Privacy policy

Vehicle records

The core content of the site is salvage-auction records: VIN, photographs, damage, odometer readings, title documents, bids, sale dates and locations. We obtain them from publicly published auction listings through third-party auction-data providers. A VIN identifies a vehicle, not a person, but combined with other information it can relate to an identifiable individual, so we treat such records as data to which data-subject rights apply.

The legal basis is legitimate interest: a public archive lets buyers and importers check a vehicle's history before a purchase. You may object to the processing of records about your vehicle — the removal-request procedure described below exists for that.

Removal requests

When you submit a request we store: the VIN, your name, a contact (an e-mail address or a Telegram username — your choice), the grounds, your statement, your confirmation of a connection to the vehicle, a one-way hash of your IP address, the date and time, and later the decision, its reasoning and who made it. The form accepts no files; if supporting documents are needed for verification we ask for them separately through the contact you gave.

The purpose is to review your request, to contact you about it and to document the decision. An approved request hides the records from public view, but neither the records nor the request are destroyed: the decision log is kept indefinitely so that it is always possible to answer who withheld a record and on what grounds — this protects you as much as later buyers of the vehicle.

A notification of a new request (VIN, name, contact, grounds, statement) is delivered to the operator through a private Telegram chat; Telegram may process that message outside the EU. The status-tracking link contains a random token and requires no login — do not share it.

VIN lookups

For every lookup we record the VIN searched, the outcome (found / no records / withheld / unavailable), a one-way hash of the IP address and the time. The hash cannot be turned back into an IP address; it only serves to tell request sources apart for abuse protection and for demand statistics.

Server logs

The web server records the IP address, browser string (User-Agent), requested path without query parameters, response status, time and a coarse referrer class — for security, diagnostics and traffic statistics. Raw logs are deleted after 60 days; aggregated reports anonymise the last octet of the IP address.

Cookies and analytics

The site itself sets no cookies: browsing needs no login and stores no preferences. We use Google Tag Manager and Google Analytics 4 (Google LLC / Google Ireland Ltd.), which set their own cookies and collect aggregated usage statistics (pages, device, approximate region). Google processes that data under its own privacy policy, partly outside the EU. You can block these cookies in your browser or with an extension — the site works fully without them.

Photographs

Vehicle photographs are stored in and served from our own object storage. Until a copy of a fresh lot has been made, a photograph may load directly from the auction source's server; in that case your browser contacts that server and reveals your IP address to it.

Where data is kept and who receives it

Servers and storage are located in Germany (European Union). We do not sell data and do not share it with advertising networks. Processors acting on our behalf: hosting providers (servers and object storage), Google (analytics), Telegram (removal-request notifications). Data may be disclosed where a competent authority lawfully requires it.

Your rights

You may request access to your data, its rectification, erasure or restriction, object to processing, and receive a copy of the data you provided. An objection to the publication of records about your vehicle is made through the removal request form; other requests go through the contacts below. If you believe your rights have been infringed, you may lodge a complaint with the data-protection supervisory authority of your country.

Removal request →Contact →

Children

The site is not directed at anyone under 16 and we do not knowingly collect their data.

Changes

When our practices change we update this page and the date at the top. Material changes take effect when published.