Privacy Policy

1. What We Collect

We collect only what we need to run the platform:

• Account info — your email address and display name, provided via Google OAuth when you sign in
• Event submissions — event name, location, dates, description, and any other information you add to a listing
• Location data — location you choose to share for finding nearby events
• Profile info — username, display name, avatar, bio, city, and state
• Usage data — basic error and crash data via Sentry for debugging purposes only. We do not use advertising analytics or behavioral tracking.

2. How We Use It

• Display events, listings, and public profiles
• Enable the explore and search features
• Send transactional emails (sign-in confirmation, password reset)
• Identify and fix bugs and errors on the platform

We will never sell your data. We don't use it for advertising. That's not the business we're in.

3. Photo Storage

Photos you upload are stored on Cloudflare R2. Before storage, photos are resized server-side to a maximum of 1600px on the long edge and converted to WebP format. We do this to keep the platform fast and cost-efficient. Your photos are stored securely and are not shared with third parties.

4. Third-Party Services

We use the following services to run the platform:

• Supabase — database and authentication
• Cloudflare — DNS, CDN, and R2 object storage
• Vercel — hosting and deployment
• Sentry — error monitoring
• Google OAuth — sign-in only; we receive your email and name but do not access your Google account data

Each of these providers has their own privacy policy governing how they handle data.

5. Cookies & Local Storage

We use a minimal set of cookies and browser storage:

• An auth session token to keep you signed in
• A theme preference (light/dark) stored in localStorage

No tracking cookies. No advertising cookies. Nothing that follows you around the web.

6. Your Rights

You can request a copy of your data or ask us to delete your account at any time. Email us at contact@carsandcrews.com and we'll take care of it. We comply with CCPA and GDPR principles.

7. Data Retention

We keep your account data for as long as your account is active. If you request account deletion, we will remove your data within 30 days.

8. Children

Cars & Crews is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can remove it.

9. Changes to This Policy

We may update this policy from time to time. When we do, we'll update the "last updated" date at the top. Continued use of the platform after changes constitutes acceptance of the updated policy.