Privacy policy
Last updated October 30, 2026
Car Loadout is a personal project for planning car builds. This page says what it stores about you, who can see it, and how to remove it.
What we store
- Your account: your email address, and either a password (stored hashed by our sign-in provider; we never see it) or your Google sign-in.
- Your profile: display name, username, and the location and bio you choose to add. These are public.
- What you post: builds, photos, comments, likes, follows, collections, questions and answers, and wishlists. Shared builds, public collections and posts are visible to everyone; private ones only to you.
- Your car records: odometer readings, service and fuel records, documents and receipts, and what you paid for a car. These are visible only to you, enforced by the database itself.
- Gift claims: when you claim an item on a friend's wishlist, the owner can't see who claimed it.
- Email settings: your notification and price-alert choices, and a record of which emails we sent so none is sent twice.
Photos are re-saved in your browser before upload, which removes the GPS location phones embed in pictures.
What we don't do
- No analytics, advertising or tracking scripts, and no third-party cookies.
- The only cookies are the ones that keep you signed in.
- We don't sell your data or share it for advertising.
Services that handle your data
- Supabase stores the database and files and runs sign-in.
- Vercel hosts the site and keeps standard server logs, such as IP addresses.
- Resend sends the notification emails you opt into.
- Google, only if you sign in with Google.
When you paste a link to add a part, our server opens that page once to fill in its name, image and price. When you follow a link to a store, that store's own privacy policy applies; some store links are affiliate links (see the affiliate disclosure), and the store or its affiliate network may use cookies on their sites to credit the sale.
Your choices
- Edit or delete your builds, cars, records, photos and posts at any time.
- Turn notification emails off in your profile settings.
- To delete your account and everything in it, write to the contact address (being set up; it will be listed here).
Children
Car Loadout isn't meant for children under 13, and we don't knowingly keep their data.
Changes and questions
When this policy changes, the date at the top changes too. Questions go to the contact address (being set up; it will be listed here).