privacy policy

Effective August 13, 2026

This policy says what Elonslist actually collects and does - written from how the product works, not from a template. Short version: we collect what a marketplace needs to run, we strip what it doesn't, we sell nothing, and the few things we share are listed below by name.

What we collect

• Account - your email address. Sign-in is by emailed magic link, so we never collect or store a password. Display name and phone number are optional; a phone number is required before publishing a listing (spam control) and is shown to buyers only if you switch that on for a specific listing.
• Listings - what you enter about the car: VIN, model, year, mileage, options, price, description, and photos. Location is your ZIP code only - we never ask for a street address, and search works on ZIP-area distance.
• Photos - we automatically strip all EXIF metadata, including GPS coordinates, from every uploaded photo and every size we generate from it. Your driveway shots cannot leak your home location from our servers.
• PulseCheck - if you buy verification, you authorize access on Tesla's own site. Your Tesla password never touches Elonslist. The access token is used for one reading and discarded - we do not store it and cannot access your car again without a fresh sign-in from you. We keep the derived results: VIN, odometer, factory options, software version, and battery health, which you are choosing to publish on your listing. The only command we ever send is a wake so the car can answer.
• Messages - conversations between buyers and sellers stay on-platform and we store them. Automated screening flags scam-pattern language for human review; flagged messages still deliver. Email notifications tell you a message is waiting but never include its content.
• Payments - handled by Stripe on Stripe's hosted checkout. Card numbers never touch our servers. We keep order records: what was bought, the amount, and Stripe's reference IDs.
• Dealer accounts - business details a dealership provides for its public page: name, license number, address, phone, logo, team member emails.
• Consents - if you opt in to a program that shares your information (for example, asking dealers to compete for your car), we permanently record the exact text you agreed to, when, and the IP address and browser it came from. These records are append-only by design - they exist to prove what you did and didn't agree to.
• Usage analytics - we use PostHog to understand how the site is used (pages viewed, features clicked). Session replay masks everything you type. Analytics are behavioral only - message content and payment details are never in them.

What we deliberately don't collect

• Passwords - none exist here.
• Card numbers - Stripe holds them; we see references, not digits.
• Tesla credentials - you sign in on Tesla's site; we never see them.
• Street addresses for private sellers - ZIP only.
• Photo GPS metadata - stripped on upload, always.
• Vehicle telemetry beyond the one reading you authorize - no location history, no driving data, no cameras, no ongoing connection.

Who sees what

• Everyone - your listing as you published it: the car's details, photos, ZIP area, and your display name. You can hide the VIN's last six digits per listing. Your phone number appears only if you turned that on.
• A dealership you message - when you message a dealer's listing, your name, email, and phone (if on your account) are delivered to that dealership as a sales lead, including into their own CRM system if they've connected one. That's what contacting a dealership means; it goes to that dealership only.
• Sellers you message - private sellers see your display name and your messages, not your email or phone.
• Service providers - the companies that run our infrastructure, each receiving only what their job requires: Supabase (database and sign-in), Vercel (hosting), Cloudflare (photo storage and delivery), Stripe (payments), Resend (email), PostHog (analytics), Inngest (background jobs), and Tesla's Fleet API (the vehicle reading you authorize).
• Nobody else. We do not sell personal information, we do not share it with advertisers or data brokers, and we have no ad networks on the site. If the law compels disclosure, we comply with valid legal process.

Retention and deletion

Listings you remove stop being publicly visible but are retained internally (marketplaces need history for fraud prevention and disputes). Consent records are kept permanently, as above. Everything else we keep while your account exists. To delete your account and associated personal data, email hello@elonslist.org from your account address - we'll confirm and process it, except records we're required to keep (consents, completed payment records).

Your choices

• Phone visibility is off by default and per-listing.
• VIN masking is per-listing.
• Dealer-offer sharing happens only with an explicit, unticked-by-default consent - and you can withdraw it from your listing.
• Access, correction, or deletion of your data: email us.

California residents: we do not sell or share personal information as those terms are defined in the CCPA/CPRA, so there is nothing to opt out of - the rights above (access, deletion, correction) are available to everyone regardless of state.

Changes and contact

If this policy changes materially, we'll update the effective date above and note it plainly. Questions: hello@elonslist.org. See also our Terms of Service.