Privacy policy

oomm.ee is run by a private individual based in Estonia, acting as the data controller. There is no company behind the site.

For anything to do with your data — questions, requests, complaints — write to: info@oomm.ee

Only what running a website unavoidably involves, plus whatever you choose to send us:

• Server logs. Our host records the IP address, browser user agent, requested address and time of each request. This is needed to serve the site, keep it available and defend against abuse — the legal basis is legitimate interest (GDPR art. 6(1)(f)).
• Email you send us. If you write to the address above, we process your address and whatever the message contains, for as long as it takes to deal with it. The legal basis is our legitimate interest in answering the people who contact us.
• Image requests. Car photos and brand logos are served from our storage provider, so your browser connects to it directly and it sees your IP address in the same way our host does.

There are no accounts, no registration, no newsletter, no contact form and no advertising network. Nothing you do on the site — filters you set, cars you compare, quiz answers — is sent to us or stored on our servers.

The site uses Plausible Analytics for aggregate visitor statistics. It is cookieless, does not track people across sites and builds no profiles — we see page-level totals, not individuals. The legal basis is our legitimate interest in understanding which pages are useful.

When a page fails, Sentry receives a technical report about that one failure — the address of the page, the browser and operating system version, and where in our code the error occurred. Sending IP addresses, cookies and request headers is switched off, and no session or screen recording is used, so the report describes the failure rather than the person who ran into it. The legal basis is our legitimate interest in finding and fixing breakage. We use the provider's European data region, so the reports are held in the European Union.

The site sets no advertising or tracking cookies. Two things are stored, both purely functional:

• A NEXT_LOCALE cookie remembering which of the three languages you are reading in, so the site does not switch back on the next page.
• The list of cars you add to the comparison tray, kept in your browser's local storage. It never leaves your device and is never sent to us — clearing your browser data removes it.

Because neither is used for tracking or advertising, and both exist only to provide what you asked for, no cookie-consent banner is required. You can still delete them at any time through your browser settings.

The site depends on a few service providers, which process data on our behalf:

• Vercel — hosting and content delivery; handles the server logs described above.
• Supabase — the database holding the car catalogue, and the storage serving photos and logos. The catalogue itself contains no personal data.
• Plausible Analytics — cookieless visitor statistics; receives the addresses of the pages viewed, the external links and files clicked, and coarse technical details. EU-hosted.
• Sentry — technical error reports from the site, stored in its European data region.
• Our email provider — delivery and storage of messages sent to the address above.

Some of these providers may process data outside the European Economic Area. Where that happens it is covered by the European Commission's standard contractual clauses or an equivalent safeguard.

Server logs are kept only as long as our host retains them for operational and security purposes, typically a matter of weeks. Email correspondence is kept while it is still relevant and deleted when it is not. Nothing is kept indefinitely just in case.

Under the GDPR you can ask us to:

• tell you what personal data of yours we process, and give you a copy;
• correct it if it is wrong;
• delete it;
• restrict how it is used;
• stop processing that relies on legitimate interest, including on grounds specific to your situation;
• hand it over in a portable, machine-readable form.

In practice there is very little to hand over, since we keep no accounts. To exercise any of these, write to: info@oomm.ee

If you believe your data is being handled unlawfully, you can also complain to the Estonian supervisory authority: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

If what we process changes, this page is updated and the date at the top changes with it. There is no mailing list to notify you, so that date is the honest signal to check.