Privacy Policy
Effective November 4, 2026
This policy explains what CarHag collects about members, why, and your choices.
What we collect
- Account details: your name, email address, phone number and password (stored by our login provider, Supabase, which keeps passwords in hashed form; we never see them).
- Why your phone number: to keep free trials and free passes to one per person, and later to text you deal alerts, only if you turn them on. We never sell it or text you marketing without your consent.
- Billing: your plan, subscription status and Stripe customer ID. Card details go directly to Stripe; CarHag never sees or stores your card number.
- Location: the search area you set: a ZIP code, or your browser's location rounded to about 1 km (0.6 mile) before we save it, plus the distance you pick. It's used to show you cars near you.
- Your activity: your filters and alert settings, your referral code and who referred you, free-pass dates, and a record of the renewal terms you agreed to before subscribing.
- City waitlist: if you ask for CarHag in your city, your email and city, used only to tell you when it opens. Email us to be removed.
- Free Compare tool: the cars you check aren't saved. Your IP address is held in memory only, to count free checks.
- Technical data: error logs on our server (they don't record which cars you look at). Cloudflare, which protects the site, sees your IP address and may set a short-lived security cookie.
How we use it
To run your account, show you deals for your area, send the alerts you turn on, process payments and referral credits, keep each free trial and free pass to one person, answer support requests, prevent abuse, and improve CarHag. We don't sell your personal information and don't use it for targeted advertising.
Who we share it with
Only the service providers that run CarHag for us, under their own privacy and security terms: Supabase (logins), Stripe (payments), Resend (account emails), DigitalOcean (hosting) and Cloudflare (network and security). The site's fonts load from Google Fonts, so your browser contacts Google for them. We may also disclose information when the law requires it.
Listing data
The car listings CarHag shows were posted publicly by sellers on third-party marketplaces. CarHag links to the original listing, doesn't show members sellers' phone numbers, and doesn't sell sellers' contact details.
Keeping and deleting your data
We keep your information while your account is open. When you ask us to delete your account, we delete your personal information within 30 days, except what we must keep: payment records at Stripe for tax and accounting, and the record of the renewal terms you agreed to, which subscription laws ask us to keep for 3 years. To delete your account, email [email protected] from your account's email address.
Your rights
You can ask to see, correct, download or delete your personal information, and you can appeal our answer by replying to it. We answer within 45 days and don't charge for it. We don't sell personal information or use it for targeted advertising, so there is nothing to opt out of; if that ever changes, we'll ask you first.
Security
Connections use HTTPS, passwords are handled by Supabase, cards by Stripe, and access to our servers is limited. No system is perfectly secure; tell us right away if you suspect someone used your account. To report a security problem, see Help.
Cookies and local storage
CarHag keeps your login session and display preferences in your browser's local storage. Cloudflare may set a short-lived security cookie to tell people from bots. We don't use advertising or tracking cookies.
Children
CarHag is for adults 18 and over; we don't knowingly collect information from children.
Changes
We'll post updates here and email members about significant changes.