Privacy

Effective from 16.10.2026

This page explains what data Diagno collects and what we do with it. In short: we only collect what we need to get back to you. We never sell your data or share it for advertising.

Who controls the data

Diagno. Contact: contact form. The seller of paid reports is named in the terms of sale.

What we collect

• Booking form: name, phone, email (if given), car details, a description of the problem and a convenient time.
• Fault code search: the fault code, description and car details. These are not linked to your name or stored together with your contact details.
• Ad orders: company name, contact details and ad text.
• Server logs: IP address and time. We need these to keep the site running securely.

Why

• To reply to you and arrange a time. Legal basis: your request to use the service (GDPR Art. 6(1)(b)).
• To keep the site secure. Legal basis: legitimate interest (Art. 6(1)(f)).
• Bookkeeping. Legal basis: legal obligation (Art. 6(1)(c)).

Who else sees the data

• The hosting provider where the site runs.
• An AI service, if enabled. Only the fault code, description and car details are sent there, never your name or phone number.
• Stripe (Stripe Payments Europe Ltd, Ireland) is our payment processor when you pay for an ad or a report. Only Stripe sees your card details. Stripe's checkout page (checkout.stripe.com) uses Stripe's own cookies and privacy policy.
• The email service that delivers booking notifications to us.

Forum

When you post in the forum we store your name (public), your e-mail address (never published; used only for the confirmation link and, if needed, to contact you), the text of your post and a cryptographic hash of your IP address (to limit spam and abuse). Legal basis: your request to post (GDPR art 6(1)(b)) and our legitimate interest in security (art 6(1)(f)). Published posts stay public until deleted; the e-mail address and IP hash are kept until the post is deleted. To delete a post or your data, use the contact form.

How long we keep it

We keep booking data for up to 24 months after our last contact, then it is deleted. By law, accounting documents must be kept for 7 years.

Paid report orders

With each order we store: your email (from Stripe), the fault code, car details and description, the payment status and a consent record: the exact text of both checkboxes (AI estimate and losing the 14-day right of withdrawal), the time they were ticked and your IP address. Legal basis: performance of the contract and our legal obligation to be able to prove the consent (GDPR Art. 6(1)(b) and (c)). Because of bookkeeping rules we keep order data for 7 years.

Cookies

We use a single necessary cookie: fcsrf (diagno.ee, HttpOnly, valid for 2 hours). It is set when you open a forum thread and protects the reply form from spam. There are no tracking, analytics or advertising cookies, and no third-party scripts or images are loaded. Fonts are served from our own server, not from Google.

Your rights

You can ask what data we hold about you and ask us to correct or delete it. Write to us via the contact form. If you're not satisfied with our answer, you can contact the Estonian Data Protection Inspectorate (www.aki.ee).