Privacy

Volt is a personal service: one owner, one watch, one Tesla. This page says what it keeps and for how long.

What is stored

After you sign in on Tesla’s website, Tesla hands this service an access token and a refresh token for your account. They are stored encrypted, with a key held only on this server, and used for two things: reading your car’s status when the watch asks, and relaying the commands you tap. Your Tesla password never passes through Volt.

The watch holds a separate random credential; only its hash is stored here. A hash of your Tesla account id marks this Volt as yours, so no other account can sign in. Car status is cached for at most 60 seconds. No location, driving or profile data is requested from Tesla.

Cookies and logs

One cookie, during sign-in only and for ten minutes, ties Tesla’s redirect to the browser that typed the watch code. Logs record one line per request: the kind of request, the last four characters of the VIN, status codes and timing, never tokens, codes, links or query strings. Client addresses stay in memory, for rate limiting only.

How long, and how to delete

A sign-in lasts 90 days, a pending sign-in 10 minutes. Disconnect account on the watch deletes its session and the tokens at once, and signing in again replaces them. You can also revoke Volt in your Tesla account under Security → Third-party apps. Deleting the server’s database removes everything.

Third parties

Tesla, Inc. receives the requests you make, through its Fleet API and Vehicle Command protocol. Nothing is shared with anyone else. Volt is an independent app and is not affiliated with Tesla.