Privacy Policy
This policy describes how Plateop handles your data, in line with the GDPR (General Data Protection Regulation). The formal company details and the final retention periods will be added and legally reviewed before launch.
Last updated: 08/06/2026
1. Who we are
Plateop helps people assess a used car before buying it. The formal company details (including the registration number) will be published here before launch.
2. No account, no profile
Plateop deliberately works without registration or login. That means we don't need your email address, name, or password for a report, and we don't build a user profile. The reports you open are remembered only locally on your own device (localStorage) and never leave that device.
3. What data we process
- Vehicle data: the licence plate or vehicle identification number (VIN) you enter and the official vehicle data we retrieve with it from Samgöngustofa (island.is).
- Listing data you enter or paste yourself (listing text, asking price, mileage, and similar) and any test-drive photos you upload.
- The reports generated from this data (not linked to a person).
- Data you enter yourself in the contact form (your email address, optionally your name, and the text of your message). We keep this to answer your question and forward it to our own mailbox.
- Limited technical data (such as IP address in server logs), used solely for security and abuse detection.
- Pseudonymised visitor statistics: your IP address and a characteristic of your browser are briefly processed to form a daily-rotating pseudonym we use to count unique visitors. We don't store the IP address itself; we do store the pseudonym and the country we derive from your connection.
Please note: a license plate can be traceable to a person when combined with other data. Don't enter personal data (names, phone numbers) in comments or listing text; it isn't needed for the analysis.
4. What we use this data for
To carry out the purchase analysis and show the report, to handle your message from the contact form, to keep pseudonymised usage statistics, and to keep the service secure and detect abuse. We don't sell data to third parties and we don't use advertising tracking.
5. Retention periods
Starting point: we don't keep data longer than necessary for the purpose for which it was collected. The final periods will be set before launch.
- Analyses and reports: for as long as the service needs them to keep your report link working; a clean-up period will be set before launch.
- Security logs: briefly, solely for abuse detection.
- Licence plates and VINs you enter: 90 days, for product statistics and abuse detection (legal basis: legitimate interest).
- Contact messages: for as long as needed to handle your question; a clean-up period will be set before launch.
- You can clear the on-device history through your browser settings (for example by clearing your browser data for this domain).
6. Your rights
This policy follows the GDPR, the European privacy legislation, and applies it as a floor in every country we serve. If you live outside the EU your statutory rights may differ; which rules apply per country will be set out before launch. Among other things, you have the right to:
- Access to and deletion of data relating to you (contact us and mention the report link).
- Correction of inaccurate data.
- Object to certain processing and file a complaint with the data protection authority of your own country (in the Netherlands, the Autoriteit Persoonsgegevens).
7. Country and language
Every country has its own subdomain, and the subdomain you visit determines which official source, currency and default language we use. If you arrive on the bare domain, we pick a country from three signals, in this order: a choice you made earlier, the country code our proxy or CDN sends along with the request, and the region in your browser’s language setting. We don’t keep your IP address for that country detection; we do put the derived country code (for example “NL”) in a cookie for at most a day, so the country suggestion can be shown in your browser. Your own choice, and dismissing that suggestion, are remembered for a year. On a country subdomain we never redirect you automatically (at most you get a suggestion you can dismiss), and search engines and AI crawlers are never redirected. The cookie policy lists exactly which cookies these are.
8. Contact
Questions about this privacy policy or your data? Email us at [email protected] or use the contact page.