1. Controller
Tristan Stumpp, Hauptstraße 4, 75228 Ispringen, Germany · Email: wheelwonderland@gmx.de
2. Principle
No tracking or advertising cookies, no analytics. Fonts and preview images are served from our own server; visiting the site creates no third-party connections.
3. Hosting
Our host Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaka, Zypern processes technically necessary data (IP address, time, page, browser). Legal basis: Art. 6(1)(f) GDPR. Log files are kept only as long as needed for secure operation and then deleted automatically. A data processing agreement is in place.
4. YouTube
Links open YouTube in a new tab. Embedded videos load only after your consent via “Play here”, in privacy-enhanced mode (youtube-nocookie.com); data such as your IP address is then sent to YouTube (Google Ireland Limited), possibly also to Google LLC in the US (EU-US Data Privacy Framework).
5. Amazon Associates (affiliate links)
We participate in the Amazon Associates program. Clicking an ad-marked Amazon link takes you to Amazon, where Amazon may set cookies to attribute a commission. No data is sent to Amazon from our site itself.
6. Local storage
Garage, wishlist, language and theme are stored only in your browser (localStorage) and never leave your device.
7. Members area (optional)
Sign-in: only your email address; we send a sign-in link (no password). After signing in we set two strictly necessary cookies: “wwsid” (session, 60 days, server-only) and “wwm” (a “signed in” hint without content). Legal basis: Art. 6(1)(b) GDPR.
Profile and collection: member name, optional display name, country, short bio, collecting focus and your “have”, “want” and “trade” entries. If your profile is public (default, can be switched off), others see these – never your email address.
Messages: stored to deliver them. Chat is for members aged 16+ only. You can block members and report content; we review reports. Optional email notifications (can be switched off).
Photos: we remove metadata (e.g. GPS) and resize uploads. After you confirm the usage rights by email, we review the photo and publish it on the model page with your member name. As proof we store the time, your email and a hashed IP value.
Case sightings: store, city, country, date and your member name are shown publicly.
Email delivery: via our host’s mail server (Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaka, Zypern). Abuse protection: a hashed IP value is stored briefly to limit sign-in and message attempts.
Retention: until you delete your account (any time under “Profile”). Sign-in links expire after 30 minutes. Deletion removes profile, collection, messages, sightings and unapproved photos; approved photos remain without attribution under the granted license unless you ask us to remove them.
Data export: download all your data under “Profile” (Art. 15, 20 GDPR).
8. Your rights
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent; right to complain to a supervisory authority.