Privacy policy
Last updated 26 September 2026. It describes what this site holds, who else handles it and how long it is kept, piece by piece rather than in the abstract.
We hold the email address you sign in with, the page you published about your car, and a count of how many times that page was opened. We do not sell any of it, we run no advertising, and we ask for nothing we do not use. Everything below says which piece is which, who else handles it, and how long it stays.
An email address, and nothing else is required. There is no password anywhere in this service: signing in is a link sent to that address, so there is no password of yours here to leak. A name is optional, and it is used only where you would expect to see it.
We also record once, when the account is made, which page you arrived on and which site sent you. It tells us which of our own pages bring people who go on to publish. It is written at that moment and never changed afterwards.
Everything on the public page is there because you put it there: the vehicle details, your photographs, the mileage, the asking price, your own words, the town, state and ZIP code, and either a phone number or an email address for buyers.
The page is public: anybody who has the link can open it, and you decide who that is. There is no browsable list of cars anywhere on this site, we send the link to nobody, and since 21 September 2026 a car page is not offered to search engines either. It is not in our sitemap and it carries a tag asking not to be indexed. Treat it as public all the same: a link you send can be forwarded, and a page nobody indexes is still a page anybody can read.
The address you sign in with is never published. The address a buyer sees is a separate field you fill in yourself, and one of the two ways to reach you is required, because a page nobody can answer is not an advertisement.
If you give the VIN, we send it to the vehicle database run by the United States National Highway Traffic Safety Administration, which is what fills in the specification. We keep the number and what came back from it.
Whether the number itself appears on the public page is yours to decide, in the creator and in the editor. Turn it off and the decoded facts stay while the number goes: off the page, out of the data we publish for machines, and out of the step that tells a buyer to run it.
Location and camera metadata are stripped from every photograph as it is uploaded, so a picture taken on your own driveway does not publish where you live.
The files are stored at addresses anybody holding the link can open, which is what makes them load quickly on a page you are sending to strangers. When a page comes down they are deleted, the files themselves and not only the records of them.
Neither is drawn on the page until a visitor asks for it, and those requests are limited per source, so a script cannot walk the site and collect them in bulk. The button says which of the two it is about to show.
We run our own counter, on our own servers. It writes one row per view: the path, the site that sent the visit, a short name for the browser, whether the request came from a person, an AI assistant, a search crawler or us, and which listing it was about. It holds no address, no identifier for you and nothing that could be joined up into a profile. It is what tells a seller how many people opened their page.
This site also uses Google Analytics. It stores an identifier for your browser in a cookie, and it sends Google which pages you open here, roughly where in the world the request came from, and what kind of device and browser you are using.
It is there for measurement and nothing else. No advertising feature is switched on, we run no advertisements anywhere, and nothing from this site is passed to an advertising network. If you would rather it did not run, Google publishes a browser add-on that turns it off, and any tracker blocker stops it as well. Our own counter, above, works either way, so nothing a seller is shown depends on whether you allow this.
We do not store the network address a request arrives from. It is used while the request is being handled, to count attempts so that nobody can ask for a thousand sign-in links in an hour, and it is not written down.
Where a record has to outlive the request, a message you send us or a report you file, what is kept is a one way hash of the address. It is enough to see that one source sent forty in an hour and useless for working out who anybody is. Our hosting provider sees the address itself, as every web server must in order to answer at all.
When you write to us we keep what the message is about, what you typed, the address to answer at, and the name and sheet number if you gave them. When you report a listing we keep the reason, your words, and your address if you chose to leave one. Web addresses are removed from the text before it is stored, in both cases.
A message is kept after it is answered, as the record of what was asked and what was decided. Nothing you write to us is published, shown to a seller, or passed to anybody else. Where a report leads to a page being taken down, the seller is told the reason in one sentence and is not told who reported it.
When a page goes live, we note how long the creator took, in seconds, from its first screen to the publish button. The screen after it asks how easy that was, what slowed you down and whether there is anything else. Every one of those questions is optional, and the whole thing can be closed.
The screen that closes a page asks what happened to the car, and, when it sold, what it sold for and how the buyer found it. You can add anything else in your own words. It is the one measurement that says whether this service does what it claims.
Your words are quoted only if you tick the box that allows it, and the name you give is kept only while that box is ticked. Nothing is quoted on this site today. We may publish totals, such as how many sellers found it easy or how long a page takes to make, with the number of answers beside them, and never an answer that can be traced to you.
An extension is sold to you by Creem, which acts as the merchant of record: Creem is the seller in that purchase, takes the payment on its own checkout page, sends the receipt, and deals with sales tax and with any dispute raised through your card issuer. Your card details are entered there and never reach our servers.
What we keep is that a payment was made, which page it was for, when, and the reference Creem gave it.
Three cookies of ours, and each one does a single thing.
- ws_session keeps you signed in for 90 days. It can be read only by our server, never by a script in the page.
- ws_in says that somebody is signed in and nothing else, so the navigation can offer “Your cars” instead of “Log in” without the server having to know who is reading. It carries no secret.
- ws_entry lasts thirty minutes, and only if you arrived through a link that said where it came from, such as a QR code on a window sign. It exists so that visit is counted against the right source, and it is gone after those thirty minutes.
Google Analytics sets cookies of its own, named _ga and _ga_ followed by a code. No cookie set by us follows you to another site, none of them is used for advertising, and there is no advertising network on this site.
Each of these does one job for us, under its own agreement with us, and none of them is given this data for purposes of its own. The site runs in the United States, so what we hold is held there, while the business behind it is in Poland.
- Vercel hosts the site and stores the photographs, in the United States.
- Neon runs the database, in the United States.
- Resend delivers our email.
- The National Highway Traffic Safety Administration decodes a VIN when you give one.
- Google, for the analytics described above.
Creem is not one of these. As the merchant of record it sells the extension to you itself, so what you give it at its checkout it handles as a business in its own right, under its own privacy policy, and not on our behalf.
- A page you started and never finished: 30 days from the last time you touched it, then it and its photographs are deleted. The email that saved it says so.
- A page that expires: readable for 90 days, in case you come back to it and extend it, then it and its photographs are deleted.
- A page you mark sold, or that is taken down: off the site the same day, photographs deleted the same day. The record of the listing is kept for 90 days and then deleted, everything with it, without you having to ask. If you want it gone before that, write to us and we do it.
- Sign-in links: 15 minutes, and one use. Sessions: 90 days. Both are cleared out by a job that runs daily.
- Messages and reports: kept as the record of what was asked and what was decided.
- Your answers to the questions after publishing and on the closing screen: kept after the page they were given on is deleted, with nothing that identifies you, so the totals do not shrink as pages come down. If you ask us to delete your page or your account, the answers go with it.
- The record of a payment: kept after the page it paid for is deleted, as the record of what was paid and when. It holds no card details, because we never receive them.
- Backups: a copy of the database is taken every day and 7 are kept. So something deleted today can still sit inside a backup for about a week, until the last copy holding it is dropped.
Taking a single page down does not need us: the panel does it, and the photographs go with it the same day.
To delete the account itself, write to us from the address it uses. We delete the account and everything attached to it: your pages, your photographs, the drafts you never finished and the answers you gave us. What survives briefly is the backups above.
Wherever you live, you can ask what we hold about you, ask for a copy, ask for it to be corrected, ask us to stop using it, or ask for it to be deleted, and we do it. Write from the address the account uses, so we know it is yours to ask about.
The business behind this site is established in Poland, so European data protection law governs how all of this is handled, wherever you are. Those rights come from there as well as, in California, from the CCPA, which adds the right not to be treated any differently for using them. If you think we have handled something badly and we have not put it right, you can complain to the Polish data protection authority, the President of the Personal Data Protection Office.
We do not sell personal information and we do not share it for advertising. There is no opt out to offer on that, because there is nothing being done that you would opt out of.
This is a service for selling a car, and it is not meant for anyone under 18. We do not knowingly collect anything from a child.
The date at the top changes with it. If a change means something new is collected, this page will say what it is and why, in the same plain terms as the rest.
WheelSheet is operated as a sole proprietorship by Jerzy Kurgan, ul. Niedźwiedzia 29B, 02-737 Warszawa, Poland, Polish tax identification number (NIP) 872-219-93-92. He is responsible for everything described here.
Write to hello@wheelsheet.com, or use the contact form. Either reaches a person, and a person answers.