Privacy Policy
Last updated July 11, 2026
This Privacy Policy explains what data VinRaptor ("we," "us") collects when you use vinraptor.com (the "Site"), why, and what rights you have over it.
Who we are
VinRaptor is operated from the Czech Republic. For any privacy question or request, contact [email protected]. A person reads and answers that inbox. We're an early-stage, independent project and are keeping some operational details light for now; that doesn't change your rights below, and we will respond to any request made under this policy.
What we collect
If you just browse
- Server and security logs. Our cloud hosting and network providers automatically log request metadata (IP address, timestamp, requested URL, user agent) for security and abuse prevention. We don't use this to build a profile of you.
- A currency cookie. If you switch the displayed currency (EUR/CZK/PLN), we set a cookie so we remember your choice on your next visit. Strictly functional, no tracking.
- Anonymous analytics. We use Plausible Analytics, a cookie-free analytics tool that doesn't collect personal data or use tracking identifiers, to see aggregate traffic and page-view counts. Plausible doesn't fingerprint you or track you across other sites; see plausible.io/data-policy for how it works.
If you create an account
Saving or hiding cars, and saving search filters, requires signing in. Sign-in uses a one-time 6-digit code sent to your email via our sign-in provider. We never see or store a password. Once signed in, we store:
- Your email address and, if provided, your name.
- The date you last used the Site.
- Cars you've saved or hidden, and any saved search filters, including the currency you were viewing them in.
We use this solely to make your saved cars, hidden cars, and saved searches work across visits and devices.
Car listing data
Car listings (make, model, price, mileage, photos, VIN) come from business sellers (leasing companies, dealers, and used-car bazaars), never private individuals. Under EU case law (CJEU C-319/22), a VIN tied to a company-registered vehicle isn't personal data. Where a VIN could in theory be linked to an individual, we process it on the basis of legitimate interest (Art. 6(1)(f) GDPR): helping buyers verify a vehicle's history and avoid fraud. We never display seller names, addresses, or other personal contact details alongside a VIN. If you're a vehicle's registered keeper and want a listing's VIN reviewed or removed, email us and we'll act promptly.
Cookies, in full
- currency
- Remembers your chosen display currency. Persistent, until changed or cleared.
- Sign-in session
- Keeps you signed in. Session-based, managed by our sign-in provider.
- Sign-in state
- Prevents cross-site request forgery during sign-in only. Expires in a few minutes.
We don't use advertising or cross-site tracking cookies.
Who we share data with
We use a small number of service providers ("processors") to run the Site. None of them may use your data for their own purposes:
- Our sign-in provider (USA): handles the passwordless sign-in flow. Where data leaves the EEA, this provider relies on Standard Contractual Clauses as its transfer safeguard.
- Our content delivery and security network: content delivery, security, DNS, and encrypted database backup storage.
- Our cloud hosting provider: hosts our application server and database.
- Plausible Analytics: cookie-free, aggregate traffic analytics.
We don't sell your personal data to anyone, ever.
How long we keep data
Account data (email, name, saved/hidden cars, saved searches) is kept while your account is active. We don't yet have a self-service "delete my account" button; email [email protected] and we'll delete it manually, promptly. Server logs roll over on a short retention cycle set by our hosting and network providers.
Your rights
Under GDPR, you can ask us to: give you access to the data we hold about you, correct it, delete it, restrict or object to its processing, or hand it to you in a portable format. Email [email protected] for any of these. You can also lodge a complaint with your local data protection authority; in the Czech Republic, that's the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.cz).
Third-party links
Every car page links to the original source listing and to independent VIN-history services (Cebia, CarVertical, AutoDNA). Those are separate sites with their own privacy policies; we don't control what they collect once you click through, beyond the VIN itself being passed in the link to pre-fill your search there.
Where we have a partner (affiliate) relationship with a verification service, the link additionally carries a partner identifier so the provider can attribute a resulting purchase to us. That attribution happens entirely on the provider's site, under the provider's own privacy policy, typically via a cookie the provider sets on its own domain after you click. Nothing extra is set or read on VinRaptor, and our own cookie table above is unchanged. What we receive back is aggregate only: click counts, purchase counts, and commission amounts. It never includes your name, email, payment details, or anything else identifying you.
Security
We use industry-standard measures (encrypted connections, encrypted backups, restricted server access) to protect the data we hold, but no method of transmission or storage is 100% secure.
Children
VinRaptor isn't directed at children, and we don't knowingly collect data from anyone under 16.
Changes to this policy
We'll update the date above whenever we make a material change, and post the new version here.