Privacy policy

Allir Bílar (allirbilar.is) is a small, independently run website that collects public car listings in Iceland and shows them with price estimates. Allir Bílar is responsible for the personal data described here. You can reach us through the contact page.

Listings on the site are copied from public listings on Icelandic dealer and sales sites, among them Bílasölur.is, Bílaland, Hekla, Brimborg and Íslandsbílar, and from private sellers' listings on Facebook Marketplace, Bland.is and Auto.is, and from vehicle auctions on Bilauppbod.is. We keep the details of the car (such as make, model, year, mileage, price, registration number, description and photos) and a link to the original listing. We do not keep the seller's name or contact details as such, but a description is kept as the seller wrote it. Private sellers' listings are shown without the description, and we ask search engines not to index their pages. If you are the seller and want a listing removed, contact us.

Only if you accept cookies in the cookie banner, we record the following in our own database, to see how the site is used and which cars people search for and open. We do not sell it or use it for advertising.

You can use the site without an account. If you sign up, with an email address and password or with Google, your email address and sign-in details are stored by Supabase, which runs our database and sign-in. Signing in with Google also gives us the name, email address and profile picture of your Google account. Listings and searches you save are stored with your account so you can find them again.

We keep your account and saved items until you remove them or ask us to delete your account. To delete your account, contact us.

Page-view, search and click records are deleted once they are 14 months old, by a job that runs every night. Your account and saved items are kept as described above.

The site uses:

We use Google Analytics to see how the site is used. It loads only if you accept cookies. If you reject them, or do not answer, it does not load and Google receives nothing from this site through it. Even when you accept, we tell Google not to use the data for advertising.

We also count visits with Vercel Web Analytics, for every visitor, whether or not you accept cookies. It sets no cookie and stores nothing in your browser. Vercel receives the address of each page you open (without the search filters in it), the page you came from as your browser reports it, your browser, operating system, type of device and country, and a few actions on the site: searches and price checks (make and model), clicks on links that open a listing on another site (where the listing is from and the kind of page you were on), saving a listing or a search, signing up, your answer to the cookie banner and switching language. Your IP address is used only to work out the country and to tell visits apart within a day, and is not stored. Vercel keeps the counts for 12 months. If your browser sends the Global Privacy Control signal, nothing is sent to Vercel; you can also object to this counting through the contact page. It rests on our legitimate interest in knowing how many people use the site and what they do on it (art. 6(1)(f) GDPR), not on consent, because it collects nothing that identifies you.

The site shows no ads. If that changes, we will update this policy first.

We use these providers. Some of them may process data outside the EEA, under their own data protection terms:

Some photos of Facebook listings load straight from Facebook's servers, not ours. Facebook then sees your IP address and browser, as any site you load something from does.

Account data is processed to perform our agreement with you: the account you asked for (art. 6(1)(b) GDPR). The page-view, search and click records in our own database, and Google Analytics, are based on your consent (art. 6(1)(a) GDPR), which you give by clicking "Accept" in the cookie banner.

Under the Icelandic Data Protection Act (no. 90/2018) and the GDPR you can ask to see, correct or delete your personal data, object to or restrict how it is used, and get a copy of it. You can withdraw your consent at any time with "Cookie settings" at the bottom of every page: the cookie banner comes back, and nothing is recorded until you accept again. Google Analytics cookies already set stay in your browser, unused, until you delete them there. To use your rights, contact us.

You can also complain to Persónuvernd, the Icelandic Data Protection Authority (personuvernd.is).

The site is not meant for children, and we do not knowingly create accounts for anyone under 13.

If we change this policy we update this page and the date at the top.