Privacy Policy

Ohio Plate Watch is operated by Kyle Dillon for a private, password-protected plate watchlist.

Information stored

The service stores watched plate combinations, vehicle/design context, notes, check history, notification delivery records, and owner sign-in sessions. Hosting systems may retain operational logs such as request paths and connection information.

Google account access

When the owner authorizes Gmail, the app requests only the gmail.send permission. It uses that permission to send configured plate availability alerts and owner-requested test messages. It does not request permission to read, search, or delete email. Google OAuth credentials are stored privately on the hosting server outside the public website, and access tokens are used to call Google's Gmail API.

Use and sharing

Watchlist and notification information is used to operate the service. Plate text and selected context are submitted to Ohio BMV during checks. Alert recipients and message contents are sent to Google for email delivery. The app is hosted on DigitalOcean and domain/DNS services are provided through Cloudflare. When SMS is activated, phone numbers and alert contents are sent to Twilio for delivery. SMS consent requests record the submitted mobile number, consent timestamp, disclosure version, and pending approval status. Submitting a request does not activate messaging.

Google user data is not sold or used for advertising or AI model training. Use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

SMS privacy

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. SMS consent records are used to manage requested alerts, support, and opt-outs. Messaging service providers process information needed to deliver those alerts. Kyle Dillon operates Ohio Plate Watch.

Retention and control

Watchlist and history records remain in the service database until removed by the operator. Backups may retain earlier records. The owner can revoke Gmail access in Google Account permissions; sending will then stop. Contact the operator to request deletion of stored data or authorization credentials.

Cookies and contact

The private dashboard uses a session cookie for sign-in. These public pages do not use advertising or analytics scripts. Questions or deletion requests: kylepdillon@gmail.com.