Privacy Policy
This policy explains how CarTrophy, its website and related application services handle information. The service is operated by LEBEDUSHKA, MCHJ XK (“we”), whose website is lebedushka.com.
Information you provide
CarTrophy stores your collection, vehicle photographs, selected vehicle details and progress. A guest account has a generated identifier. If you register, we also store your email address and a password hash. Social features use the profile information, posts, comments and relationships you choose to submit.
Photographs and permissions
The camera is used to take vehicle photographs. Gallery access is used when you choose an image to import. Uploaded images are processed to remove embedded image metadata. The original photograph and an edited version are separate assets. Photos remain private unless you choose to publish a finding. Review the visible background before publishing: metadata removal does not remove people, addresses or other details visible in the image.
Location
CarTrophy does not automatically record GPS location when taking a photograph. Nearby features use your device's region setting and, if you choose one, an approximate place you provide. To show collectors and finds near you, our server may also estimate the approximate country and city of your internet connection from its IP address, using our IP geolocation provider ip-api.com. We keep only the resulting country, city and city-level coordinates (rounded to about 10 km), update them at most once a day and delete them with your account. We do not keep the IP address used for this lookup, and we never show your location to other players. Public location information should not identify your exact position.
Before removing embedded image metadata, we may read an existing photo location and retain only coordinates rounded to about 10 km. If the photo has no location, we may suggest the approximate city of your internet connection. This city may differ from where the photo was taken. We do not request GPS access to capture a new location. Photo locations remain private unless you choose to include an approximate place when publishing a finding; you can turn this off before posting.
AI processing
When an AI provider is configured and you request identification or image editing, the relevant photograph and task instructions are sent to that provider to produce a result. Identification and edited images can contain mistakes. AI output does not replace the original photo. CarTrophy uses OpenAI for vehicle identification and image editing. We send the selected photograph and the instructions for your requested operation, not your account password or private collection history. API data handling is described in OpenAI’s API data controls. We disable response storage for identification requests; this does not mean the provider has zero retention for security and abuse monitoring.
App analytics and crash reports
The mobile application uses AppMetrica by Yandex and Google Analytics for Firebase to count installations and understand app usage; AppMetrica also helps us diagnose crashes. Reports may include app and device information, installation identifiers (such as the Firebase app instance ID), approximate location derived from the IP address, network information, app events and error diagnostics. We do not include your photographs, account password or email address in our custom analytics events. In these analytics tools, advertising identifier collection, ad personalization, location tracking and automatic revenue tracking are disabled. Advertising is described separately below. See AppMetrica service terms, Yandex privacy policy, Firebase privacy information and how Google uses information from apps that use its services.
Advertising
The free version of the mobile application shows ads: rewarded videos that you choose to watch to get extra cards, and occasional full-screen ads after you view a new card. CarTrophy Pro subscribers do not see ads.
Ads are delivered by AppLovin MAX, which offers each ad placement to advertising networks, including Google AdMob, and shows the winning ad. To deliver and measure ads, limit how often you see the same ad and prevent fraud, these providers receive information from your device: its advertising identifier, IP address and the approximate location derived from it, device model, operating system and language, the app and its version, and information about the ads shown and your interactions with them. We also give AppLovin a random CarTrophy account identifier so that AppLovin can confirm to our server that you finished a rewarded ad; we do not receive your advertising identifier.
In the European Economic Area, the United Kingdom and Switzerland, the app asks for your consent before ads can be personalized; you can change your choice at any time in Settings → Ad privacy choices. On iPhone, the device's advertising identifier is shared only if you allow tracking when the system asks. On Android, you can reset or delete your advertising ID in the device settings. See AppLovin's privacy policy and how Google uses information from apps that use its services.
Purchases and subscriptions
CarTrophy Pro is an optional subscription sold through Google Play and the App Store. Google and Apple process the payment; we do not receive your payment card or billing address. To activate Pro, the app sends our server the store's purchase record (a purchase token or transaction number), and our server checks it with Google or Apple. We store the product and the purchase, renewal, expiry, cancellation and refund status linked to your CarTrophy account, and keep these records as long as needed for your subscription, accounting, fraud prevention and legal obligations.
On iPhone, the app also reports to Ads Analytics, our own subscription analytics service operated by LEBEDUSHKA, which CarTrophy Pro plans it showed and what happened next, so that we can choose and test the plans we offer. For this the app sends a random identifier of the installation, your CarTrophy account identifier, the identifier for vendor that iOS gives our apps on your device, whether you allowed tracking, the device model, operating system version, language and time zone, which Pro screen was opened or closed, and the result of a purchase attempt (product, Apple transaction number, price and currency). This service does not receive your advertising identifier or your payment details.
Notifications
If you allow notifications on your device, the app registers a push token with our server. The token is a notification address for your device, issued by Google Firebase Cloud Messaging. We use it only to tell you when other collectors like or comment on your published finds or send you a friend request. A notification shows the other collector's name, the vehicle and the first words of the comment. Notifications are delivered through Firebase Cloud Messaging and, on iPhone, Apple Push Notification service. You can turn notifications off in your phone's settings at any time. We delete the token when you sign out, when the delivery service reports that it is no longer valid, and together with your account.
Technical information
Servers may process IP addresses, request times, response status and limited error information to deliver and protect the service, control abuse and diagnose failures. Authentication tokens protect access to private collections. This website does not currently load advertising or third-party analytics scripts.
Sharing and service providers
Hosting, network security and email providers process information necessary to operate the service. Cloudflare provides DNS and web traffic protection (privacy policy); Beget provides the support mailbox (provider website). ip-api.com receives the IP address of your connection to estimate your approximate location for nearby features (privacy policy). Information you explicitly publish can be visible to other users. We may also disclose information when required by law or necessary to address abuse or protect the service. AppLovin and the advertising networks it works with, including Google AdMob, deliver ads in the free version (see Advertising). Google Play and the App Store process subscription payments. Google Firebase Cloud Messaging and Apple Push Notification service deliver the notifications you allow.
Retention and deletion
Account and collection information is retained to provide the service. You can export supported account information and request account deletion in the application's settings. Removing the application from your phone does not by itself delete a server account. You can also contact us to request access, correction or deletion. Limited information may need to be retained for security or legal obligations; deletion from backup copies depends on the applicable backup lifecycle.
Security
We restrict access to private information and use authentication and appropriate transport protection for deployed services. No storage or transmission method can guarantee absolute security.
Children
CarTrophy is not intended for children under 13. If you believe a child has provided personal information, contact us so we can investigate and remove it where appropriate.
Changes and contact
We will update this page when our processing changes. For privacy questions, account requests or removal of published photographs, email [email protected]. Please provide the relevant account or page reference; do not send passwords.