How TнєrmoExprєss handles your data.

A community project, handled carefully.

ThermoExpress is not a registered commercial company; it's a hobby project built and run by its members for the ETS2/ATS community. That doesn't change how seriously we take the data you share with us. This policy covers the public site, the Driver Hub dashboard, and the Windows client.

We are not affiliated with SCS Software, TruckersMP, Discord, Valve/Steam or Spotify. Signing in through those services is governed by their own privacy policies as well as this one.

What we store for your driver profile.

Your ThermoExpress account is built around Discord sign-in. When you sign in and use the Driver Hub, we store:

• Your Discord account ID and username, used to identify you and keep your profile in sync with our Discord server roles.
• Company data you generate: application answers, roles, completed routes, ETS2/ATS playtime relevant to eligibility, convoy and job history, and messages sent through the in-dashboard inbox.
• Security data: hashed session tokens, and — for staff accounts with elevated access — an encrypted two-factor authentication secret.
• Signed-in devices: browser and system from the user agent, the sign-in method, the last activity and an approximate, city-level place that our own server looks up from the network address in the DB-IP Lite database. The IP address itself is not stored, and you can review and sign out every device in your settings. IP Geolocation by DB-IP
• Security emails to your confirmed address: a notice when a new device signs in, when an account is connected or a password is set, and the one-time codes if you use two-factor authentication by email. Emailed codes are stored only as a hash and expire after ten minutes.

Discord, Steam and Spotify, in detail.

Discord (required for sign-in)

We use Discord OAuth to identify you and read your basic Discord profile (ID, username, avatar). We never see or store your Discord password.

Steam (optional, for eligibility)

If you connect Steam, we read your public Steam profile and, where visible, your Euro Truck Simulator 2 / American Truck Simulator playtime to confirm eligibility requirements. We do not request access to purchases, friends lists, or anything beyond your public profile and game library.

Spotify (optional, for the Music Lounge)

If you connect Spotify from the dashboard's Music Lounge, we request read-only access to: your public Spotify profile, your top tracks/artists, and your recently played tracks. This builds your listening recap — we never request playback control, playlist editing, or any write access to your Spotify account.

Spotify access and refresh tokens are stored encrypted at rest and are only used to refresh your recap data. We do not read or store the audio itself, and we do not share your listening data with anyone outside ThermoExpress.

A small, necessary set of cookies.

We use strictly necessary cookies to keep you signed in and to remember your cookie preference — no analytics or advertising cookies. The full breakdown of each cookie, what it stores and how long it lasts is available at any time from the Cookie settings link in the site footer.

Only to run the company and the site.

• Verifying who you are and keeping you signed in across the public site and Driver Hub.
• Checking eligibility requirements (such as minimum ETS2 hours) for driver applications.
• Operating features you opt into, such as the live map, convoys, the leaderboard, and the Spotify-powered Music Lounge.
• Internal moderation, support and dispute handling within the company.

We do not use your data for advertising, and we do not sell or rent it to third parties.

Visible inside the company, not outside it.

Some profile information (such as your display name, avatar, role and route history) is visible to other signed-in members as part of normal company features like the leaderboard or live map. Sensitive account data — including linked-account tokens and two-factor secrets — is only ever accessible to the backend systems that need it to function, never to other members.

Members of Founder, Administration and Dispatcher roles can access operational profile details as needed to run the company (for example, reviewing an application or resolving a support request). We don't share your data with outside advertisers, data brokers, or unrelated third parties.

Kept while your account is active.

Account and connection data is kept for as long as your ThermoExpress account exists. You can revoke ThermoExpress's access to Steam or Spotify at any time from that service's own account settings (for Spotify: spotify.com/account/apps) — this stops any further use of the connection on our end.

To have your stored data reviewed, corrected, or deleted, reach out through Contact HR; Founder or Administration will process the request manually since ThermoExpress does not yet have a fully automated self-service deletion tool.

Encrypted where it matters.

Spotify tokens and two-factor secrets are encrypted at rest before they touch our database. Sessions are identified by hashed tokens rather than storing raw credentials. All traffic between your browser and our servers is sent over HTTPS.

You're in control of your connections.

• You choose whether to connect Steam or Spotify at all — neither is required to hold a ThermoExpress account.
• You can disconnect either service from its own dashboard/settings at any time.
• You can ask for a copy of, correction to, or deletion of your stored data via Contact HR.

Questions about your data?

Reach out through Contact HR, or message a Founder/Administration member directly if you already have a Driver Hub account. We'll do our best to respond promptly.