Who we are
4x4s.org is a research registry of classic 4×4 vehicles. It is one half of an independent, non-commercial enthusiast project run by an individual, not a company — the other half is 4x4s.org, a browser game that grew out of the registry. Neither is affiliated with any vehicle manufacturer, operator or museum. To reach us, use the contact form.
This policy covers 4x4s.org and its subdomains. The registry's pages are static: reading them creates no account and stores nothing about you on our side.
What we collect, and why
Visiting the site. Pages are served by Amazon CloudFront. We have not switched on CloudFront's access logging. The registry's pictures are served from difflocked.com, so loading a page also requests images from that domain, as any web request does.
Analytics. We use Google Analytics 4 to count visits and see which pages people read. It sets cookies and sends your IP address (truncated by Google) and browser details to Google. In the EU, EEA, UK and Switzerland it runs only after you allow it on the banner; everywhere else it runs by default and you can switch it off on the cookies page.
Suggestions and corrections. What you send through Suggest a vehicle or Submit a correction on a record — the message, and the name and email address you choose to give — is stored on our review list and emailed to us through Amazon SES, so we can check it against sources and reply. The API that receives it keeps operational logs (which can include your IP address) for one month.
Nothing else. The registry has no accounts, no comments and no tracking of what you read beyond analytics.
Legal basis
For visitors in the UK and EU: operational logs and abuse prevention rely on our legitimate interest in running the site securely; the suggestion and correction forms are processed because you asked us to (performance of a contract, or steps at your request); analytics runs on your consent where the law requires it and on legitimate interest elsewhere, with an opt-out.
Who else sees it
The site runs on Amazon Web Services (CloudFront, S3, Lambda, DynamoDB, SES) in AWS's US East (N. Virginia) region. Google receives analytics data when you have allowed it. Nobody else receives your data; we do not sell it or use it for advertising.
How long we keep it
API logs: one month. Analytics: Google Analytics retains event data for 14 months. Suggestions and corrections: until they have been acted on and for a reasonable time afterwards as the record of what changed and why.
Your rights and data requests
Wherever you live, you can ask us to tell you what we hold about you, correct it, export it, or delete it — and to stop analytics at any time. Send the request through the contact form from the email address you gave with the submission, and we will act within a month.
If you are in the UK or EU you also have the right to object to processing based on legitimate interest and to complain to your data-protection authority (in the UK, the Information Commissioner's Office).
Children
The site is not directed at children under 13. If you believe a child has given us personal data, contact us and we will delete it.
Changes
When this policy changes in substance the date at the top moves and the change is noted in the project's source history.
Privacy policy · Cookies · Terms of use · FAQ