The Dutch text is the binding version. This English translation is provided for information only.
Version 30 October 2026. This policy applies to wikidetail.com and the WikiDetail app.
Who we are
WikiDetail is an independent reference and price comparison site for car care products. WikiDetail is a product of JSD Works B.V., Distributieweg 44, 2645 EJ Delfgauw, the Netherlands, Chamber of Commerce (KvK) 42087708, VAT ID NL869652801B01. JSD Works B.V. is the controller responsible for processing your personal data. Questions or requests about privacy: support@wikidetail.com, or the contact form with the subject "Privacy request".
What we process, why, on what legal basis and for how long
| What | Why | Legal basis | How long |
|---|---|---|---|
| Account: e-mail address, password (encrypted), display name, language, which version of the terms you accepted and when (with your language and your confirmation that you are 16 or older) and, if you set one, an avatar or your own profile photo (visible only to you) | Signing in and running your account; showing that you accepted the terms | Performance of the contract; legitimate interest for showing this | Until you delete your account |
| Personal tools: My Garage (make, model, year, colour, paint, notes; no registration number), My products, logbook with photos, session planner, maintenance, followed products and price alerts, favourites, reminders | The tools you use | Performance of the contract | Until you delete it or delete your account |
| Shared logbook page | Only what you choose to share, via a link you can revoke | Consent (your choice to share) | Until you revoke the link |
| Price alert and reminder e-mails | E-mailing you when a price drops or a maintenance moment approaches | Performance of the contract | Until you switch off the alert or the e-mail; you can unsubscribe without signing in |
| Bounces and spam complaints: your e-mail address at Resend, with us only a hash, the reason, a count and the dates | Stopping mail to an address that does not work or that reported our mail as spam | Legitimate interest | Until you delete your account; without an account 2 years after the last report. After that we remove the address at Resend within a month and keep the hash until that is done |
| WikiDetail Plus: subscription status, period, start and end date, your choice of which alerts and cars are active, and the Stripe customer reference | Providing and managing your subscription | Performance of the contract | Until twelve months after your subscription ends |
| Withdrawals and cancellations: your statement, date and time | Proof that you withdrew or cancelled and what we refunded | Legal obligation and legitimate interest | 7 years, together with the invoice data |
| Payment and invoice data at Stripe: name, e-mail address, country, invoice amount, VAT, payment status, type and last digits of your payment method. Your full card or account number never reaches us | Payment, invoicing and VAT returns | Performance of the contract and legal obligation (tax law) | 7 years after the financial year of the invoice, even if you delete your account; then separated from your account |
| Waiting list for Premium, Business Pro or Business Insight: e-mail address, the chosen tier and, if you provide it, your company name | E-mailing you once when it becomes available and what it costs | Consent (you can unsubscribe at any time) | Until that e-mail has been sent and at most twelve months after, or until you unsubscribe |
| Messages via contact, "Report an error", corrections to a product, objections to a photo or text, reports about content and advertising enquiries: what you enter and, if you provide them, your name, organisation and e-mail address | Handling and answering your message; recording reports about content | Legitimate interest (answering your question), steps prior to a contract (advertising) and legal obligation (reports about content) | At most twelve months, after which we delete the message automatically |
| Business Free: your account, your company's registration number and VAT ID, the result of the VAT check with its date, the e-mail address on your company's domain with which you confirm the claim, and what you place on your profile | Letting you manage your business profile and verifying that you belong to the company | Performance of the contract (WikiDetail Business terms) | As long as your profile is claimed; after you release it we remove your own photos, logo and texts within 30 days |
| Registration number in My Garage | Retrieving vehicle data once from the RDW (the Dutch vehicle authority) | Performance of your request | Not stored |
| Place or location for Poetsweer and the session planner | Retrieving the weather for your location from our own weather server; your IP address does not reach it | Performance of your request; your location only after your click and your device's permission | Not stored |
| Technical data in the logs of our hosting providers (IP address, time, requested page, browser type) | Security, resolving faults and preventing abuse | Legitimate interest | At most 90 days; shorter at most providers (our server keeps them for 30 days) |
| Error reports (Sentry): which error, on which page, which browser; without IP address and without what you entered | Finding and fixing faults | Legitimate interest | 90 days |
| Cookie choice and functional storage in your browser | Making the site work and remembering your choices | Necessary for the service | See the cookie policy |
| Your country: derived by Vercel from your request, or the country you choose yourself | Showing which shops deliver to your country and what the lowest price is there | Derived country: legitimate interest. Your own choice: necessary for the service | Derived country: not stored. Your own choice: see the cookie policy |
| Counters of viewed product pages and business profiles (and of clicks on phone or e-mail on a claimed profile) | Seeing what is viewed often; figures for the business | Legitimate interest | Only a number, without who looked; no cookie, no IP address |
| Advertisements via Google AdSense | Showing and measuring advertisements so that WikiDetail stays free | Limited ads (without cookies, not tailored to you): legitimate interest. Ads tailored to you: consent via Google's consent message | Not yet active. See "Advertisements" |
| Visitor statistics (Vercel Web Analytics): the path of the viewed page (without search terms, tokens or other parameters, which we strip before sending), time, referring site, and the country, region, city, operating system, browser and device type that Vercel derives from the request | Knowing how many visitors view which pages, so that we can improve the site; without cookies, without storage on your device and without a link to your account | Legitimate interest | Vercel creates a temporary code per visitor from your IP address and browser, discarded after 24 hours; after that only totals |
We ask for no more than necessary, do not link your data to external profiles and never sell personal data. Photos you upload are re-saved without location and camera data.
Business profiles of detailers and shops
WikiDetail shows basic profiles of detailing businesses and shops, including businesses that have not registered themselves. These profiles are compiled from the business's own website and public sources, such as business directories. We show the business name, town, website and logo. We show phone and e-mail only if the business publishes them on its own website. For shops the same applies to address, location on the map, opening hours and Chamber of Commerce (KvK) number. For detailers, address, location on the map and opening hours may also come from a public business directory or another public listing, so not always from the business itself. For sole traders these may be personal data, and the address may be a home address. We process them on the basis of our legitimate interest in offering visitors a findable overview of the trade, and the business's interest in being found. Is this your business and do you want to change something or have the profile removed? Use the "Is this your business?" button on the profile or e-mail support@wikidetail.com. We handle this within five working days and remove a profile on request. You can also have only your address removed, for example if it is your home address. You do not need to give a reason: we then also remove the location on the map and keep the town. If you claim your profile with Business Free, you manage it yourself; the figures you then see (views and clicks) are counted without cookies and without visitors' IP addresses.
Cookies and consent
By default we use only what is needed to make the site work: a sign-in cookie if you use an account, a language cookie, a cookie for the country you choose yourself, and storage in your browser for your cookie choice, favourites, comparison basket, view and, if you have Plus, a marker that keeps ads away from you. No consent is required for these. The full list is in the cookie policy. If advertisements arrive, we first ask for your choice: only with your consent are they tailored to you; without consent you see limited ads that use no cookies. We measure visitor numbers with Vercel Web Analytics, without cookies, without storing anything on your device and without linking to your account; we send only the path of the page, never search terms, unsubscribe links or sharing keys. We do not ask for consent for that. Should statistics ever arrive that do store something on your device, we will ask for your consent first. You change your choice via "Cookie preferences" at the bottom of every page. Payment for Plus takes place on a Stripe page; Stripe's cookies apply there.
Advertisements
At launch there are no advertisements on WikiDetail. If they are switched on, this happens via Google AdSense and all visitors see advertisements, except members of WikiDetail Plus. Your choice does not determine whether you see ads, but which ones. Google's consent message (a certified consent management platform under the IAB TCF standard) asks for your choice first. If you consent, third-party providers, including Google, use cookies to show ads based on your earlier visits to this or other websites. If you do not consent, you see limited ads: they match only the page you are viewing, use no cookies and store nothing on your device. In both cases Google receives your IP address and the page you are viewing when an ad loads. You can switch off personalised ads via Google's Ads Settings (adssettings.google.com) and via www.aboutads.info, and withdraw your consent via "Cookie preferences". Google is itself responsible for that advertising processing; how Google uses data is explained at policies.google.com/technologies/partner-sites. Advertisements are always kept separate, labelled "Advertisement", never in a price row or price table, and never shown to members of WikiDetail Plus. As soon as advertisements are switched on, we update this policy and the cookie policy.
Who we share data with
These parties work on our instructions (processors); we have a data processing agreement with each of them:
- Supabase (database, sign-in, photo storage), processing in Frankfurt, EU.
- Railway (our server, api.wikidetail.com), processing in Amsterdam, EU; the provider may work from the US for support.
- Vercel (hosting of the website and the visitor statistics), US; Vercel processes mainly in the United States and may also process elsewhere.
- Cloudflare (domain, security, the secure connection to our weather server and delivery of product photos and logos via img.wikidetail.com), global network; the photos themselves are stored in the European Union.
- Resend (sending account, subscription, alert and reminder e-mails), sent from Ireland; metadata also in the US.
- Stripe (payments, subscriptions, invoices and the customer portal for Plus); our contracting party is Stripe Payments Europe, Limited in Ireland; data may also be processed by Stripe in the United States on the basis of the European Commission's standard contractual clauses. For the subscription administration Stripe works on our instructions; for the payment itself, fraud prevention and the legal duties of a payment service Stripe is itself responsible (stripe.com/en-nl/privacy).
- Sentry (error reports from website and server, without IP address and without what you entered), processing in Frankfurt, EU.
- Microsoft 365 (our mailbox support@wikidetail.com), EU.
Better Stack only checks whether our server is reachable and receives no visitor data in doing so; it is therefore not a processor of your data.
These parties receive only what their task requires:
- OpenStreetMap (map on profile pages of detailers and shops): when the map loads, the OpenStreetMap Foundation receives your IP address; the map loads as soon as you open such a profile.
- RDW (vehicle data): receives only the registration number, not who you are; the request goes through our server.
- VIES (the European Commission's VAT check): for a business claim only the VAT ID is sent there.
- Shops: if you click a shop link, you go to the shop's website; the shop's privacy policy applies there. Product photos and business logos are served only from our own storage (img.wikidetail.com); your browser therefore does not fetch them from the shop or the business.
- Google (AdSense, only once advertisements are switched on): with every ad Google receives your IP address and the page you are viewing; cookies only after your consent.
We do not pass your data to anyone else, unless the law requires us to.
Transfers outside the EU
Our database and our server are in the EU (Frankfurt and Amsterdam). The product photos are stored at Cloudflare in the European Union. The website itself is delivered by Vercel, which processes mainly in the United States; your IP address and the pages you request therefore pass through there. Where a party processes outside the European Economic Area (Vercel, and Cloudflare, Resend, Stripe and Sentry for support or metadata), this is done on the basis of the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023) or the European Commission's standard contractual clauses, which are included in the data processing agreements.
Your rights
You may access your data, have it corrected, deleted or transferred, have the processing restricted and object to it. Consent you have given can always be withdrawn. Do you have an account? Then on your account page under Settings you can download all your data, change your e-mail address and permanently delete your account yourself; a running Plus subscription stops immediately. After deletion we keep only a marker without name, e-mail address or tool data, to prevent abuse and duplicate deletion requests, and the invoice data that tax law requires us to keep for seven years, separated from your account. If your e-mail address was on the list for bounces and spam complaints at Resend, we remove it there within a month; until then we also keep a hash of that address for that purpose. Do you not have an account, or does it concern a message, a business profile or something else? E-mail support@wikidetail.com or use the contact form with the subject "Privacy request". If we are in doubt about who you are, we first ask for confirmation. We reply within one month. If you are not satisfied, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
Security and data breaches
We use encrypted connections, separate data per user in the database, restrict administrator access with two-step verification, store passwords only in encrypted form and keep photos in a protected storage without location data. A data breach that poses a risk to you is reported to the Dutch Data Protection Authority within 72 hours and, where the risk is high, to you as well.
Children
WikiDetail is not intended for children under 16. You may create an account from the age of 16.
Changes
We may amend this policy. The date at the top is the latest change. In the event of a material change we inform account holders by e-mail.