TeslaLyrics collects
- Selected vehicle name and encrypted vehicle identifier
- Current song, artist, album and source
- Playback position, duration and playing status
- Latest timing diagnostic snapshot for synchronization troubleshooting
TeslaLyrics data was deleted. Complete Tesla's consent-removal page to revoke access at Tesla too.
TRUST AND PRIVACY
Know exactly what you are approving
TeslaLyrics uses Tesla's official Fleet API. Your Tesla password and multi-factor verification stay on auth.tesla.com.
Official Tesla OAuthNo command scopesNo advertising trackersDisconnect anytime
The access boundary
TeslaLyrics does not collect
- Location or driving history
- Camera images, contacts or payment information
- Climate, charging or other vehicle state
Vehicle control is not authorized. TeslaLyrics does not request
vehicle_cmds or vehicle_charging_cmds. Its Tesla authorization cannot unlock, start, drive, charge or control your car.Exact Tesla permissions
openidIdentifies the Tesla account that approved access.vehicle_device_dataTesla's required read scope. It is broader than media, but TeslaLyrics' production telemetry configuration requests and stores only the media fields listed above.offline_accessAllows the connection to continue without repeated Tesla logins. Tesla issues a rotating token that TeslaLyrics stores encrypted.vehicle_cmdsNot requested.vehicle_charging_cmdsNot requested.Why Tesla still asks for a vehicle key
Tesla requires an app-specific virtual key to authenticate live Fleet Telemetry from compatible vehicles. Tesla's standard key screen serves many kinds of apps, including apps that control vehicles, so its warning may sound broader than TeslaLyrics' authorization.
1Virtual keyIdentifies TeslaLyrics to the vehicle.
+2OAuth scopesLimit which Tesla APIs TeslaLyrics can use.
TeslaLyrics needs both protections. The virtual key does not add command scopes to its OAuth token.
Storage and outside services
Tesla credentials
TeslaLyrics never receives your Tesla password or MFA code. OAuth tokens and vehicle identifiers are encrypted server-side.
Media retention
The database keeps the latest media snapshot for your selected vehicle. It overwrites that row as songs change rather than building a listening history.
Timing diagnostics
The Tesla browser sends timing measurements used to troubleshoot lyric synchronization. The latest timing diagnostic snapshot overwrites the previous one; it does not build a listening history and contains no VIN, location or song metadata.
Lyrics and artwork
TeslaLyrics sends song and artist text server-side to LRCLIB and to Apple, Deezer, or TheAudioDB metadata services. It does not send them your Tesla account, vehicle identifier or OAuth token.
Tracking
TeslaLyrics has no advertising pixels or third-party analytics scripts.
YOU STAY IN CONTROL
Connected account
Checking whether this browser is connected…
This deletes TeslaLyrics tokens, vehicle links, browser sessions, current media and timing diagnostics. Tesla then opens its official consent page so you can revoke the application there.