Privacy policy.
TryggtFordon.

What the extension reads and sends

TryggtFordon identifies vehicles in listings and shows model information, scores, service, mileage, inspection, vehicle tax and owner count. When you read a page, the extension uses its address, title, visible text and vehicle metadata. From these it finds the make, model, model year, engine, gearbox, mileage, price, registration number and chassis number (VIN), among other details.

The page text may include the seller's contact details. It is read in the browser, kept only in the current search, and never sent in full to us or anyone else. Only the following reaches TryggaAppar's servers:

Model search (api.tryggaappar.se)

the listing's heading and page title, model year, engine, gearbox and vehicle type, or what you type in the search box. No listing address, registration, VIN or identifier for you or your installation.

Vehicle lookup (tryggaappar.se)

the installation ID and, if you are signed in, your account session. Also the chosen model, the registration and VIN (when present and valid), the listing address without tracking and gallery parameters, model year, engine, gearbox and mileage. These are used to deliver the report, count free lookups, recognise the same vehicle (reopening it is free) and calculate price ranges. Mileage is sent in kilometres.

Public requests without user identifiers

service status (/v1/status), the Premium plan's price and terms (/v1/offer, at most every 30 minutes) and the ad list (/v1/ads, at most hourly). No cookies, account, installation ID or vehicle details are sent.The hosting service receives normal technical connection data, such as an IP address.

When you turn on automatic listing reading and grant site access, the panel can read new vehicle listings in the active tab. Changes to the heading and vehicle metadata are noticed locally. You can turn this off in Settings.

Account, free lookups and Premium

On first start the extension registers a random installation ID with tryggaappar.se. No hardware serial numbers and no fingerprinting are used. Four free lookups are included. The server counts them and checks the quota before it releases a report, and a failed lookup uses nothing. The lookup register stores vehicle identities as hashes.

Reinstallation and browser profile. The necessary first-party tf_browser cookie contains a random value. It preserves spent free lookups and recognises the same browser at verified sign-in. It is host-only on tryggaappar.se, lasts up to two years and uses Secure, HttpOnly and SameSite=Lax. The extension can send it only during registration, bootstrap and code verification. The server stores a keyed hash (HMAC), never the cookie value. The hash is a pseudonymous identifier. It can survive extension removal; clearing the website cookies removes it. An optional random device hint in chrome.storage.sync can also be recognised and is stored as a keyed hash. Chrome sync may share that hint across browsers; it does not prove hardware identity. No MAC address or fingerprinting is used. Neither cookie nor hint grants account access: a valid one-time code is required. With the same cookie or hint, Premium may be restored without an ordinary device move, up to three times per account in90 days. The old installation token and sessions are revoked. Attempted reuse of the old token counts the restoration as an ordinary move. If no moves remain, the active Premium device is disconnected until support assists. Another browser requires an explicit device move. Restoration and old-token reuse attempts are recorded in the admin portal. Website sign-in cookies never authenticate the extension API.

If an older synced device hint arrives after registration, the extension can send it once. The server links only free usage for known hints: the higher usage applies and no new lookups are granted. This request does not move accounts, Premium, saved listings or device transfers. New free allowances are also limited per network (IPv4 /24 and IPv6 /64), normally one allowance over seven days. The next installation receives zero free lookups but can sign in or buy Premium. For this limit, we retain only a keyed network digest and allocation timestamps, not the plain IP address. Network records are cleaned up after expiry during subsequent registrations. The administrator can adjust the limit and period.

You can use the free lookups without an account. To sign in, you enter your email address and receive an eight-digit one-time code, valid for ten minutes and usable once. The email is sent via Resend. The extension keeps an installation token and a time-limited account session in the browser's local storage, but never the one-time code in local storage. The last account view (email address, plan, quota and subscription status) and a read-only copy of the account's saved list are kept locally, so they can be shown during maintenance. Both are removed when you sign out. Signing out does not reset the free allowance or the installation ID.

Premium is bought through the extension or on tryggaappar.se. The price and terms are shown before payment: a one-time purchase or a weekly or monthly subscription, depending on what is offered at the time. Payment is made in Stripe Checkout. The extension does not collect card details and contains no payment or server keys. After a purchase the extension fetches your status from the server. If you have a subscription, the extension shows your own price, the next renewal, and whether it has been cancelled or has a payment problem. In the extension, you can cancel the subscription at the end of the period and resume it before the period ends, when the server allows the action. Payment cards and receipts, or Update payment method for payment problems, opens the Stripe customer portal in a separate window. There you can update your payment method and view invoices. Your account status is fetched again when the window closes. In older versions, Manage subscription opens tryggaappar.se/konto/ instead. Changing the price plan is currently not supported in the customer portal. Premium applies to one active installation at a time. A normal device move happens when you choose it, and the number of moves is decided by the server. Restoration after reinstallation can happen automatically at verified sign-in under the conditions above. Local storage can never activate Premium.

For cancellation and resumption, the server stores the action ID and type, timestamp, link to the account and installation, and a copy of the account status in the response. This lets a repeated request receive the same confirmation without performing the change again. These records remain until the account is deleted.

When you open the website from the extension, a one-time link can sign you in automatically. The link is valid for 60 seconds and can be used once. Four free vehicle lookups are included. Saving new listings is included in Premium; existing saved listings can still be viewed, opened and deleted without Premium.

Storage and deletion

On your account (signed in). When you save a listing while signed in, it is stored in our account database, linked to your account, and can then be opened on your other installations. It includes the vehicle fields, listing and image address, scores, owner and keeper count, inspection, import status, sources, your service details (mileage, operating hours, service done with date and odometer, driving conditions, service programme and gearbox code), and your checklist, note and price history for that listing. Local saves are not moved to the account automatically.

In your browser. The extension also uses the following local storage. Some fields are sent for lookups as described in section 01, and account-saved vehicle data is synced while signed in as described above:

Current search

kept in the browser session and cleared when the browser closes or with More → Settings → Clear.

Saved vehicles

stored locally when signed out.

Recently opened listings

up to 400. Listing address, model, heading, model year, mileage and price are used for the local price comparison and to show price changes.

Checklist, notes and price history

stored locally for each listing and can also sync for account-saved vehicles while you are signed in.

Mileage check

odometer readings from inspections and from listings you have seen for the same car, to detect rolled-back or changed mileage. The car is stored under a hashed code (SHA-256 of the registration or VIN), never the registration itself. Each entry is a date, mileage, price, a short code for the listing and the site's name. Up to 400 vehicles.

Report cache

up to 30 opened model reports, for faster reopening. The reports contain nothing about you.

Latest Premium plan and ad list

public data, so the panel does not have to ask the server every time.

Feedback drafts and queue

at most seven days.

Settings

language, appearance and your choices.

Deleting. Vehicles are deleted under Saved, which deletes them from the account when you are signed in. The current search is cleared in Settings. When the extension is uninstalled, the browser removes all the local storage above. Account-saved listings remain until you delete them in Saved. To have your account deleted, contact support. Deleting in the extension does not affect data held by registers or listing sites.

Account reminders. Your email address and the time of your last account activity are used for factual messages about inactivity and archiving. Reminders are on for new accounts and can be turned off under Your account or with the link in the email. Existing accounts keep their previous setting. Only verified free accounts receive these emails: no earlier than 60 days without activity, at most once per inactive period and at least 180 days apart. Premium is exempt. After 90 days an inactive free account may be archived in our account overview. The account, access, lookups and saved data are kept, and the next activity restores the account. The emails are sent with Resend.

Service use and administration. Account management records which TryggaAppar services an account has used and the first and latest recorded use of each service. These records support service labels in the admin portal and remain until account deletion. Any service-specific access blocks and administrative account actions, including time, administrator and any note, are also recorded. These records are removed from the active database when the account is deleted.

Voluntary price contributions

Contributing to the price statistics is voluntary, and the setting stays off until you turn it on yourself. On first start, the extension asks whether you want to contribute anonymously to the price statistics, and you answer Yes or No. Nothing is sent unless you answer Yes. If you have not seen the question or want to change your answer, the choice is under More → Settings. You can turn it off at any time. Lookups do not require contributing, and you do not need to be signed in to contribute.

While it is on, the extension sends at most one contribution per listing per day. Limited data from vehicle listings is sent to TryggaAppar's backend to calculate price ranges for comparable vehicles. The data consists of asking prices.

Vehicle and price data

model identifier (model_id), model year (year), mileage in kilometres (mileage_km), asking price in Swedish kronor (price_sek), and fuel (fuel) and gearbox (gearbox) when available.

Site and listing identifier

the listing site's domain (site) and a SHA-256 hash of the listing address (listing_hash). The hash is computed in the browser. It is used to recognise the same listing and avoid duplicate observations.

Time

the server adds the time the contribution is received (observed_at). A new contribution for the same listing replaces that listing's earlier price data and updates the time.

The listing address itself, registration, VIN, email address and account details are not part of the contribution. To counter manipulated prices, the server stores pseudonymous, keyed hashes of the installation and the network with the observation. Neither the installation ID nor the IP address is stored in the price table. IPv4 addresses are grouped into /24 networks and IPv6 addresses into /64 networks. The hashes are kept as long as the observation. A price range is shown only when the comparable data has at least ten different listings and, after extreme prices are filtered out, at least ten different installations and ten different networks.

Retention: Observations are used in the price statistics for at most 90 days from the last update received, after which they are no longer included. Older entries are deleted automatically on new contributions and at the weekly clean-up. Physical deletion normally happens within a further seven days, so normally no later than 97 days after the last update. When you turn contributions off, no new ones are sent, and earlier observations are removed according to this retention.

Price watch and notifications

Price watch is on from the start and applies only to listings you have saved. About every six hours, the extension fetches each saved listing directly from the listing site, but only from sites you have granted access to. The fetch is made without cookies or sign-in. If the price has changed or the listing has been removed, a browser notification is shown. The site receives normal connection data, such as your IP address, just as when you visit it yourself. None of this is sent to us when you are signed out.

If you are signed in, price watch reads your account's saved list. It also stores the new price history on the account, so it appears on your other installations. Price watch is turned off under More → Settings, and notifications can also be turned off in the browser's settings.

When you send feedback

Under More → Send feedback you can send a bug report, an idea or another message to TryggaAppar's support. We receive the message and any reply address you choose to give. If you are signed in and leave the reply address empty, the account's email address is used for the reply.

You choose whether limited technical information is included: extension version, protocol, browser, operating system, the site's domain, theme, plan and language. The technical information never includes the listing address, registration or VIN. You can leave it out entirely before sending.

The message is sent via TryggaAppar's backend and forwarded to support with Resend. Hashed installation and account identifiers may be included to link cases and limit abuse. Feedback is used to handle your case and improve the extension.

If the service is unavailable, the extension keeps the message locally and tries again later, for at most seven days. The backend keeps a receipt for seven days to avoid duplicate emails. Once forwarding is confirmed, the message and reply address are removed from the backend's feedback table, and only the technical receipt remains. Expired items still waiting to be forwarded and expired receipts are removed on new feedback and at the weekly clean-up. The forwarded email stays in support's inbox while the case is handled. Contact support for help deleting feedback.

Vehicle registers

The registration can be read from the listing or entered manually. Once you have granted access to Biluppgifter and car.info, either when you first use the registry lookup or by granting access to all sites for automatic reading, the registration and/or VIN is sent there for a single background lookup. Automatic registry lookups and finding the registration from the VIN are on from the start. Each can be turned off separately in More → Settings. You can always start a lookup yourself.

From the register page the extension reads technical data, inspection, owner and keeper count, import status, vehicle status (for example whether it has been scrapped), vehicle tax and malus, and odometer readings from inspections. The registry feature does not read owner names or personal identity numbers. Matching technical data may complete the model, model year, engine and gearbox, and is then used for catalogue matching.

The registry service receives normal connection data, such as your IP address. If you are already signed in to the registry service, that sign-in may be used under the browser's cookie rules. The listing address is not sent as the referrer.

Fetched HTML is not run and not stored. Parsed data for a matching vehicle is kept in the session. Verified inspection results are normally reused for five minutes and other responses normally for one minute. Waiting times set by the source are respected. The odometer readings are also stored locally in the mileage check under the car's hashed code (see section 03). An already open matching results page at Biluppgifter, car.info or Transportstyrelsen can be read as a complement. The extension opens no new registry tabs. Visible registry fields may be watched for at most two minutes per lookup.

The registry services have their own terms and access requirements. Blocked access or a missing result is shown as a limitation. The extension never guesses an inspection result or a tax amount.

Images, links and ads

Images. A saved listing image is fetched from the listing's original image host when it is shown, and the host receives normal connection data. The request is sent without a referrer (no-referrer). To find a current image for a saved listing, the extension may fetch the listing page, without cookies and only from sites you have granted access to. The extension does not read images or number plates.

Links. Sources, forums, parts and service videos open at each service when you click. If you open a search link, the vehicle details in the search phrase are sent to that search service. Those sites' own privacy policies apply there.

Ads in the free version. The free version can show a discreet card labelled Ad, with the advertiser's name. It may be a sponsor or an affiliate offer. Premium is always ad-free. The feature is off until TryggaAppar switches it on. The ad list is fetched from tryggaappar.se without cookies, account, installation ID or vehicle details. Selection happens on your computer using vehicle type, language and the ad's conditions. No information about you or the vehicle listing you are reading is sent to select an ad. Images and links come from tryggaappar.se. No AdSense or other third-party ad service is used.

Ad clicks. A click goes via https://tryggaappar.se/go/<id>, which forwards you to the advertiser's saved website address. We store an aggregate click count for each ad, without cookies or impression counting. No IP address is stored in ad statistics. To limit rapid requests, a keyed hash of the network is used with a one-minute expiry; expired entries are removed on subsequent requests and at weekly maintenance. When you open the advertiser's website, it receives normal connection data, such as your IP address, and its own privacy policy applies there.

How the data is processed

Model matching, score presentation, comparisons, translations, service calculations, upcoming major service, the mileage check and reading the vehicle tax are all done locally in the browser. The model information is fetched from TryggaAppar's backend as described in section 01.

Version 0.2.0 contains no AI analysis and no analytics or tracking service. Earlier session keys for the removed AI/API mode are cleared on update, and saved vehicles are kept.

The web page you are reading contains no analytics tools, external fonts or ad scripts of its own. If you choose a light or dark theme, only that choice is stored locally in this browser, and it is not sent to us. Choose Auto in the theme menu in the header to remove the stored choice and follow the browser's theme. The web host and any access sign-in may process technical connection data under their own terms.

To limit automated collection, pseudonymous account and installation keys are used for a cap of 150 different models in a rolling 24 hours. Repeating the same model does not extend the period. Events where the account reaches the cap are kept for at most 30 days in the active protection. If the account reaches the cap three days in a row, it is flagged in the security log. Expired protection entries are removed during continued use and at the weekly maintenance.

Your choices and permissions

In More → Settings you choose whether the extension follows listings automatically, does registry lookups automatically, finds the registration from the VIN, watches the price of saved listings and contributes to price statistics. You can always start a lookup yourself.

The extension asks for these permissions in Chrome and Edge:

Side panel, active tab and scripting (sidePanel, activeTab, scripting)

to show the panel and read the listing you have open when you click the extension.

Tabs (tabs)

so the panel follows its own tab and notices when you change listing.

Storage (storage)

for settings and the local storage in section 03.

Alarms and notifications (alarms, notifications)

for price watch and for sending queued feedback.

tryggaappar.se and api.tryggaappar.se

for the account, lookups and model search.

Optional access to websites

requested only when you turn on automatic reading or registry lookups. It can be revoked in the browser's extension settings.

Free lookups work without an account. An account is only needed to keep vehicles across installations and for Premium. You can uninstall the extension at any time.

Legal basis and your rights

TryggaAppar, the publisher of TryggtFordon, is the controller for the processing described here. We have no access to data that is kept only in your browser. Contact details are in section 12.

Contract (GDPR art. 6(1)(b))

account, sign-in, lookups, free allowance, Premium, device check, vehicles saved to the account and price-watch sync, to the extent necessary to provide the service you request.

Legitimate interest (art. 6(1)(f))

reliable operation, protection against abuse and automated collection (the model cap, hashed installation and network keys), handling feedback and factual account reminders. The interest is to keep the service safe and working and answer support requests. Account reminders can be turned off.

Consent (art. 6(1)(a))

voluntary price contributions. You can withdraw consent at any time in Settings. Withdrawal does not affect processing already carried out on the basis of consent.

Legal obligation (art. 6(1)(c))

retaining purchase information required for statutory accounting, where that obligation applies.

Recipients and service providers. OpenAI/ChatGPT Sites is used for publishing and managed web hosting. Cloudflare is used for the site, API, database and image storage. Resend sends sign-in codes, account reminders and feedback emails. Stripe handles payments and subscriptions. Stripe acts as a processor for certain activities on our behalf and as an independent controller for purposes including its own payment, fraud-prevention and legal obligations. Registers, image hosts, listing sites and websites you open receive data as described in sections 05, 07 and 08.

Processing outside the EU/EEA. Providers' operations may involve processing outside the EU/EEA, including in the United States; storage exclusively within the EU/EEA is not promised. Resend stores email data in the United States and specifies EU standard contractual clauses (SCCs) in its data processing agreement, with the EU–US Data Privacy Framework (DPF) as an additional mechanism. Cloudflare and Stripe describe the DPF for transfers to covered US entities and SCCs where needed. OpenAI's Sites terms refer to a data processing agreement under which transfers from the EEA are covered by SCCs or an applicable adequacy decision. See Resend's data protection information, Cloudflare's privacy policy, Stripe's privacy centre, OpenAI's Sites terms and OpenAI's data processing agreement for details. Contact support for information about the safeguards applicable to your data.

We do not sell personal data. We do not use it for targeted advertising, advertising profiling or credit assessment, and we do not disclose it beyond what is described here or required by law. The use of information received by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Your rights. Under the GDPR and the conditions applicable to each right, you can request access, correction and deletion, restriction of processing and data portability. You can object to processing based on legitimate interest and withdraw consent. Contact support@tryggaappar.se. You can also complain to the Swedish Authority for Privacy Protection (IMY).

Server retention. The account and account-saved vehicles remain until you delete the vehicles or request account deletion; inactivity archiving is not deletion. The lookup register is linked to the installation, the browser profile’s keyed hash or the account and has no automatic expiry. The server hash of the device hint and restoration history remain until the associated installations or account are deleted. Account deletion also removes restoration history and markers exclusive to its installations. A quota shared with other installations may be retained without a link to the deleted account. It is used to maintain the free allowance and recognise previous lookups. Purchase records in the service's database verify Premium and subscriptions and also have no automatic expiry. Completed account deletion removes the account's associated lookups, saved vehicles, sessions and purchase and subscription records from the service's database. An ongoing subscription needs to end before account deletion. For records linked to an installation without an account, contact support for help with deletion.

Separate accounting information covered by the Swedish Accounting Act must, where the accounting obligation applies, be retained through the seventh year after the end of the calendar year in which the financial year ended. This is separate from the extension's Premium-access register. Stripe and other recipients may also have their own statutory retention requirements. Other retention periods for price contributions, feedback and temporary abuse protection are described in sections 04, 06, 08 and 09.

This policy is updated when the extension's handling of data changes. The version it applies to and the date of the last update are shown at the top.

Publisher and contact

TryggaAppar. is the publisher of TryggtFordon. The extension was created by Sacke.