Last updated: 6 May 2026

This is a small, self-funded, independent analytics project. The privacy policy is written by the same person who runs the servers, so the rules below are the actual rules � there is no separate legal team to translate them into something less honest.

1. What AllCars is and is not

AllCars is a market data and statistics platform only. It collects publicly available car listing information through the same casual browsing anyone can do on any website, and uses it purely for analytics and statistical purposes. AllCars does not have accounts, logins, or user registrations. No personal data, no account information, and no login credentials are collected or stored by AllCars.

All listings shown on AllCars are sourced from and link directly back to the original sales website where they were posted. AllCars does not host, own, or take responsibility for any listing content. When you click through to a listing, you leave AllCars and go to the original platform.

2. What AllCars collects on the public site

When you load any page on allcars.cy � including the landing, picks, reports, blog posts, and the in-browser TMA app � the server records a minimal access log entry containing:

Your IP address (kept for short-term abuse detection, rotated)
The URL you requested and the HTTP referrer if your browser sent one
Your user-agent string (browser, OS family, mobile / desktop)
A locally-generated anonymous visitor ID stored in a first-party cookie, used only to count unique visitors and to debug navigation flows

That is it. There are no third-party advertising trackers, no Facebook pixel, no Hotjar, no session replay. AllCars does not sell or share any of this data.

3. What AllCars collects in the Telegram Mini App

If you open the AllCars app inside Telegram (the TMA), Telegram passes a signed payload that includes your Telegram user ID, locale, and an HMAC of those fields signed by the bot token. AllCars verifies the signature and uses your user ID only to:

Save your search filters across sessions on the same device
Send price-drop and new-listing alerts you opted into
Recognise you on a different device when you open the bot again

AllCars never receives your phone number, your email, or your Telegram username unless you explicitly type one into a form.

4. What AllCars does not collect

No personal data, login credentials, or account information of any kind
No information about listing owners, sellers, or buyers
No advertising profiles, cross-site identifiers, or tracking pixels
No payment information (donations are processed on-chain, which sends nothing back to AllCars)
No location data beyond what your IP roughly implies
No third-party analytics that fingerprint you

5. Listings data and your right to removal

The car listings shown on AllCars come from public ads on third-party platforms and represent only what those ads already made publicly available through casual browsing. AllCars does not display anything that was not already public.

If you posted an ad and would like it removed from AllCars, you can contact me directly on Telegram (below) with the listing URL. If you can demonstrate that the listing is yours, I will remove it within 7 days, usually within 24 hours. There is no form � just send a message.

6. Cookies

AllCars uses a single first-party cookie to track an anonymous visitor ID. It is not shared with any third party. You can delete it any time from your browser settings � the site will issue a fresh one on your next visit, but nothing else changes.

7. Where data is stored

All AllCars data is stored on a single server in Hetzner�s Helsinki data centre, inside the European Economic Area, and is not shared with any vendor outside the EEA.

8. Your rights

You can ask me to delete anything tied to you (a saved alert, a Telegram-linked filter, a cached listing you posted) by messaging me at @itsnotalisher. There is no form, just a message.

9. Changes

If this policy changes in any meaningful way, the Last updated date at the top will move. The current text is always at allcars.cy/privacy.

10. Contact

I�m one person. The fastest way to reach me is Telegram: @itsnotalisher.

Last updated: 6 May 2026 This is a small, self-funded, independent analytics project. The privacy policy is written by the same person who runs the servers, so the rules below are the actual rules � there is no separate legal team to translate them into something less honest.