Privacy Policy

Last updated: September 28, 2026

Reverse Garage ("we", "us") is a small single-seller shop for used JDM parts. This policy explains what information we collect when you use this site or buy from us, and what we do with it.

1. What we collect

When you buy something: your name, email address, and phone number, and — if you choose a shipped item — your shipping address. This information is entered at checkout, where Stripe processes your payment, and is used by us to fulfill your order.

Payment details: your card number is processed entirely by Stripe and never touches our servers or database. We only receive confirmation that payment succeeded and the contact details above.

When you browse: standard technical logs kept by our hosting provider (such as IP address and pages requested) for security and reliability. We use your browser's local storage to remember small preferences (like a dismissed announcement banner). We use Vercel Web Analytics to count page visits in aggregate; it sets no cookies and does not follow you across other websites. The sign-up and password-reset forms use Cloudflare Turnstile to block bots, which checks your browser when you use those forms. We do not run advertising trackers.

2. How we use it

The shop also remembers the product IDs you click and their view counts in your current browser tab to suggest parts. This recommendation history stays in your browser and is not sent to our database. It expires after an hour without a new product click and is cleared when the tab is closed. If browser storage is unavailable, browsing and checkout still work.

Only to run the shop: confirming and fulfilling your order, coordinating local pickup or shipping, emailing your receipt and order updates (and any alerts you sign up for), resolving problems with an order, and meeting bookkeeping/tax obligations. We do not sell your information, share it for advertising, or add you to marketing lists.

3. Where it lives and who sees it

Order records are stored with our infrastructure providers: Stripe (payments), Supabase (our database), and Vercel (hosting). Emails are delivered through Resend, shipping rates and labels come from Shippo, and bot checks run through Cloudflare Turnstile. When an item ships, your name and address are shared with Shippo and the carrier to deliver it. Beyond those service providers — and situations where the law requires disclosure — your information is seen only by the shop owner.

4. Accounts

You can shop as a guest or create an account (email + password). An account stores your name, email, any addresses you save, your order history, and any restock or keyword alerts you sign up for. If you register to bid, the card you save for auction payments is stored by Stripe — we only see its brand and last four digits. Orders placed as a guest with your verified account email — before or after you sign up — are attached to it automatically — the same trust level as our order-lookup page, which also uses the checkout email. Passwords are handled by our authentication provider (Supabase) and never stored by us in readable form.

You can delete your account yourself from the account page. Deleting removes your saved addresses, restock alerts and login; order records are kept for our books but anonymised (name, email, phone and street address removed; the state and ZIP code are kept for sales-tax records).

If you register to bid in auctions, the IP address you bid from is kept with each bid for fraud review and removed when your account is deleted, together with the address snapshot on those bids.

5. How long we keep it

Order records (including your contact details) are kept as long as needed for business records, accounting, and tax purposes. Checkout attempts that were never paid hold no card data and are periodically cleaned up.

6. Your choices

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it (subject to records we're legally required to keep). Message us on Instagram @reversegarage, or email reversegarageofficial@gmail.com, and we'll sort it out.

Do Not Track: the site doesn't change its behaviour for browser Do-Not-Track signals, because it does not track you across other websites and doesn't let any third party do so through it.

7. Children

This site sells car parts and is not directed at children under 13. We do not knowingly collect information from them.

8. Changes

If this policy changes, the updated version will be posted here with a new date.