What HotPeg stores about you, why, and how to get it back or delete it. No legal boilerplate, just what actually happens.
Your email address, and your name and avatar picture if you sign in with Google. That is what makes the account yours.
The cars you add to your collection, along with anything you choose to fill in about them: condition, price, storage notes, photos. Photos live in a public storage bucket behind unguessable URLs (nobody can browse them, but a direct link is not secret). A public garage link is opt-in and off by default: turning it on from your profile shows only your car list and photos to anyone with the link, never prices, storage notes or personal notes.
Every page load records the page, your country and city (from Vercel's edge network, not a third-party lookup), operating system, referrer, browser string and your user id if you are signed in. This is kept in full for 90 days, then the parts that identify you (user id, browser string) are cleared and only the aggregate page and location data is kept. The whole row is deleted after 12 months.
Your name, email address and message, so we can read it and reply.
Cars you mark as wanted on a model page. Both weekly emails (new cars in your series, wishlist updates) are opt-in and off by default, turned on from your profile; turning either off stops that email immediately.
Snap & Add and visual search are rate-limited per day. For signed-in use that limit is tracked against your account; for anonymous visual search it is tracked against a salted hash of your IP address. Your raw IP address is never stored.
Four services process data on our behalf: Supabase (the database and sign-in), Vercel (hosting, and the source of the country/city on the access log), Resend (sends the weekly digest and wishlist emails, only if you turn one on) and, only if you choose to sign in that way, Google. We do not sell data, and we do not run ads.
Last updated September 14, 2026. If this page changes in a way that matters, we will say so here.