Privacy policy
Last updated: 30 October 2026
This policy explains what personal data the Autofax website collects, why we collect it, how long we keep it and what rights you have. We collect only the minimum we need to run the site and answer your requests.
Who we are
Autofax is a website that publishes the history of vehicles sold at US auctions: photos, damage, mileage and sale data. In this policy, “Autofax”, “we” and “us” mean the operators of this website. Vehicle records on the site describe cars, not people. They are compiled from auction and partner data, and we do not knowingly publish the names or contact details of vehicle owners.
What data we collect
We receive only the data you give us and the technical data created when you use the site: • Removal request form: your full name, email address, phone number (optional), message (optional) and the VIN of the vehicle. • Contact form: your name, email address and message. • Correspondence: if we exchange emails, for example to confirm that you own a vehicle, we keep those emails and any documents attached to them together with your request. • Technical data: when you visit the site or submit a form, our servers receive your IP address and standard request data, such as the time of the request, the page requested and information about your browser. We use it to protect the site from abuse and to limit the number of requests from one address. Please do not send passport details, bank card numbers or other sensitive information through the forms: we do not need them.
Cookies and the anti-bot check
The site uses only the cookies it needs to work: • Language preference: remembers the language you chose so the site opens in it next time. • Admin session: set only when a site administrator signs in to the admin panel. Ordinary visitors never receive it. We do not use advertising, analytics or other tracking cookies, and we do not show third-party ads. To protect the forms from spam and automated abuse, we use Cloudflare Turnstile. When you open a form, it checks your browser and may process technical data such as your IP address and browser characteristics. The check is carried out by Cloudflare under its own privacy policy.
Why we use your data
• To process removal requests: confirm that you own the vehicle, agree on the terms and remove or hide the record. • To reply to messages sent through the contact form. • To protect the site: block spam and automated abuse, limit request rates and investigate attempts to break into or overload the site. • To comply with the law and, if a dispute arises, to protect our rights. We do not sell your data, use it for advertising or send you marketing emails.
Legal basis
We process your data on the following grounds: • Your request and consent: when you submit a form, you ask us to do something (handle a removal request or reply to a message) and agree that we use the data you provide for that purpose. • Legitimate interest: we have a legitimate interest in keeping the site secure and working, which is why we process technical data and run the anti-bot check. • Legal obligations: in some cases the law requires us to keep or disclose data. You are not obliged to give us your data, but without your name and email address we cannot process a request or reply to you.
Who we share data with
We do not sell or rent out personal data. We share it only with service providers that help us run the site, and only as much as they need: • a hosting provider, whose servers store the site, the database and server logs; • an email delivery provider, which sends confirmation emails and our replies; • Cloudflare, which provides the Turnstile anti-bot check. These providers process data on our behalf or under their own privacy policies, and some of them may process it outside your country. We may also disclose data where the law requires it, for example at the lawful request of a court or public authority.
How long we keep data
• Removal requests and related correspondence: up to 24 months after the request is closed. We need them to show that a record was removed at the owner's request and to keep the VIN blocked. • Contact form messages: up to 12 months after the last message in the conversation. • Server logs and technical data: for a short time, usually no more than a few weeks, unless they are needed to investigate a specific incident. When the period ends, we delete the data or anonymize it. The VIN itself may stay on our block list for longer, without your name or contact details, so that the record does not reappear on the site.
How we protect data
Only site administrators can access requests and messages, and the admin panel requires signing in. Data is transmitted over an encrypted connection (HTTPS). No system is completely secure, but we take reasonable measures to protect your data from loss, misuse and unauthorized access.
Your rights
You can ask us to: • tell you what data we hold about you and give you a copy of it (access); • correct inaccurate or incomplete data (correction); • delete your data if we no longer need it or have no grounds to keep it (deletion); • stop processing your data for a particular purpose (objection). To exercise these rights, write to us through the form on the Contact page and include the email address your request relates to. We may ask you to confirm your identity and will reply within 30 days. Depending on where you live, you may also be able to complain to your local data protection authority. Please note that asking us to delete your personal data is not the same as requesting removal of a vehicle record. To remove a vehicle record, use the removal request form.
Children
The site is intended for adults who buy or sell vehicles. It is not meant for people under 18, and we do not knowingly collect their data. If you believe a child has sent us personal data, let us know and we will delete it.
Changes to this policy
We may update this policy if the way the site works or the law changes. The current version is always published on this page, and the date of the last update is shown at the top.
Contact us
If you have questions about this policy or about how we handle your data, write to us through the form on the Contact page. We will reply to the email address you provide.