Privacy
We collect as little as we can, and we never sell your data. This notice is written with Qatar’s Personal Data Privacy Protection Law (Law No. 13 of 2016) in mind.
What we collect
- Account: username, name, email, optional mobile number, optional Instagram handle, password (stored only as a secure hash, never in plain text).
- Content: the photos, videos, captions, comments and car details you post.
- Technical: a one-way hash of your IP address, used only to enforce upload and comment limits and to catch abuse. We never store raw IP addresses.
Photos and plates: how we protect you
This is the part we take most seriously, because it’s the reason Qatar Supercars exists: a place to show off cars, not to identify the people near them.
- Metadata is stripped twice. Location (GPS) and camera data are removed from your photo in your browser before it’s even uploaded, then stripped again when our server re-encodes the image.
- Plates are blurred before anything is public. Every photo is scanned automatically for number plates, and a moderator checks every photo by hand before it’s approved — adding or adjusting the blur over any plate, face or reflection the automatic check missed. The blur is baked permanently into the published image and can’t be reversed.
- Unblurred originals are never public. We keep the original photo you uploaded privately, outside the public website, only so a moderator can review it and so you can request changes. It’s never served to visitors, and it’s deleted entirely if your post is rejected or if you delete your account.
- Only the general area is shown — “Lusail” or “The Pearl-Qatar”, for example — never an exact address, venue or time.
- Video can’t be auto-blurred. When you post a reel, you confirm no plate or face is visible before uploading, and a moderator checks the whole clip before it goes live.
- Reports act fast. Anyone can report a post. Once three different people report the same post, it’s taken offline automatically while we review it — even before we’ve had a chance to reply.
- A small number of posts use openly licensed photos (marked “Editorial”, credited to the photographer) while the community is still growing. We blur these exactly the same way. See our Copyright & Takedown Policy.
What’s public
Your username, display name, bio, profile photo, Instagram handle, garage and approved posts. Your email, phone number and the unblurred original of any photo are never public.
Site analytics
We count page views to understand what’s popular — but not with cookies, and not with your IP address. Each visit is counted using a one-way scrambled code made from your IP address and browser, regenerated every single day, so nobody — including us — can follow what one visitor did across different days. Bots, link previews and our own staff are excluded. Full detail in our Cookie Policy.
Who we share with
Only the service providers that run the site for us — web hosting, email delivery, and video hosting (for reels) — and only to the extent needed to provide the service. They process data on our instructions and aren’t allowed to use it for their own purposes. We don’t sell data, and we don’t share it with advertisers.
Cookies
We use one essential session cookie and one that remembers your chosen language — nothing more. No advertising or tracking cookies, and no consent banner, because there’s nothing invasive to consent to. Full detail in our Cookie Policy.
Your rights
You can, at any time:
- See and edit everything on your profile from Edit profile.
- Ask us what data we hold about you, or for a copy of it.
- Delete your account and everything you’ve posted — permanently, including the unblurred originals — also from Edit profile.
- Ask us to correct, restrict, or object to how we use your data.
For anything beyond self-service, email hello@qatarsupercars.com.
Backups and retention
- Rejected posts, including their original photos, are deleted automatically after 30 days.
- Deleted accounts are removed immediately. A short-lived backup may still contain a copy for up to 30 days, after which it’s gone for good.
- We keep a small number of recent backups to prevent data loss — roughly the last two weeks of daily database backups and the last month of weekly photo backups. Only administrators can access them.
Where your data is processed
Qatar Supercars is built and run for Qatar, but our hosting and email providers may process data on servers outside Qatar. We only use providers who are contractually required to protect your data to a comparable standard, wherever it’s processed.
Not for children
Qatar Supercars is for members aged 18 and over (see our Terms). We don’t knowingly collect data from children. If you believe a child has created an account, contact us and we’ll remove it.
Changes to this policy
If we make a significant change to how we handle your data, we’ll update this page and, where it affects you directly, let you know.