Privacy Policy
Last updated 12 October 2026
What we collect, why, and who else sees it. We do not sell your personal information and we do not run advertising against it.
What you give us
•
Your account: email address and password. Passwords are hashed by our authentication provider and are never visible to us.
•
Your profile: display name, and optionally a first and last name, nickname, profile photo, city and state, phone number and date of birth. Only your display name, photo, city and state appear publicly — your phone number is shown only if you explicitly choose to make it public.
•
Your listings: everything you enter about a vehicle, including VIN, mileage, engine, title status, asking price, the city and state it is in, and the photos and videos you upload.
•
Messages you send to other people through the service.
•
A location you set for searching — a city or ZIP code you type. We do not ask your device for GPS in order to browse.
Visit statistics
•
To see how the site is used, we count visits. For each page you open we record the page, the time, and, on the first page of a visit, where you came from (a search engine, another site, a QR code scan, a shared link). We also record your device type, browser, operating system, time zone and language, and the terms you type into our search.
•
To tell a new visitor from a returning one, your device keeps a random number we generate. It is not made from your name, email or anything about you, and we do not store your IP address with these statistics.
•
If your browser sends Do Not Track or Global Privacy Control, we do not record your visits at all. You can also clear the site's data in your browser at any time to reset the random number.
•
Only site administrators can see these statistics, and only as totals. We do not sell them or share them with advertisers. When you tap a link to a retailer, we record that the tap happened (which link, not who you are), so we know which parts links are useful.
What we collect as you use it
•
Activity on listings: when a listing is viewed, when its QR code is scanned, when it is shared and when someone enquires. This is what produces the numbers a seller sees about their own vehicle.
•
An anonymous identifier stored on your device, so repeat views of the same listing are not counted as separate people. It is not tied to your name.
•
Standard technical data your browser or device sends, including IP address, which we also use to rate-limit abuse.
•
If you use the mobile app and allow notifications, a push token so we can send them.
Location, specifically
Browsing never triggers a location prompt. Distance search works from a place you type, and listings are positioned by the centre of the city a seller entered unless they chose to set a more precise point.
The one place we ask your device for GPS is checking a vehicle into a car show, where the whole point is to record where the vehicle is. That asks your permission first, and you can decline and still use everything else.
What is public
A listing is public: its photos, description, specifications, asking price and the city and state it is in, visible to anyone with the link whether or not they have an account. Your seller page — display name, photo, city, and the cars you have for sale or have sold — is public too.
Your email address, phone number (unless you publish it), date of birth and messages are not public.
Who else processes your data
We use a small number of providers to run the service. They process data on our behalf and are not permitted to use it for their own purposes.
•
Supabase — database, accounts and file storage.
•
Vercel — website hosting.
•
Resend — sending email such as password resets and notifications.
•
Expo — delivering push notifications to the mobile app.
•
OpenStreetMap's Nominatim service — when you type a city or ZIP code to search near, that text is sent to them to turn into coordinates. We cache the result so the same place is not looked up twice.
We also disclose information where the law requires it, or where it is necessary to investigate fraud, abuse or a threat to someone's safety.
What we never do
•
Sell your personal information.
•
Read your messages to target advertising.
•
Show a seller who you are when you view their listing — they see counts, never identities.
Storage on your device
We store a few things locally in your browser or app: your sign-in session, the location and radius you chose for searching, and the anonymous view identifier. These are functional — we do not use third-party advertising or tracking cookies.
How long we keep it
Account and listing data is kept while your account is open. Deleting a listing removes it from the site; we retain the record so that conversations you have already had remain readable to the other person, since those messages are theirs as much as yours.
Deleting your account removes your profile and listings. Backups are retained for a limited period, and messages you sent may remain visible to the people you sent them to.
Your rights
You can view and edit your profile at any time, and delete your account from your account settings. Depending on where you live you may also have the right to a copy of your data, to correct it, to have it deleted, or to object to how we use it. Write to hello@patinaperfect.com and we will action it.
If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising any right.
Children
Patina Perfect is for adults. It is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has created an account, tell us and we will remove it.
Security
Data is encrypted in transit, and access to it is restricted per account at the database level. No service is perfectly secure, but if a breach affects your personal information we will tell you.
Changes
If we change this policy materially we will say so on the site before it takes effect, and update the date at the top.
Contact
Questions, or a request about your data: hello@patinaperfect.com