Effective date: October 5, 2026. DriveJA is operated by Stephen Madden (Broggy). Website: https://driveja.com. Contact: support@driveja.com.
Privacy Policy
Accounts and contribution access
Applications contain a display name, email and password, optional contribution interests and an optional portfolio/social link, an adult/under-18 declaration and, only where enabled, a guardian permission route/contact. WordPress stores a password hash, not a readable password. Invitations have expiry, revocation and use limits; a secure verifier is stored. Email verification and administrator approval are separate. Assigned contribution areas, verification and approval/suspension status and review records control access. Approval does not automatically create a public profile or Crew membership.
Submitted work
We process submitted photos, titles, descriptions, general locations/parishes, credits, optional private contact details and supported YouTube links, topics and attribution. Approved content, credits and editorially created profiles may be public, searchable and indexed. Private account emails and guardian records are not public-profile information. Pending uploads are held outside the public web root and require authorized access. Uploaded submission photos are resized and re-encoded as WebP, removing embedded EXIF/GPS metadata; this does not remove visible people, plates or identifying details. Source material already published or externally hosted may have different metadata.
Guardian permission records
The prepared guardian process records the guardian’s necessary name, relationship and email or alternative contact, permission choices, form/policy version, request and review status, reviewer/date/contact-confirmation method and a minimal review note. Tokens are stored as hashed verifiers, expire after three days and are revoked or consumed separately from the retained review record. Merely opening a link grants no permission. Optional public-profile/portrait permission is separate and defaults to no.
Guardian details are restricted to authorised administrators, not ordinary contributors or editorial reviewers. Completed offline forms stay in owner-managed secure storage; WordPress stores a private reference and review record, not a public scan. Records currently have no automatic deletion deadline: they are retained for permission/access management, safety, handling requests and documenting decisions, with administrator review of necessity on withdrawal, transition or removal. Expiry or revocation does not erase the record.
Necessary storage and security
Login/session, application security and invitation cookies support authentication and form protection. Form protection uses a one-day visitor cookie; an opened invitation session expires after 30 minutes. Rate limits use keyed hashes of network information. Hosting and security services may keep network/access logs under their own settings; DriveJA has not verified a fixed hosting-log retention period. Security processing is distinct from optional analytics.
Namecheap hosts the site and authenticated email service. Automated messages use DriveJA <hello@driveja.com>. Messages are encrypted while queued. Queued sending expires after 12 hours; terminal message bodies are removed and status history is pruned after seven days from creation by the worker. Delayed scheduling can delay actual cleanup. Verification links expire after 24 hours and are single use; expiry does not itself delete an application/account. Minimal first-publication deduplication records are retained so republication does not repeatedly email contributors.
Optional audience and sharing measurements
Analytics collection is currently Disabled. If enabled later, the existing system measures normalized public paths/content IDs, event types/time, coarse device/browser/operating-system categories, allowlisted campaign/referral tags and account activity for aggregate reporting. It does not retain raw IPs or full user-agent strings for analytics. Estimated browsers are not unique people. First-party browser identifiers last up to 30 days; session identifiers expire after 30 minutes of inactivity. An optional setting can require an explicit consent signal before persistent identifiers; no visitor consent-choice interface is presently implemented. We do not describe optional collection as consent-controlled by default.
Detailed analytics events use a configurable 180-day retention window (allowed 30–365 days). Scheduled cleanup deletes older detailed events and rebuilds daily summaries from the remaining events; execution may be delayed. Legacy daily audience totals have no fixed automatic deletion period. Separate advertising and legacy share event histories have 180-day scheduled pruning. Tags such as WhatsApp or copied link describe visits through tagged share links, not who shared a link, successful posting or distinct people. Sharing works when collection is off.
When eligible advertisements are shown, the separate advertising ledger records campaign/placement, event date/time, viewable impressions, clicks and CTA categories with deduplication hashes. Contact activations are intent, not confirmed messages, calls or sales. Optional analytics settings do not create a second advertising counter.
External services and processing locations
Namecheap provides hosting/email. Cloudflare Turnstile processes security challenges where configured. YouTube thumbnails may load externally before Play; players load only after activation, using YouTube’s privacy-enhanced embed endpoint. External channels, social sharing and Google Maps/directions links lead to their providers, which apply their own terms, cookies and privacy practices. DriveJA share cards use approved public images and information. Providers may process data outside Jamaica. Legal adequacy of international-transfer arrangements has not been established by this webpage.
Retention and removal
Accounts, application decisions, published work and editorial records have no blanket automatic deletion deadline. Rejected pending photo files are removed by the rejection workflow; approved private files are removed after publication. Trashing a record, hiding a feature, expiring an invitation/listing or revoking access is not necessarily permanent database deletion. Removal of published media and records requires editorial/administrator handling. Cached share cards and third-party copies may remain after removal; private card endpoints recheck access before serving an asset.
Terms of Use
Browsing and contributor accounts
Public browsing does not require an account. Contribution access is limited to approved accounts and assigned sections. Provide accurate information, protect your login and do not claim another person’s identity, profile, channel or rights. Account approval does not approve content; all contributions remain subject to editorial review and independent feature switches. DriveJA may restrict or suspend access to address misuse, privacy or safety concerns and explains decisions where practicable. You can request review of an editorial or account decision through support@driveja.com; a review does not guarantee approval.
Ownership and the website licence
You retain ownership of your work. By submitting work you created or have permission to submit, you grant DriveJA a non-exclusive, royalty-free licence for website storage, processing, resizing, publication, display and organization, including galleries, thumbnails and normal sharing previews/cards. You must provide accurate credits and sufficient rights for this use. This is not an ownership transfer, unrelated resale right or unlimited promotional licence. Reusing original photos in DriveJA’s own social campaigns or other advertising requires separate permission unless an existing verified agreement expressly covers that use.
Safety, rights and locations
Do not submit unlawful, harassing, misleading, discriminatory, exploitative or otherwise inappropriate content; do not trespass, encourage dangerous driving or expose sensitive live vehicle/home locations. Use general areas/parishes. Consider plates, faces, bystanders and permission before submitting. GPS stripping does not anonymize visible details. Not every plate is automatically blurred, and a delay is not guaranteed for every post. Editors may request changes, withhold, correct or remove content and escalate concerns to the operator.
External content, advertising and expectations
YouTube and other external services may remove content or restrict playback. Places information is informational, may change and is not permission to enter land or a guarantee of route conditions or safety. Labelled advertisements and sponsorship do not guarantee endorsement, quality, traffic or sales. Contribution does not guarantee an award or publicity. No new commercial contract is created by these terms.
Younger contributors
Applicants declare whether they are 18 or older or under 18; we do not ask for exact birth dates or identity documents. While guardian onboarding is Disabled, under-18 contribution approval is currently unavailable. Public browsing remains available; contact support@driveja.com for questions.
A prepared route supports guardian email permission or an offline signed form where email is unavailable. It is available only when the operator explicitly enables guardian onboarding. Guardian onboarding is currently unavailable to the public; under-18 contribution approval is closed. Contact support@driveja.com. When enabled, applicant email verification, guardian permission, administrator review and explicit account/section approval are separate steps. A guardian response or signature is not proof of identity or guardianship. An optional public profile/portrait requires separate permission, off by default; no public profile or Crew membership is automatic.
Guardian withdrawal pauses the affected contributor’s privileges for review, without automatically deleting published content. Removal requests are handled separately. An administrator reviews any later adult transition; DriveJA does not guess when someone turns 18. Previously existing accounts are not automatically classified as adults.
Changes and applicable law
DriveJA may change services, feature availability or these terms. Material changes will be reflected in the stated version and acknowledgement where required. Jamaican law applies subject to applicable mandatory rights and protections; this page does not exclude rights that cannot lawfully be excluded.
Requests, reports and complaints
Email support@driveja.com with the public URL and a concise description of copyright/credit, privacy (plates, faces or locations) or other concerns. Explain your rights or connection and requested correction/removal; do not send unnecessary personal evidence. Reports are reviewed, not automatic takedowns. You may request access to and information about your data, correction, relevant restriction/removal, or withdraw consent where processing relies on it. You can ask for review of a decision and complain to the operator or the Information Commissioner. These requests are handled in light of applicable Jamaican data-protection rights and limitations, rather than an unconditional promise to erase every record. Identity/rights checks or legal/security obligations may affect what can be provided or removed; we will explain relevant limitations.
Removing website work cannot guarantee removal of other people’s downloads, social posts, search caches or provider-held data. You may also raise privacy complaints with Jamaica’s Office of the Information Commissioner. This page is an operational policy, not a legal-compliance certification.