Privacy Policy

Account information: your name, email address, password (stored only as a secure hash), and optional profile photo.

Transaction information: orders you place or fulfill, including items, amounts, and order status. Shipping addresses are collected and processed through our payment provider at checkout.

Content you submit: product listings, vehicle build details, and uploaded images.

Technical information: basic log data such as IP address and browser type, used for security and to operate the service.

To create and manage your account, process orders and payouts, display listings and builds, provide customer support, secure the platform, and comply with legal obligations.

Payments and seller payouts are handled by Stripe. We do not store your full payment card details. Stripe’s handling of your information is governed by Stripe’s own privacy policy.

Images you upload (product photos, build photos, profile pictures) are stored with our cloud storage provider, Cloudflare R2, and served publicly as part of the listings and gallery you choose to publish.

We use a single essential session cookie to keep you signed in. We do not use it for advertising. Disabling it will prevent you from logging in.

With sellers: when you place an order, the relevant seller receives the information needed to fulfill it (such as items and shipping details).

With service providers: such as our payment processor (Stripe) and cloud storage (Cloudflare), who process data on our behalf.

For legal reasons: when required by law or to protect the rights, safety, and security of users and the platform.

We do not sell your personal information.

We retain account and order information for as long as your account is active and as needed to comply with legal, tax, and accounting obligations.

Depending on your location, you may have the right to access, correct, or delete your personal information, or to request a copy of it. To make a request, contact us at [contact email].

We use industry-standard measures to protect your information, including password hashing and encrypted connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

TrackLab is not intended for anyone under 18, and we do not knowingly collect information from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above.

Questions about this Privacy Policy or your data can be sent to [contact email].