Append only replication over intermittent links (with local only delete?)

Hi,

I'm looking to run Postgres -- flexible on exact version -- on some devices
installed in cars and replicated to a central server over cell phone
modems. I expect dropped connections due to: lack of coverage (remote
areas), dead spots, tunnels, cars parked in garages, device power
disconnected, etc. I expect all data to be generated on the car devices and
want it to eventually be copied over to the central server. I would also
like to be able to delete old data -- say months old -- on the car
equipment and NOT have those deletes propagate to the central server.

To be clear, the car device will surely add data -- append rows -- and may
very occasionally add a new table. I would expect the only case where a
delete may occur -- other than culling old data -- is during recovery of a
partial write or transaction rollbacks. The time requirements are loose,
but I would like replication consistency within hours (once connected).

I'm wondering what replication scheme is appropriate for this use case and
how to configure it appropriately.

Thank you!
Uri Braun