Last updated: 19 October 2026
PitLane Auctions (pitlaneauctions.app) and Garage (pitlaneauctions.app/garage) are a small, privately run site. The data controller is Joar Løvik Njølstad, reachable at [email protected]. No UK representative has been appointed yet - see "International transfers" below.
When you create an account (email/password, Google sign-in, or Facebook login) we store:
Photos you upload (for a PitLane listing, or to scan a car in Garage) may be sent to an AI service for automatic model/series recognition: Anthropic (Claude) or, for free accounts in Garage, Groq - see "Processors" below.
PitLane's front page can be browsed without an account. As a signed-out visitor we also store a random, anonymous ID in your browser, used only to roughly count daily visitors. This ID cannot be linked back to you as a person - we do not store your IP address, email address, or other identifying information alongside it.
We also count how many visits come from each source (for example Instagram, TikTok, Facebook, a search engine or a link tagged with "utm_source"). Only anonymous totals per source and day are stored. Nothing about individuals is stored: no IP address, browser information or ID, nothing is saved in your browser, and the source is not linked to you or your account.
The data is used exclusively to run the service: identifying you at login, showing you your own data in the apps, enforcing the age/country restrictions on PitLane, and (if you opt in) sending you push notifications about your own bids/listings. The anonymous visitor ID and "last active" timestamp mentioned above are used only for basic operational statistics and so the admin can follow up stalled trades. We never sell your data, and never use it for marketing outside the service.
These third parties process data on our behalf, to run the service:
Social media. PitLane may post listing photos, title, price and a link on PitLane's own social media accounts (such as Instagram and TikTok) to promote the listing and the service. Posts are public, and the platforms (for example Meta for Instagram) process them under their own terms. Sellers can ask support to remove a published post at any time.
Norway is in the EEA, so Norway-UK data flows have their own, more settled basis. Several of the processors listed above are US companies, though. The exact transfer mechanism (standard contractual clauses, an adequacy decision, or similar) for each of them is not fully documented here yet, and a UK representative under UK GDPR Article 27 has not been appointed. Both are open items - not verified, additional information required - not a claim that transfers are or are not currently lawful.
The site uses a necessary session cookie to keep you logged in - this one is not optional, the service does not work without it.
On the website (the login page) we show ads via Google AdSense, which may set its own cookies and use device information to show (possibly personalised) ads. On your first visit we ask for consent to this via a cookie banner - you can change your choice at any time at the bottom of this page. In the mobile apps ads are served by Google AdMob, which may use device information such as the advertising ID; you can limit this in your phone's settings. In some places we show selected product links to Amazon; when you click you leave our service. See Google's own explanation of how they use data from partner sites.
For as long as your account exists. You can delete your own account at any time (Settings in PitLane or Garage, "Delete account") - this immediately and permanently removes your account, every active login, and your PitLane profile (name/phone/address), push subscription and any ratings you gave. Your collection, wishlist and other data you entered in Garage are not deleted automatically today - email us at the address at the top of this page and we will remove them.
Listings, bids, messages and ratings you were part of on PitLane are not deleted in full, since the other party (buyer or seller) has a legitimate interest in keeping their own trading history. Instead your identity is removed from them - your name is replaced with "Deleted user", and your address/phone number are removed entirely - while the trade itself (price, date, item) remains as the other party's history.
For accounts that are NOT deleted, fixed retention periods apply (run automatically once a day): delivery address/phone number/tracking number on a completed trade are automatically removed 12 months after the trade was marked complete (the trade itself - price, date, who - remains). Reported listings and suggestions/feedback the admin has already actioned are deleted after 2 years and 1 year respectively - an unactioned report or piece of feedback is never deleted automatically.
You have the right to access, correct, and delete your own data. You can view/correct most of it yourself in the apps' settings ("Export my data", profile and password); to delete your Garage data, and for anything else, contact the email address at the top of this page.
We may update this notice as needed - the date at the top shows when it was last changed.