Privacy Policy

1. Information we collect

Account information. When you create an account we collect your email address, the username and display name you choose, and a password managed through our authentication provider, Clerk. You may also add a profile photo, a short bio, and your location.

Collection and activity data. The cars you add to your collection or wishlist, the condition and prices you record, listings you create, messages you send to other members, and offers you make.

Photos and content you upload. Any images you upload of your cars, your avatar, and anything else you post. This content is stored securely and is covered in more detail below.

Usage information. We use Google Analytics and Microsoft Clarity to understand how the site is used. These tools may set cookies and record anonymised or pseudonymous information such as pages viewed, approximate location, and device type.

Technical data. IP address, browser type, and similar information needed to run the service securely, keep statistics such as how many times a car has been viewed, and prevent abuse.

2. Why we use your information and the legal basis

Under the GDPR we may only process your data with a valid legal basis. We rely on the following:

• To provide the service to you (contract): running your account, saving your collection, and showing your profile.
• To operate and improve the service (legitimate interest): analytics, security, fraud and spam prevention, and product improvements.
• With your consent: optional analytics cookies and features such as push notifications. You can withdraw consent at any time.
• To meet legal obligations: responding to lawful requests, enforcing our terms, and protecting rights.

3. Your photos and the content you post

Photos and other content you upload belong to you. We store them on a dedicated object storage service (MinIO) and show them as part of your profile, your collection, and your listings. We never sell your images or personal content to third parties.

When you upload content you confirm that you own it or have the right to share it, and that it does not infringe anyone else's rights. You can delete your photos and posts at any time from your account, and we explain your deletion rights below. If you believe any content on the service infringes your rights, see the reporting process in our Terms of Service.

4. Who we share data with

We only share data with service providers who help us run the platform, and only as needed:

• Clerk for account sign in and security.
• MinIO for storing the images you upload.
• Google Analytics and Microsoft Clarity for usage analytics.
• Infrastructure providers that host our servers and database.

Some listings link to eBay and Amazon through affiliate programmes. When you follow one of these links you leave our service and are subject to that platform's own privacy policy. We may earn a commission at no extra cost to you.

We do not sell your personal data. We only disclose information when required by law, or to protect our rights and the safety of others.

5. International data transfers

Because our providers operate globally, your information may be processed in countries outside your own, including the United States and the European Union. Where this happens we rely on recognised safeguards such as Standard Contractual Clauses, and we only work with providers that offer an adequate level of protection.

6. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and measure traffic. Analytics cookies only run with your consent where the law requires it. You can control or delete cookies through your browser settings at any time.

7. How long we keep your data

We keep your account and collection data for as long as your account is active. If you delete your account we remove your personal data and uploaded content within a reasonable period, except where we are required to keep some records for legal, accounting, or security reasons.

8. Your privacy rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• delete your account and the personal data linked to it;
• receive a copy of your data in a portable format;
• object to or restrict certain processing;
• withdraw consent for processing that relied on it;
• opt out of any sale or sharing of personal data (we do not sell your data).

California residents have rights under the CCPA, including the right to know what is collected, to delete it, and to opt out. To exercise any of these rights, contact us using the details below. We will respond within the time required by law.

9. Children

The service is not intended for children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.

10. Security

We use reasonable technical and organisational measures to protect your data, including encrypted password storage through our authentication provider and restricted access to personal information. No method of transmission over the internet is fully secure, so we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. If we make significant changes we will notify you through the service or by email. The date at the top of this page shows when it was last revised.

12. Contact

If you have questions about this policy or want to exercise your rights, write to us at info@allhotwheels.com or through our contact page.