Privacy policy

• Account: your email address, used to send sign-in codes. No password is stored.
• Profile: the display name, photo, bio, city and state you choose to add.
• Listings: what you post, including photos, price, description, contact details you include and the ZIP code. We look up the city, state and approximate map location from the ZIP so buyers can search by distance; we never use your device's GPS.
• Messages: messages you exchange with other users through RaceCarStuff.
• Saved items: listings you favorite and searches you save.
• Reports: listings you report as sold or as a problem.
• Usage: anonymous counts of listing views and clicks on a seller's contact links, shown to that seller. We use Vercel Web Analytics, which counts page views without cookies and without identifying you. Our hosting provider keeps standard server logs (IP address, browser, page requested) for security and troubleshooting.

The iOS app asks for camera and photo library access only when you add photos to a listing.

• To run the marketplace: show listings, deliver messages, sign you in and let you manage what you post.
• To keep the site safe: stop spam, fraud and abuse, and act on reports.
• To contact you about your account or listings.

We don't sell your personal information, we don't show ads, and we don't track you across other companies' apps or websites.

Listings are public, including their photos, description, price, location (city and state) and any contact details you put in them. Your display name and profile are shown on your listings. Messages are visible only to the people in the conversation; we may review them when investigating a report of abuse or fraud.

To help racers find cars and parts, we list some items that their sellers advertised publicly on other sites, such as Facebook Marketplace and Craigslist, with a link back to the original ad. These listings show the information from the public ad, which can include the seller's contact details. If one of these is yours, you can claim it to manage it yourself, mark it sold, or ask us to remove it at admin@racecarstuff.com. We may email a seller once to let them know their listing is here.

We use a few service providers that process data on our behalf, only to run RaceCarStuff:

• Supabase, for the database, sign-in and photo storage
• Vercel, for hosting and anonymous analytics
• Resend, for sending email

We may also disclose information if the law requires it, to protect people from harm or fraud, or as part of a sale or merger of the business.

You can delete your account yourself under Account → Delete account, on the website or in the iOS app, or by emailing admin@racecarstuff.com from the address you sign in with. Deleting your account removes your profile, listings, photos, saved items and messages. Server logs and backups expire on their own schedule, typically within 30 days. You can delete an individual listing at any time from your dashboard.

You can ask for a copy of your information, ask us to correct it, or ask us to delete it by emailing admin@racecarstuff.com. Depending on where you live, you may have additional rights under local law, and we will honor them.

Data is encrypted in transit, and database access is limited by per-user rules so you can only read and change what's yours. No system is perfectly secure, so please don't send things like bank details through messages.

RaceCarStuff is not meant for anyone under 18, and we don't knowingly collect information from children.

If we change this policy, we'll update the date above, and for significant changes we'll let account holders know. See also our terms of service.