks Google for read-only Gmail access (the “gmail.readonly” permission).
• Why. So your Tesla Robotaxi receipts are added to Rider Data automatically, without forwarding them yourself.
• What is read. About every 10 minutes, Cybercab Hunter searches your Gmail for emails whose subject contains “Robotaxi Ride Receipt”, and reads only those matching emails. When you first connect, the search covers the last 90 days. Other emails are not downloaded.
• What is kept. The ride details listed above for receipts that are valid Tesla Robotaxi receipts; your Gmail address; Gmail’s internal identifiers for the receipt emails already processed (so they are not imported twice — kept for up to 120 days); and Gmail’s internal position marker for your mailbox. Email contents are not stored.
• How the authorization is protected. The long-lived authorization Google issues is stored encrypted (AES-256-GCM) with a key used only for Gmail. Short-lived access tokens are used in memory and never stored. Tokens are never shown in the website or written to logs.
• How to stop it. Choose “Unlink Gmail” on Rider Data: Cybercab Hunter asks Google to revoke the authorization, deletes the stored authorization and sync records, and stops reading your Gmail. You can also remove access at any time from your Google Account’s third-party access page (myaccount.google.com/permissions). Rides already imported stay in Rider Data until you remove them there.

What is public

Cybercab Hunter publishes a public registry of Robotaxi vehicles. A vehicle appears there only after a moderator has reviewed and approved it, and the public pages show vehicle-level information (such as the license plate and ride counts) derived from receipts.

Community profile: unless you turn it off, your display name, username, profile picture (for Google sign-in, the picture from your Google account), bio, the month you joined, the public registry vehicles you discovered, and counts from your rides (how many rides you have recorded, how many different Cybercabs you have ridden in, the total miles of those rides, and the cities you have ridden in, with the number of rides in each) are shown on the Community leaderboard and on your public profile page. Only counts, total miles and city names are shown, never fares, dates, times, addresses or the plates of vehicles you rode in. This is on by default for every account. Turn off “Community leaderboard & public profile” on your Profile page at any time to be left off the Community leaderboard entirely (you are not listed or ranked) and to have no public profile.

Cybercab reviews and Community Social: posts, photos, ride reviews and comments you share on the Community page are public, and reviews posted before Social launched now appear there as posts. They show your display name, username, profile picture and Spotter rank, unless you have turned off “Community leaderboard & public profile”, in which case they show as “Anonymous”. Location and other metadata are removed from photos before they are stored. Who liked a post is never shown, only how many people did. Reports you make are seen only by moderators. You can edit or delete your own posts and comments at any time, and moderators can remove posts or comments that break the community rules. Posting, liking and commenting never earn XP.

Your email, receipt contents, fares, ride dates and times, and addresses are never shown publicly.

To be confirmed: whether ride details from receipts obtained through the Gmail connection may contribute to the public registry, pending review of Google’s API Services User Data Policy (Limited Use requirements) and Google’s verification of the Gmail connection.

Deleting your data

Rider Data lets you remove individual rides or all of your rides.

To be confirmed: account deletion process, data retention periods for other data, and a contact address for privacy questions.

Google API Services

To be confirmed after legal review: the statement describing Cybercab Hunter’s use of information received from Google APIs under the Google API Services User Data Policy, including the Limited Use requirements.