Privacy policy

Your account: your email address, and nothing else. There are no passwords — we email a one-time code that expires after ten minutes.

Your profile: a name, area, short description and photo, if you add them. Your name and photo appear to buyers on your listings.

Your listings: the vehicle details and photos you upload, and your phone number. The phone number is published on the listing — that is how a buyer reaches you.

Listing activity: counts of views and contact taps per listing, so a seller can see how their advert is doing. We do not build a profile of the visitor.

If you photograph your Istimara to fill in a listing, the image is held in memory, sent to Amazon Bedrock to read the make, model, year and colour, and then discarded.

We do not store the image, the plate number, the owner name, or the QID and address printed on the card. None of it is returned to your browser and none of it enters our database.

The chassis number: We keep a keyed digest of it — not the number itself — so that adverts for the same car can be linked and its listing history on BuMotar shown. The digest cannot be turned back into the number, and is never shown to anyone.

It is used only to show how many times a car has been advertised here and what was stated each time. It is not shared with anyone.

One cookie, qm_session, which keeps you signed in for thirty days. It is httpOnly, so page scripts cannot read it.

There is no Google Analytics, no Facebook pixel, and no third-party tracker of any kind — which is why you are not asked to accept cookies.

The site runs on Amazon Web Services in the us-east-2 region in the United States. Your data is therefore processed outside Qatar.

Uploaded images are kept in a private storage bucket that blocks public access, and are served through the site itself rather than from a permanent public URL.

A free listing runs for 7 days and then lapses, though its page stays reachable so old links do not break.

Account data is kept until you ask us to delete it. Sign-in codes expire after ten minutes and can be used once.

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and listings. Write to us and say which.

You can edit or remove your own listings yourself: sign in and open My cars.

Contact us about privacy →

If how we handle data changes, we update this page and change the date at the top.