Privacy policy
Last updated 29 August 2026. This explains what we hold about you, why, and how to make us get rid of it. It is short because we collect very little.
Who is responsible
facewrap.lol is run by a private individual in Buckinghamshire, England, who is the data controller for anything described here. We are not connected to Alpine, Renault or X Corp.
What we collect
- From your X account when you sign in: your X user ID, display name, handle and profile photo, plus your email address where X releases it. This is the identity that goes on the car and into the bid history, so it is public by design.
- An access token and refresh token from X, held so we can post on your behalf when you ask us to. These are stored encrypted and are never shown to anyone, including other bidders.
- Your bids: the amount, the time, and the fact you accepted the bidding terms.
- An optional email address you can give us for outbid and countdown alerts.
- Anonymous counts of how many people are on the site and how many have visited. No cookies for advertising, no third party trackers, no profiling.
Why we hold it
To run the auction and identify who is leading it, which is our contract with you, and to email you when you are outbid or when the countdown starts, which is your consent and you can withdraw it whenever you like. If you win, we keep your details to arrange the wrap and the payment, and to meet our record keeping obligations.
Who sees it
Your name, handle and photo appear publicly on this site while you are in the bid history, and on the car if you win. Everything else stays with us and our hosting and database provider, and our email provider, who process it on our instructions only. We never sell anything to anyone.
How long
Bid records stay for the duration of the auction and for six years afterwards, because the winning bid is a contract. Your X tokens are deleted as soon as you disconnect, and alert emails are deleted when you unsubscribe or when the auction ends.
Your rights
Under UK GDPR you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it. Message us on X and we will sort it, normally within a few days and always within a month. Revoking our access to your X account is instant and yours to do: X settings, then Connected accounts. If you think we have handled things badly you can complain to the Information Commissioner's Office at ico.org.uk.