Privacy Policy | Carfocal

Carfocal ("we", "us", "our") operates a U.S.-based online news, commentary, and community platform. This Privacy Policy explains how we collect, use, disclose, and protect your information when you access or use our website, services, or community features (collectively, the "Services").

By using Carfocal, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect the following categories of information to operate, secure, and improve our Services.

1.1 Account Information

Username
Email address
Password (stored using secure hashing algorithms)
Optional profile details (bio, profile image, preferences)

1.2 User-Generated Content

Posts, comments, messages, uploads, interactions
Public content may be visible to all visitors

1.3 Logs & Technical Data

IP address
Device and browser type
Access times and pages viewed
URLs that led you to our site
General usage activity and patterns

1.4 Cookies & Tracking Technologies

We use:

Essential cookies (login sessions, site functionality)
Analytics cookies (traffic measurement, performance)
Preference cookies (site settings)
Marketing pixels (if applicable)

1.5 Analytics Data

Collected through third-party tools such as Google Analytics, including:

Page interactions
Session duration
Geographic and device information

2. Legal Bases for Processing

While Carfocal primarily operates under U.S. law, we align with international standards when applicable.

We may process personal data under:

2.1 Consent

When you opt in to cookies or newsletters

2.2 Contractual Necessity

To provide and maintain your account
To deliver Services you request

2.3 Legitimate Interests

Preventing fraud and abuse
Ensuring platform security
Improving user experience
Moderation and community safety

3. How We Use Your Information

Operate and maintain the platform
Personalize and improve the user experience
Facilitate posting, commenting, and community interactions
Analyze performance and traffic
Communicate updates, support messages, and service notices
Detect, investigate, and prevent fraud, abuse, or security issues

4. How We Share Information

We do not sell your personal data. We may share data as follows:

4.1 Service Providers

Trusted vendors assisting with:

Hosting and infrastructure
Analytics
Security and moderation tools
Email delivery

4.2 Legal Compliance

We may disclose information when required by:

Law enforcement requests
Court orders
Applicable laws or regulations

4.3 Business Transfers

If Carfocal undergoes a merger, acquisition, or asset sale, user data may be part of the transferred assets.

4.4 Public Content

Any content you post publicly will be visible to anyone online.

5. Data Retention

We retain information for as long as necessary to:

Provide our Services
Comply with legal obligations
Resolve disputes
Enforce agreements

Deleted posts or accounts may persist in backups temporarily.

6. Cookies & Tracking

You can manage cookies via your browser settings. If you disable cookies, some features may not function properly.

We may use third-party tracking tools (e.g., Google Analytics) that operate under their own privacy policies.

7. Third-Party Services

Carfocal may integrate third-party services such as:

Authentication providers
Analytics platforms
Hosting and CDN providers
Embedded media (videos, widgets)

These third parties may collect information based on their own policies.

8. Data Security

We implement industry-standard security measures, including:

Encryption in transit (HTTPS)
Password hashing
Access controls for internal systems

No system is 100% secure, and we cannot guarantee absolute protection.

9. Your Rights

Depending on your region, you may have the right to:

Access personal data we hold about you
Request correction or updates
Request deletion of your data
Request an export of your data
Withdraw consent for optional data uses
Opt out of analytics cookies

To submit a request, contact [email protected].

10. Children's Privacy

We do not knowingly collect information from children under the age of 13. If we discover that a child under 13 has provided personal data, we will delete it promptly.

11. International Users

The Services are operated from the United States. If you access the platform from outside the U.S., you consent to the transfer and processing of your data in the U.S., where privacy laws may differ.

12. The Carfocal Mobile App

The Carfocal app for iPhone and Android is part of the Services. Everything above applies to it, and this section describes what is specific to the app.

12.1 Accounts

You can use the app without an account for a limited number of report previews. To read full reports you sign in with Google, Apple, or an email address and password, using Firebase Authentication (Google). We keep your email address, your name if Google or Apple shares it, an account ID, the reports you have unlocked, and your report credits or pass. We never receive your password.

12.2 Purchases

Payments are handled by the Apple App Store or Google Play; we never see your card details. We receive a signed record of each purchase (the store, a transaction ID, the product, and the time) so we can grant what you bought and take it back if the store refunds it. We keep these records after an account is deleted for accounting and to prevent a receipt being used twice; they no longer identify you.

12.3 What the app sends us

The report you open, and a random install ID (stored by us only as a one-way hash) used to count free previews. It expires after 90 days.
What you type into search is used to find matching vehicles and is not stored or logged.
A token from Firebase App Check that helps us tell genuine copies of the app from automated abuse.

12.4 Notifications (optional)

If you allow notifications, we keep a notification address for your phone (provided through Firebase Cloud Messaging, a Google service) and which notifications you have read, so we can alert you about a vehicle and show the alert in the app. While you are signed in the address is linked to your account; it expires after 180 days without the app being opened. You can turn notifications off at any time in your phone's settings.

12.5 Usage analytics and screen recordings

The app collects anonymous data about which screens are used, which vehicles are searched for and compared, and where people give up, using Firebase Analytics. This tells us which guides to write next. It never includes your email or your name and it is not linked to your account. We do not use the advertising ID and do not use this data for advertising. Where a version of the app also makes screen recordings, they are made by Microsoft Clarity and show how the app is used: the screens you open, what you look for and where your taps land. Your email address, password and verification codes are hidden from them. To have recordings deleted, contact us.

12.6 Deleting your account

You can delete your account in the app (Profile → Delete account) or by following the steps at carfocal.com/delete-account. Deleting a mobile account does not delete a carfocal.com website account that uses the same email address.

12.7 Service providers for the app

Google (Firebase Authentication, App Check, Analytics, Cloud Messaging), Apple and Google (purchases), our database and hosting providers, and, where enabled, Microsoft (Clarity).

13. Changes to This Privacy Policy

We may update this policy occasionally. When changes occur:

We will update the "Effective Date" above
Significant changes may be announced through the site

14. Contact Us

For privacy questions, requests, or concerns, contact:

[email protected]