Privacy Policy

This policy explains what information is collected on Voltrade (voltrade-8ew.pages.dev, the "Site"), for what purpose, who sees it, how long it is kept, and what your rights are. It was written in accordance with the Israeli Privacy Protection Law, 5741-1981 (including Amendment 13), and with the EU GDPR and the UK GDPR. It also applies to people browsing from outside Israel.

1. In brief

• We collect only what is needed to publish a listing, send an offer and prevent abuse.
• The Site has no accounts, passwords, cookies, analytics tools, advertising or tracking tools.
• The license plate number and the VIN (chassis number) are neither displayed nor stored. They are used only to fill in vehicle details automatically.
• Your phone number is shown in a listing only if you choose to show it. In offers, it is disclosed to the other party only when there is mutual interest.
• Your IP address is not stored. Only a one-way cryptographic digest of it, which changes every day, is kept in order to limit abuse.
• Automatic deletion: a listing 30 days after it ends, and a vehicle saved for offers after 180 days without activity. You can delete everything yourself at any time.
• We do not sell information, do not share it for advertising, and do not pass it on to anyone other than the service providers listed here.

2. Who is responsible for the information

The parties responsible for the information (the database controllers) are the operators of Voltrade. For any privacy matter, including a request to receive the full contact details of the controllers, use the "Contact" page (voltrade-8ew.pages.dev/en/contact/) and select the "Privacy" topic.

3. What information is collected

When you post a listing or save a vehicle for offers:

• Vehicle details: make, model, trim, year, mileage, number of owners, transmission, powertrain, color, battery and charging data, extras and a free-text description.
• Photos of the vehicle. Before upload, they are resized in your browser, and hidden data in them (EXIF, such as GPS location and device type) is removed.
• Country, region and town (optional). Asking price (optional).
• Name or nickname, phone number, and whether you choose to display the phone number.
• If you used automatic filling: the data received from the vehicle registry, such as the history of ownership types, the date of first registration and the inspection expiry date. The license plate number itself is not stored.

When you send a trade-in offer: the vehicle you are offering (as above), the amount and direction of the cash difference, a message to the seller (optional), and your name and phone number. Each subsequent response (counter-offer, acceptance, rejection) is stored with its date and time.

What is recorded automatically:

• The date and time when listings and offers were created and updated. A view counter and a counter of phone number reveals, without knowing who viewed them.
• A one-way cryptographic digest of your IP address (SHA-256 with a secret key that changes every day), for rate limiting and to prevent automated submissions. The address cannot be recovered from it. It is deleted within 24 hours, except in reports on listings (section 7).
• The country you are browsing from, based on your IP address, in order to suggest listings from your country. It is not stored.

On your device (not on our side): the management links for your vehicles and the language and country you have chosen, kept in your browser's local storage (localStorage). You can delete them on the "My cars" page or in your browser settings. The Site does not use cookies.

Notifications (only if you turn them on): if you ask for notifications, your browser creates a notification address with the push notification service of your browser's maker (Google, Mozilla, Apple or Microsoft). We store that address and send to it an empty notification with no content ("there is an update"). You can cancel this at any time in your browser settings.

Messages sent through the "Contact" page: the topic, the content of the message, and a way to get back to you, if you chose to leave one.

What is not collected: ID numbers, exact home address, payment methods, VIN, license plate number, precise location, contacts.

4. How the information is used, and on what basis

• To display listings and make them searchable, and to pass offers and responses between sellers and offerors. Legal basis: performance of the service you requested (GDPR Article 6(1)(b)).
• To disclose contact details between two parties when there is mutual interest. Legal basis: your request, made when you indicated interest or sent an offer.
• To prevent fraud, spam and abuse, to handle reports and to secure the Site. Legal basis: legitimate interest (Article 6(1)(f)).
• To send notifications. Legal basis: consent (Article 6(1)(a)), which you may withdraw at any time.
• To comply with legal obligations and respond to inquiries.

We do not use the information for advertising, marketing, profiling or automated decision-making that affects you. You are under no legal obligation to provide the information. Without the required fields in the form, you cannot post a listing or send an offer.

5. Who sees the information

• Any visitor: the listing content — vehicle details, photos, description, region and town, name or nickname, and the phone number if you chose to display it. A vehicle saved only for offers is not shown publicly.
• The seller who received an offer: the details of the offered vehicle, its photos, the cash difference and the message. The offeror's name and phone number are disclosed to the seller only when the seller indicates interest, or when the offeror accepts a counter-offer.
• The offeror: the seller's contact details, in exactly the same circumstances.
• The operators of Voltrade: for operating the Site, security, and handling reports and inquiries.
• Service providers (data processors):
  • Cloudflare, Inc.: hosting of the Site and the database, and protection against attacks.
  • The Israeli Ministry of Transport and Road Safety (data.gov.il): receives the license plate number from our server for automatic filling, without any details about you and without your IP address.
  • NHTSA, U.S. Department of Transportation: receives the VIN from our server for decoding, in the same way.
  • The push notification service of your browser's maker: only if you turned on notifications, and only an empty notification.
• The information is not sold or disclosed to any other party, except as required by law (for example, a court order).

6. International transfers of information

The servers of Cloudflare and of the notification services are located in several countries, including the United States and Europe. Transfers are made under the providers' terms, including Standard Contractual Clauses (SCCs) and recognized transfer frameworks, where applicable.

7. How long information is kept

8. Your rights

• To access the information stored about you (section 13 of the Privacy Protection Law), and to correct information that is inaccurate or out of date (section 14). You can view and edit most of the information directly through the management link.
• To delete: the "Delete" button in the management link immediately deletes the vehicle, its photos and all offers. You can also request deletion through the "Contact" page.
• To withdraw your consent to notifications, at any time.
• Under the GDPR (if you are in the European Union or the United Kingdom): also restriction of processing, objection to processing based on legitimate interest, and data portability. You may also lodge a complaint with the data protection authority in your country.
• In California (CCPA/CPRA): the right to know, to delete and to correct, and the right not to be discriminated against for exercising these rights. We do not sell personal information and do not share it for targeted advertising.
• In Israel, you may lodge a complaint with the Privacy Protection Authority.

How to make a request: use the "Contact" page (voltrade-8ew.pages.dev/en/contact/) and select the "Privacy" topic. We will respond within 30 days. To verify that the request is yours, we may ask you to act through the vehicle's management link.

9. Information security

• All communication is encrypted (HTTPS).
• Management links are stored on our side only as a cryptographic digest (SHA-256), not as text.
• IP addresses are not stored. License plate numbers and VINs are not stored.
• Access to the operators' management tools is protected by a secret key.

No system is completely immune. If a serious security incident is discovered, we will act as required by law, including notifying the authority and the people affected where the law so requires.

10. Minors

The Site is intended for people aged 18 and over. We do not knowingly collect information about minors. If we learn that such information has been collected, we will delete it.

11. Changes to this policy

We will update this policy when the Site changes. The date below shows the latest update. Any material change will be announced on the Site in advance.

Last updated: November 7, 2026