Privacy Policy

The data controller for CarRadar (carradar.si) is Blaž Markelj. Contact: info@carradar.si.

We only collect data needed to run the service:

• Email address — for registration, login, and listing alerts
• Password — stored as a hash via Supabase Auth (we never see your plain-text password)
• Search filters — brand, model, year, price, mileage, fuel type you set in the dashboard
• Favorites — listings you star
• Feedback — suggestions or comments you send via the dashboard form
• Subscription data — plan, payment status, and subscription ID (via Whop)
• Technical data — e.g. interface language (locale), session cookie for login

We process data to provide the service: monitoring public avto.net listings, sending alerts, managing filters and subscriptions. Legal basis: contract performance (GDPR Art. 6(1)(b)) and, for advertising analytics, your consent (GDPR Art. 6(1)(a)).

Data is stored in Supabase in the EU region (Frankfurt, Germany). The app is hosted on Vercel. Transactional emails are sent via Resend.

We use these providers to operate CarRadar:

• Supabase — authentication and database
• Resend — transactional email (account confirmation, listing alerts, onboarding)
• Vercel — application hosting
• Whop — subscription and payment processing
• Meta (Facebook Pixel) — advertising analytics, only if you accept cookies in the banner (see below)

We keep data while your account is active and needed for the service. After account deletion or on request, we delete or anonymize data within a reasonable period, except where law requires longer retention (e.g. payment records).

You have the right to access, rectify, erase, restrict processing, data portability, and object. You can withdraw consent for analytics cookies at any time. You may lodge a complaint with your local data protection authority.

• Access — request a copy of your data
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and related data
• Portability — receive data in a structured format
• Complaint — to a supervisory authority

Strictly necessary cookies (e.g. Supabase Auth session, locale) do not require consent — you cannot log in without them. Analytics/advertising cookies (Meta Pixel) load only if you click "Accept" in the bottom banner. Your choice is stored in the browser and respected on every visit.

CarRadar is not intended for anyone under 16. We do not knowingly collect children's data. If you believe we have data from a minor, contact us and we will delete it.

We may update this policy from time to time. The date at the top shows the latest version. For material changes, we will notify you by email or in the app.

Privacy requests: info@carradar.si. We respond within a reasonable time, at latest within one month under GDPR.