This policy explains how CarShows.online handles information when you browse events, create an organizer account, buy a listing or ad, or contact support.
Information we collect
Account information: name or organization name, email address, password hash, account status and login timestamps. We do not store your plaintext password.
Event and advertising content: details you choose to publish, uploaded images, contact information, destination URLs and campaign settings.
Transaction records: order references, purchased product, amount, currency, PayPal order/capture identifiers, payment status and payer email when returned by PayPal. CarShows.online does not collect or store full payment-card numbers through the standard PayPal flow.
Support information: email, subject, messages and related account references.
Public-source and claim information: for publicly indexed events, we may store the source URL/domain, organizer name and factual event details visible on the source page. Organizer claim requests may include the claimant account, verification notes and a public proof URL.
Security information: The application may temporarily store hashed email and network identifiers for sign-in rate limiting and abuse prevention. These security records are automatically aged out by the included maintenance task.
Usage information: our first-party operational analytics record requested page paths, event identifiers, referring domain, device category and timestamps. This implementation does not store raw IP addresses in the application analytics table. If the site operator enables Google Analytics 4, GA4 loads only after the visitor selects “Allow analytics” in the cookie choice shown by this site.
How we use information
We use information to provide and secure accounts, publish, index and moderate listings, review organizer claims, process and reconcile purchases, measure event and campaign performance, respond to support requests, prevent abuse, maintain records and comply with legal obligations.
How information is shared
Public event and advertising information is visible to site visitors by design. Payment information is exchanged with PayPal as necessary to process transactions and refunds. If GA4 is enabled and you consent, analytics information is sent to Google under the operator’s configured analytics account. We may also disclose information to service providers acting on our behalf, to comply with lawful process, or to protect users, the service and legal rights.
Sale of personal information
The default CarShows.online application is not designed to sell personal information for money. If the business model later changes in a way that creates additional state-law opt-out obligations, the operator should update this policy and deploy the required preference controls before that processing begins.
Cookies
Essential cookies support secure sessions, authentication and CSRF protection. The analytics_consent preference records your choice about optional analytics. See the Cookie Policy.
Retention
We retain information for as long as reasonably necessary for the purposes described above, including account administration, event history, payment records, dispute handling, fraud prevention and legal obligations. Retention periods may differ by record type.
Security
The application uses password hashing, parameterized database queries, CSRF protections, restricted configuration directories, content-security headers and validated image uploads. No online service can promise absolute security, so the server, database, PHP runtime, TLS certificates and administrator credentials must also be maintained securely.
Your choices and rights
You can decline optional GA4 analytics through the cookie banner. Depending on where you live, applicable law may provide rights to access, correct, delete or obtain a copy of certain personal information, or to object to or restrict certain processing. Requests can be made through Support. We may need to verify identity before fulfilling a request and may retain information when required or permitted by law.
Children
CarShows.online is a general automotive event service and is not directed to children under 13. Organizer accounts and paid services are intended for adults or persons authorized to act for an organization.
Changes
We may update this policy as the service changes. The effective date above identifies the current published version.
Contact
Privacy questions or requests can be submitted through Support or sent to payments@carshows.online.