Data processing policy
Version of 4 October 2026.
Who processes the data
The controller is the operator of the Jetka service. Full details will be published before the service launches.
What data
For identity verification: a photo of your passport and a selfie. To run the service: name, phone, e-mail, IBAN, car details and its documents.
Why
The passport copy and selfie are used only for a manual identity check of the owner by a platform employee. They are not used for any other purpose.
Legal basis
Your consent. It is voluntary, specific and withdrawable. You give it with a separate checkbox before uploading the files.
Where and how it is stored
Files are kept in a closed storage in the EU region. Only platform staff with the manager role can view them. The database keeps the minimum: the fact of verification, the date and the manager who did it.
Retention period
Files are deleted a limited time after the manager's decision. It is currently 30 days and will be refined. After deletion only a record that verification passed remains.
Access
Only managers have access. Logging of file access is planned and must be enabled before launch.
Cookies
We only use strictly necessary cookies that sign-in and language choice depend on. There are no advertising or analytics cookies, so no consent banner is shown for now. If we add analytics or advertising, we will ask for consent first.
- Name
- sb-…-auth-token (sometimes with .0, .1 suffixes)
- Purpose
- Sign-in session (Supabase): keeps you signed in. It has no HttpOnly flag because the browser client must read it; it is sent over HTTPS only (Secure), SameSite=Lax.
- Lifetime
- up to 400 days or until sign-out
- Name
- NEXT_LOCALE
- Purpose
- Chosen interface language (ru, cs, en). Secure, SameSite=Lax.
- Lifetime
- 1 year
Google Maps
The handover map and address suggestions load from Google servers only after you tap “Show map”. Google then receives your IP address and browser data and may use its own cookies under its own policy. To avoid opening the map, type the address by hand or open the point in a navigation app via the link.
Error monitoring (Sentry)
To find failures quickly we use the Sentry service (EU servers). Only technical error data is sent: type, place in the code, time. We turn off collection of the user, cookies, headers and request bodies, and strip email addresses, phone numbers and IBANs from texts. Passports, selfies and documents are never sent to Sentry.
Your rights
You can withdraw consent at any time in “Profile verification”: the files will be deleted and you will need to pass verification again. You also have the rights of access, rectification, erasure and to complain to a supervisory authority.
Contact
A contact for data questions and requests will be provided before the service launches.