Privacy policy
This is how elma3rad uses information to run listings and contact requests. Seller and buyer phone numbers are private.
Last updated: 23 October 2026
What we collect and why
We store your name, mobile number, car details and photos, message, report or search preferences to review and follow up requests. We record consent, language, terms version, timestamps and UTM visit attribution when available. We do not request identity cards, licences or ownership-document images, and there are no public accounts. Editing and alert-stop links are private; we store their SHA-256 hashes instead of the secret tokens themselves.
Who sees the information?
Visitors see approved car details and photos, and may see archived car pages after sale or expiry. Authorised elma3rad staff see private request information for screening and follow-up. We share the parties’ phone numbers after consent and screening, or follow up your inspection interest. WhatsApp and hosting, storage and security providers process information needed for their services, potentially outside Egypt. Do not put personal information in public descriptions or photos.
Security and visit attribution
The application database does not store raw IP addresses. We use SHA-256 hashes with a secret salt to limit abuse and duplicate reports. Network, hosting and security providers receive connection information needed to serve the site. Cloudflare Turnstile protects forms independently of optional measurement consent. UTM codes are kept in session storage and may be saved with forms to understand request sources, even if you reject measurement cookies.
Storage on your device
The selling form keeps a local draft, which may include contact details, until successful submission, starting a new listing or clearing browser storage. Visit attribution uses session storage; the measurement choice stays in local storage until changed or cleared. On shared devices, clear your draft and browser storage after use.
Optional measurement cookies
Only after acceptance, and when configured, we may load Google Analytics, Google Ads, Meta Pixel, TikTok Pixel and Microsoft Clarity to measure visits, advertising results and page interaction. These services may use cookies, device identifiers and network data. Our conversion events contain only the successful step name, without names, phone numbers, messages or secret tokens. We mask page text, form values and link attributes in Clarity's page rendering, but ordinary public link click destinations may be recorded. The private stop destination is not exposed as a recordable link; private-link and operations pages do not load these tools. Reject or change your choice at the bottom of the page. Rejecting after acceptance reloads the page to stop the tools; it does not automatically erase information already sent to a provider.
How long we keep information
The code photo is deleted after publication review. Cleanup targets abandoned drafts and unused images after 24 hours, and rejected or removed listing photos after 30 days; the scheduled cleanup must be running. Car alerts expire after 30 days; old rate-limit keys are cleaned after two days. Archives, requests, contact details, consent and audit records are not automatically erased when a listing expires or is removed. Published article covers and older versions may remain available. Provider and backup retention depends on their settings.
Correcting or requesting deletion of information
Use your private link to edit or remove a listing or stop alerts. For other information or a request to review, correct or delete it, reply to the WhatsApp conversation with the elma3rad team handling your request. We review the request and the information needed for follow-up and abuse prevention. Removing a listing does not immediately erase every record or backup.