Privacy Policy

1. Who We Are

CarShow Manager is a car show event management platform operated by Jeff Jack ("we," "us," or "our"). This privacy policy describes how we collect, use, store, and protect information when you use our website, application, and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and a hashed version of your password. We never store passwords in plain text. We may also collect your organization name if you choose to provide one.

2.2 Show and Event Data

When you create or manage a car show, we store the show details you provide, including event name, date, location, description, and uploaded logos. We also store car entry registrations submitted through your shows, including vehicle owner names, vehicle details, and uploaded photographs.

2.3 Voting Data

When attendees vote at a car show, we collect a device fingerprint (a unique identifier derived from browser and device characteristics) and approximate geolocation data. Location data is used exclusively for geofencing to ensure voters are physically present at the event venue. We do not collect voter names unless they voluntarily provide one. Phone numbers, when optionally collected, are stored securely and masked by default in all administrative interfaces.

2.4 Usage and Analytics Data

We automatically collect certain information when you visit or use the Service, including pages viewed, referring URLs, browser type, device type (desktop, mobile, or tablet), approximate country of origin, session identifiers, and timestamps. We may also capture UTM parameters from inbound links for marketing attribution. This data is collected through our own first-party analytics system and does not rely on third-party tracking services.

2.5 Uploaded Content

Photographs and images you or your registrants upload are stored on our servers and processed (including resizing) solely to provide the Service. We do not scan, analyze, or use uploaded images for purposes unrelated to delivering the Service to you.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Operate car shows, process registrations, tally votes, and generate certificates
• Enforce voting integrity through geofencing and device fingerprinting
• Provide administrative dashboards and analytics to show organizers
• Send you transactional communications related to your account or events
• Monitor and improve the performance, security, and reliability of the Service
• Aggregate and anonymize data for internal product improvement
• Comply with legal obligations and enforce our Terms of Use

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We do not use your data for automated decision-making or profiling.

4. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Essential cookies: Session cookies to authenticate you and maintain your logged-in state. These are required for the Service to function and cannot be declined.
• Analytics cookies: First-party cookies and sessionStorage identifiers to understand how the Service is used. You can decline these through the cookie banner displayed on your first visit.
• Anti-fraud cookies: Device identification cookies used solely to prevent duplicate voting at car show events. These are classified as essential to the integrity of the Service.

We do not use third-party advertising cookies. We do not share cookie data with external analytics platforms such as Google Analytics.

5. Data Sharing and Third Parties

We may share your information in the following limited circumstances:

• Infrastructure providers: We use cloud hosting and database services to store and serve your data. These providers process data on our behalf and are contractually obligated to protect it.
• Show collaborators: If a show organizer invites collaborators to help manage their event, those collaborators will have access to show data, registrations, and votes for that specific event only.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or enforceable government request.
• Business transfer: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

We do not sell personal information. We do not provide data to data brokers. We do not allow third parties to collect information about your online activities through the Service.

6. Data Retention

We retain your account information for as long as your account is active. Show data (event details, registrations, votes, and certificates) is retained for as long as the show organizer maintains their account. Analytics data (page views and usage statistics) is retained for up to 24 months and then automatically purged. If you delete your account, we will remove your personal information within 30 days, except where we are legally required to retain it. Anonymized or aggregated data that can no longer be linked to you may be retained indefinitely.

7. Data Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (TLS/HTTPS), hashed passwords using modern algorithms, access controls limiting data visibility to authorized personnel, and secure cloud infrastructure with regular security monitoring. While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will promptly delete it. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to remove that information.

9. Your Rights

9.1 All Users

Regardless of your location, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated personal data
• Export your show data in a portable format
• Withdraw consent for non-essential data processing
• Object to processing of your personal information

9.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know what personal information we collect, the right to delete it, the right to opt out of the sale of personal information (we do not sell your data), and the right to non-discrimination for exercising your rights. To submit a request, contact us at the email below. We will verify your identity before processing any request.

9.3 European Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation, including the right to access, rectification, erasure, restriction of processing, data portability, and objection. Our legal bases for processing include performance of a contract (providing the Service), legitimate interests (security and improvement of the Service), and consent (analytics cookies). You may lodge a complaint with your local data protection authority.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. When we transfer data internationally, we implement appropriate safeguards to protect your information in accordance with this policy and applicable law.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will update the "Effective date" at the top of this page and notify registered users by email. Your continued use of the Service after the updated policy takes effect constitutes acceptance. We encourage you to review this policy periodically.

13. Contact Us

For privacy-related questions, data access requests, or to exercise any of your rights, contact:

We will respond to all legitimate requests within 30 days.