Privacy
We collect what a quote needs — the vehicle, what you need, and how to reach you — plus an account if you make one. Analytics are counted without storing your IP address. There is no card processor on this site, so we never hold card numbers. Nothing is sold to anyone.
Written from what the code actually does, not from a template.
What we collect, and when
- When you ask for a quote — your name, an email address, a phone number if you give one, the vehicle, and what you need. We cannot check a fit without the vehicle, which is why it is the one thing we insist on.
- When you order — a delivery address, and the order itself. Payment is by transfer, so the only payment data we hold is the screenshot you choose to upload as proof.
- When you create an account — your email, and a password stored only as an Argon2 hash. We cannot read it, and neither can anyone who obtains the database. Saved vehicles and parts lists are yours and are deleted with the account.
- When you subscribe to the newsletter — your email address and nothing else. You confirm by clicking a link, and every mail after that carries an unsubscribe link that works without signing in.
- When you turn on notifications — the subscription endpoint your browser issues. It identifies a browser, not a person, and it only exists if you asked for it.
What the analytics record — and what they do not
We keep the pages a visit touched, the site it came from, and an approximate location — country, region and city — read from the hosting network's edge headers. It tells us which pages are worth writing and which states are worth writing about.
Your IP address is not stored. It is combined with your browser's user-agent string and hashed with a secret salt, and only the hash is kept. That is enough to count one visit as one visit; it is not enough to recover the address from our records, and it is deliberately not reversible.
The cookies this site sets
Five, all first-party. There are no advertising cookies here because there is no advertising here.
- torvex-vehicle, one year — the vehicle you picked, so every part you look at afterwards is judged against it rather than shown as a generic listing.
- torvex-list, 90 days — the parts list you build before you have an account, so closing the tab does not lose it.
- torvex-account, 30 days — set when you sign in, cleared when you sign out.
- torvex-vid, 13 months — the analytics visitor id described above. It carries no name and no address.
- torvex-control, 8 hours — the staff sign-in. It is never set on a customer's browser.
How long we keep it
- Pageview records — 90 days, then deleted by a scheduled job rather than by somebody remembering.
- Traffic identified as a bot — 30 days.
- Quotes and orders — kept as business records, because an order we cannot evidence is one we cannot stand behind or account for.
- Your account — until you ask us to close it.
Who else handles it
Named, because a list of categories tells you nothing you can check.
- Vercel — hosting. Every request reaches us through it.
- Neon — the database, hosted in the United States.
- Cloudflare R2 — product images, and the payment screenshots customers upload.
- Brevo — the newsletter and transactional email.
- Ahrefs Web Analytics — the visit counting described above.
What we will not do
We do not sell, rent or trade personal data. There is no arrangement under which anyone pays us for it.
We do not run advertising trackers, retargeting pixels or ad-network scripts.
We do not store card numbers, because there is no card processor on this site to give them to.
We do not buy email lists, and we do not add anyone to the newsletter who did not click the confirmation link.
We do not make unsubscribing hard. One link, no sign-in, no survey.
Seeing it, correcting it, deleting it
Email us and ask. We will send you what we hold, correct anything wrong, or delete it — including the account, the saved vehicles and the parts lists.
The exception is the record of an order that was actually placed. We keep those as long as we are required to, and we will tell you exactly what is being kept and why rather than refusing in general terms.
If something here is wrong
Tell us. This page describes a system, and systems change — if you find the site doing something this page does not describe, that is a defect in one of the two and we want to know which. The contact page reaches a person, not a queue.
Still not sure? Tell us the vehicle and we will answer it.