Privacy Policy
Last updated: 2026. This policy applies to all Cars Night users worldwide.
1. What we collect
We collect your email, password (hashed with bcrypt), name, country, and city when you sign up. We also store the listings you create (including photos), and transaction records for subscription purchases. We log admin actions and security events (failed logins, etc.) in audit logs.
2. How we use your data
Your data is used to operate the marketplace: showing your listings, processing payments, preventing fraud, and providing support. We never sell your personal information to third parties.
3. Crypto payments
When you pay with cryptocurrency, the payment gateway processes the transaction. We store a transaction record (amount, currency, method) but never your private keys or wallet seed phrases. Crypto transactions are immutable — we cannot reverse them.
4. Cookies & sessions
We use HTTP-only session cookies for authentication. These cookies are not accessible to JavaScript and are sent only over HTTPS in production. We do not use third-party tracking cookies.
5. Data retention
We retain your account data while your account is active. Inactive listings may be archived after 12 months. You may request deletion of your account at any time by emailing support@carsnight.com — we will permanently delete your personal data within 30 days.
6. Security
We follow OWASP best practices: hashed passwords, parameterized database queries, input validation, rate limiting, and audit logging. Despite our best efforts, no system is 100% secure. If you discover a vulnerability, please email security@carsnight.com — we offer bug bounties for valid reports.
7. Your rights (GDPR)
You have the right to access, correct, export, and delete your personal data. You also have the right to restrict or object to processing. To exercise any of these rights, email support@carsnight.com from your registered email.
8. Contact
For any privacy questions or requests, contact our Data Protection Officer at support@carsnight.com.