1. Controller
The controller is Supercar Sharing AG, Badenerstrasse 549, 8048 Zürich, Switzerland, CHE-184.767.384. Privacy enquiries and data-subject requests can be sent to office@supercarsharing.com.
2. Data processed when you visit
When the website is requested, technical data may be processed to deliver and secure the service. This can include IP address, request time, requested URL, referrer, browser and device information, approximate location derived from IP, response status, performance and security diagnostics.
Collectible does not require a login for ordinary vehicle and market research. The first Basic Calculator calculation may be used anonymously; a small first-party usage counter is stored to enforce that limit. Users can optionally create a Research Account to continue using Basic research tools. Photographers and creators can also use account access to manage a contributor profile and submit media.
3. Research accounts
If you create a Research Account, we process your authentication email address and account identifier to provide secure access to account-gated research features. Research authentication is handled through Supabase. You may also provide a display name and preferred currency.
A Research Account can also be created directly from a Calculator result when you request a Collector Report. In that flow we process the name and email address you enter together with the time at which you accept the Terms of Use and acknowledge this Privacy Policy. The first report may be generated immediately in your browser before the email link is confirmed; confirming the secure email link activates ongoing account access and future report exports. The browser may store a small first-party flag to prevent repeated unconfirmed first-report exports.
Signed-in personal research can include Saved cars, a private Garage record with optional purchase price, purchase currency, purchase date, current mileage and private note, saved comparison groups, recent vehicle views and a limited calculator history. These records are scoped to your account through row-level access controls and are not public profile data. Paid-access tier, entitlement overrides, upgrade requests and aggregate feature-usage counters may also be stored to operate the freemium and paid-access system.
When an email sign-in interrupts a calculator or save request, the browser may temporarily retain the pending inputs or action with a 30-minute expiry solely to restore the workflow after authentication. Temporary drafts are removed after successful resumption or when they expire.
4. Creator accounts & submitted media
If you create or use a contributor profile, we process your authentication email address and account identifier together with the public creator name, preferred photo credit, biography, country, website and social links you choose to provide, rights-confirmation records, moderation status and the vehicle media you submit. Approved creator profile fields and approved photographs may be published publicly.
Contributor authentication is handled through Supabase. Media is stored in private application storage and is made publicly accessible through controlled Collectible endpoints only after the applicable moderation or head-image selection process.
5. Hosting & analytics
The site is hosted and delivered through Vercel infrastructure. Vercel may process network, system and log data as a service provider for hosting, security, diagnostics and service delivery. Collectible also uses Vercel Web Analytics to understand aggregated page usage and improve the product. We do not use Collectible to run behavioural advertising or sell visitor data.
Vercel information: Privacy Notice.
6. Vehicle media requests
Vehicle images are resolved server-side from approved open-media sources and delivered through Collectible endpoints. Ordinary page visitors therefore do not need to contact Wikimedia Commons or Openverse directly merely to load a Collectible vehicle image. If you choose an external source or licence link, that third party will process the request under its own privacy terms.
7. Purpose & legal basis
Technical processing is carried out to provide the website, maintain security, prevent abuse, diagnose errors, measure service performance and improve the research product. Processing is based on applicable Swiss data-protection law and, where relevant, legitimate interests or other lawful grounds available under applicable international privacy law.
8. Retention
Personal research records remain associated with the Research Account until deleted by the user where deletion controls are available, the account is removed, or retention is otherwise no longer necessary. Calculator history and recent-view records are used to provide account history and product continuity; entitlement events may be retained for access-control, accounting or dispute records.
We retain personal data only for as long as necessary for the purpose for which it is processed, legal obligations, security and the establishment or defence of claims. Infrastructure and analytics retention can also depend on the configured hosting plan and service settings. Aggregated or anonymised statistics may be kept for longer where they no longer identify an individual.
9. International processing & recipients
Technical service providers may process data outside Switzerland. Where required, appropriate contractual or statutory safeguards are used. Recipients are limited to service providers needed for hosting, security, analytics, infrastructure and legal compliance, plus authorities where disclosure is legally required.
10. Your rights
Depending on the applicable law, you may have rights to information, access, correction, deletion, restriction, objection or data portability. You may contact us using the address above. Swiss users may also consult the Federal Data Protection and Information Commissioner at edoeb.admin.ch.
11. Changes
This notice is updated when Collectible adds new account functions, personalised saved-car features, creator features, analytics, forms, cookies or other processing that materially changes how personal data is handled.