Privacy

Who runs this site

Roadclue is operated by Traffic.Club IT GmbH, Kaiserstraße 170-174, 66386 St. Ingbert, Germany. Under data protection law, including the GDPR, that company is the controller for any personal data processed through this site. Full company details are on our imprint.

What you give us

Nothing that identifies you. You use Roadclue without an account, and we never ask for your name, email, or any personal detail to run a check. The car details you enter, such as year, make, and model, are used to look up recalls, safety ratings, and pricing. They are not linked to you and are not stored against your identity.

What our servers record automatically

Like any website, our hosting provider records standard technical information each time a page is requested:

• the IP address of the device making the request
• the browser type and version
• the operating system
• the page or file requested
• the date and time of the request
• the amount of data transferred
• the site you came from (the referrer)

We use this to keep the service running, to protect it against abuse, and to diagnose faults. We do not use it to build a profile of you, and we do not try to identify you from it.

Legal basis

Where the GDPR applies, we process this technical data on the basis of our legitimate interest in running a secure, working website (Article 6(1)(f)). If we ever rely on your consent for something, you can withdraw it at any time.

Analytics

We use Vercel Web Analytics to see which tools get used so we know what to improve. It is privacy-friendly and cookieless: it sets no cookies, does not track you across other sites, and does not build a profile of you. We only ever see anonymous, aggregated counts.

Cookies and local storage

We set no advertising or tracking cookies, and we use no third-party consent or tracking platform. The only thing we keep on your device is a small local storage note recording that you have seen our privacy message, so we do not show it on every visit. It never leaves your device and identifies nothing.

Service providers we use

We keep our stack small. A couple of providers process limited data on our behalf, each under a data processing agreement:

• Vercel hosts the site and provides the cookieless analytics described above.
• Upstash provides the Redis service we use for rate limiting and short-term caching. It briefly processes IP addresses so we can tell abusive traffic from normal traffic.

Some of these providers are based in the United States, so limited technical data may be processed there. Where that happens, the transfer relies on the standard data protection safeguards those providers put in place.

Referral links

Some links to partners (financing, insurance, inspection, warranty) may earn us a commission if you use them. They are marked as such, and they never change the free result you get. If you follow one, that partner has its own privacy policy that then applies.

Where our data comes from

Recall and safety data is official US data from NHTSA. Pricing is our own aggregate figure derived from public listings; the collector only ever reads price, year, and mileage, never anyone's contact details, and we store only the summary statistics. We do not republish other companies' listings.

How long we keep it

We keep server log data only as long as we need it for security and troubleshooting, then it is deleted or anonymized. Rate limiting counters expire within minutes. Aggregate pricing statistics contain no personal data, so we keep them for as long as they are useful.

Security

The whole site is served over HTTPS. We rate limit our APIs, collect as little as possible, and apply appropriate technical and organizational measures to protect the limited data we handle.

Your rights

If you are in the EU or EEA, the GDPR gives you the right to:

• access the personal data we hold about you
• have it corrected or deleted
• restrict or object to how we process it
• receive it in a portable form
• withdraw any consent you gave
• complain to a data protection supervisory authority

Because we deliberately hold almost no data that can identify you, there is often nothing we can link to a specific person, which can limit what we are able to act on. Even so, if you want to exercise any of these rights, contact us and we will help.

Children

Roadclue is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we will remove it.

Changes

We may update this policy as the site or the law changes. If we make a meaningful change, we will update the date at the top of this page.

Contact

Questions about privacy, or want to exercise a data protection right? Email privacy@roadclue.com. For formal requests you can also reach the controller at the postal address on our imprint.