Privacy policy

OwnerLot collects the data needed to run a private-party car marketplace. This policy explains what we store and who can see it.

What we collect

Account: name, email, phone, city, password hash, and verification status. Listings: VIN, specs, photos, price, and the city you pin. Messages you send to other owners, including chat photos. Technical logs such as IP address and user-agent for rate limits and abuse prevention. We use Cloudflare Turnstile on sign-in forms.

What other people see

Anyone can see live listings, including VIN and photos. Phone numbers are shown only after a buyer signs in. Email addresses are not published on listings. Chat stays between you and the other owner.

Chat photos

Photos sent in chat are stored so the other person can open them. They are deleted after 60 days, and we cap size so they do not fill the server. Do not send documents you are not willing to share with that owner.

Processors

Hosting and DDoS protection run on Cloudflare. Transactional email is sent through Resend. We do not sell your contact list.

Cookies

We use an HttpOnly session cookie to keep you signed in. Compare, guest favorites, and which chats you have opened stay in your browser storage. Language preference is stored in a cookie on this device.

California / US rights

You can ask us for a copy of your account data or to delete your account by emailing hello@ownerlotcars.com. We will verify the request and remove or anonymize data we do not need to keep for security or legal reasons.

Contact

Privacy requests: hello@ownerlotcars.com