Privacy Policy

• Registration: email address, used to create and authenticate your account.
• Profile: display name, avatar and bio. City is a private profile field and is never exposed on public pages.
• Garage / vehicles: license plate, VIN, insurance and financial data related to your vehicle. This data is always private: it never appears in public Car Cards, QR code resolution, or leaderboard/badge data.
• Public / event-only Car Card: if you set a vehicle to Public or Event only, the following becomes visible to anyone with the link or QR code: vehicle name, description, photos, categories, plus your display name (as a handle) and avatar. Cards set to Private or Disabled expose none of this. Photos are shown exactly as you upload them: we do not detect or blur license plates or other details visible in the image. It is your responsibility to check your photos before making them public and to ensure they do not show your plate or other information you don't want to share.
• Street Likes: liking a public Car Card page requires a registered Elite Club account — we deduplicate by account within a 24 hour window. Anonymous likes are not accepted.

We process your data to provide the requested service (contract performance) and for security and abuse-prevention purposes (e.g. per-account Street Likes deduplication), based on our legitimate interest.

We retain your data for as long as necessary to provide the service and to comply with legal obligations. You may request deletion of your account and associated data at any time by contacting us.

Your data is hosted and processed on Amazon Web Services (AWS) infrastructure, including the Amazon Cognito authentication service. We do not currently use third-party tracking or analytics tools on the public website.

Our AWS infrastructure operates in a European Union region. We do not transfer your personal data outside the European Economic Area, unless specifically communicated otherwise.

Under articles 15-22 of Regulation (EU) 2016/679 (GDPR), you have the right to access, rectify and erase your data, request data portability, object to processing, and lodge a complaint with the competent data protection authority.

Authentication is handled via Amazon Cognito with JWT tokens: we never store your credentials in plain text.

The service is not intended for minors. The Terms of Service, once published, will specify the minimum age required to register.

We may update this policy over time. The most recent version is always available at this address.

For any question about this policy or the processing of your data, write to info@eliteclub.biz.