Privacy at DNF

Magnitude Marketing & Design runs DNF. This page says what we collect, why, who sees it and how long we keep it. Questions or requests go to our Privacy Officer at support@damagednotfinished.com or PO BOX 99900 LR 140 231, RPO LONDON, KELOWNA BC V4T 0A3, Canada.

What we collect, and why

• Your account: your name, email address and password (stored scrambled), so you can sign in and we can send you account emails.
• Your buyer profile: your postal code (of a US ZIP code we keep only the first three digits), so sellers see roughly how far away you are, and a licence number if you choose to add one.
• Your listings: the VIN, the vehicle's details, its status brand, damage and condition, photos and any documents you upload. We remove location data from photos. Documents stay private: buyers don't see them.
• Offers and messages: what you offer and what you write, so the other person can answer. We hide phone numbers and email addresses in messages until contact details are released.
• Fees (only while fees apply): Stripe takes your card details. We see the card brand, its last four digits and its expiry date, never the full number.
• How the site is used: we count page views and actions on our own servers. Each record carries a code that groups one day's visits and changes every day, and we don't store your name, email address or IP address with it. In most places Google analytics and Meta advertising measurement start automatically on public pages, and a notice says so on your first visit. In Quebec, California, the European Union and European Economic Area (including the EU's outermost regions and Åland), the United Kingdom, Switzerland, Gibraltar, Jersey, Guernsey and the Isle of Man, and when we can't tell which country you're in (or, in Canada and the US, which province or state), they stay off until you allow them. Details below.

Cookies and optional analytics

Storage that runs the site

Four cookies support account and market features: dnf.session_token keeps you signed in (for up to 7 days at a time), and dnf.session_data holds a signed copy of your session for up to 5 minutes so pages load without checking our database each time; dnf.market remembers the market you chose or last browsed (Canada, the United States or Global) for a year; dnf.market-hint remembers the country your visit came from, so we can offer you that country's market, for a day, or for 30 days once you dismiss the offer. While you fill in a listing, your answers are also kept in that browser tab until you close it.

Campaign and ad click identifiers

When you arrive from an ad or a link with campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content) or an ad click identifier (Google's gclid, gbraid or wbraid, Meta's fbclid), we keep them in an HTTP-only cookie named __Host-dnf-attribution for up to 90 days, with the time you arrived. We do this only where advertising measurement is on for you: never with Global Privacy Control or Do Not Track, and never after you turn Marketing off (turning it off deletes this cookie). In Quebec, California, the EU and EEA (including the EU's outermost regions and Åland), the UK, Switzerland, Gibraltar, Jersey, Guernsey and the Isle of Man, and when we can't tell which country you're in (or, in Canada and the US, which province or state), we keep them only after you allow Marketing. If you then sign up, list a vehicle or make an offer, we copy them to your account, that listing or that offer, so we can tell which campaigns bring members, listings and offers. We delete them with your account.

Optional Google analytics

We use Google Tag Manager to load Google Analytics 4 on eligible public browsing pages. This helps us understand which parts of DNF people use and how they find us. In Quebec, California, the EU and EEA (including the EU's outermost regions and Åland), the UK, Switzerland, Gibraltar, Jersey, Guernsey and the Isle of Man, and when we can't tell which country you're in (or, in Canada and the US, which province or state), it stays off until you allow it. Elsewhere it starts automatically, and your first visit shows a notice with a one-click Turn off. You can change this at any time in Privacy settings in the footer (called Analytics settings when only Google analytics is available). A saved rejection, Global Privacy Control or Do Not Track keeps it from measuring anything. Our network provider still loads Google's tag code on every page from our own domain, and that code contacts Google's servers, which receive your IP address and browser information; it measures nothing until analytics is on for you. You can use DNF either way.

To decide whether optional measurement waits for you to allow it, we use the country and province or state that our hosting and network providers (Vercel and Cloudflare) work out from your IP address. We use it for this decision only, on each visit, and don't store it.

We send a broad page category, a fixed page title, your market (Global, Canada or the United States), and a broad source such as search or social. We also count a few actions, such as changing markets, browsing featured vehicles or opening a vehicle's offer or question options. We send the referring website's origin (its scheme and host), without its page path or query. On arrival, we also send validated marketing campaign tags and ad click identifiers to measure sources and campaigns; unrelated URL parameters are removed. Campaign tags must not contain personal information. We do not include your name, email address, phone number, account ID, VIN, listing ID, message text, form answers, search terms or full page address in those measurements. Google analytics stays off for staff accounts. It loads no tag on sign-in, account, staff, listing-editor, billing, private-link and not-found pages, but when you sign up, publish a listing, make or accept an offer, pay a DNF fee or mark a vehicle sold, our server reports that step to Google Analytics as described below. Buyers and sellers can be counted while browsing public pages unless they opt out.

When you sign up, publish a listing, make or accept an offer, pay a DNF fee or mark a vehicle sold, our server tells Google Analytics, using the analytics identifier already in your browser (the _ga cookie) and, for a fee, the fee's amount before tax and its currency. We never send the vehicle's price, your name, email address, phone number, account ID, VIN or messages. Without that cookie (for example after you turn analytics off) nothing is sent.

Loading Google's tags connects your browser to Google, which receives your IP address and information about your browser and device. Google says it uses IP addresses for purposes including security and approximate location, then discards raw IP addresses after use. Google's processing can take place in the United States and other countries. See how Google uses information from sites that use its services and Google Analytics' data safeguards.

When enabled, Google Analytics uses _ga and _ga_<stream> cookies to distinguish browsers and visits. We set their lifetime to 180 days from when they are first set, without extending it on every visit. These are browser identifiers, not your DNF account ID. We do not use advertising cookies, Google Signals, remarketing, advertising personalisation or user-provided data for this analytics setup.

We remember an explicit analytics choice for 180 days in your browser's local storage under dnf.analytics-consent. Automatic startup does not create a record saying you consented. Invalid, expired or unreadable preference records keep analytics off until you update the choice. Global Privacy Control or Do Not Track also keeps it off. A new browser with no saved choice uses the automatic default.

Open Privacy settings in the footer to change your choices. When only Google analytics is available, that control is called Analytics settings. Rejecting stops further collection and clears Google's analytics cookies on DNF. We reload the page after saving your rejection or clearing the earlier permission; that change also applies to other open DNF tabs. If browser storage blocks both steps, Google Analytics stays off on the current page and we show a storage error. Withdrawal does not by itself delete measurements Google has already received; contact our privacy officer about access or deletion requests. Browser cookie and preference lifetimes are separate from Google's server-side data retention.

Optional Meta advertising measurement

Marketing measurement follows the same rule: off until you allow it in Quebec, California, the EU and EEA (including the EU's outermost regions and Åland), the UK, Switzerland, Gibraltar, Jersey, Guernsey and the Isle of Man, and when we can't tell which country you're in (or, in Canada and the US, which province or state); elsewhere it starts automatically, the first-visit notice says so, and Turn off stops it. Google analytics and Meta marketing are separate choices in Privacy settings. We use Meta Pixel and Meta Conversions API to measure public-page visits and clicks on a vehicle's offer or question options. This helps us understand and improve DNF advertising on Meta services, such as Facebook and Instagram. An offer or question click is not a completed purchase or sale.

After rejection, or when your browser sends Global Privacy Control or Do Not Track, we send no marketing measurement requests to Meta. When enabled, a browser image request sends a page-view event to Meta. Our server also sends that page view, using the same event identifier so Meta can recognise the pair, and sends later public-page views, offer or question clicks, and, where advertising measurement is on for you, sign-ups, published listings, offers, accepted offers, paid DNF fees (the fee amount, never the vehicle price) and sales. Those events include a broad page category, your IP address and browser information. They do not include your name, email address, phone number, account ID, VIN, listing ID, messages, form answers, search terms, or full page address. We do not use automatic matching, automatic event detection, or account identifiers for this setup. Staff accounts are excluded; private and not-found pages load no Meta code.

Where advertising measurement is on for you, our server also sends Meta the same events, with your IP address and browser information when it happens on your own visit, and the Meta click identifier from your ad click or Meta's own browser identifier if your browser has one. For events that finish later (a moderator approving your listing, a fee payment Stripe confirms), we keep the analytics and Meta browser identifiers with your account, not your IP address.

Meta may connect these measurements with information it already holds, including information associated with your Meta account. Your browser's settings determine whether existing Meta cookies accompany its request. Where advertising measurement is on for you, we keep the ad click identifier you arrived with in the __Host-dnf-attribution cookie described above and send it to Meta as its click identifier. The only DNF cookie for this is the campaign cookie described above. Meta's processing may take place in the United States and other countries. See Meta's privacy policy for its use of information and your choices with Meta.

We keep marketing settings for 180 days using a signed, HTTP-only preference cookie named __Host-dnf-marketing-proof and a local-storage copy under dnf.marketing-consent. Automatic startup is marked as automatic, not as consent you supplied. Where you have to allow Marketing first, an automatic setting is never used: we delete it and ask you. Rejecting clears the cookie and keeps your rejection in local storage when available. These settings are what allows advertising measurement; without a valid one, nothing is kept or sent, and a rejection you make reaches our server, which then deletes the campaign and click identifiers and the measurement identifiers it keeps for your account. Collection requires matching, valid settings in both places. If settings expire, storage is unavailable, or the server cannot confirm them, marketing measurement stays off. Global Privacy Control and Do Not Track keep it off. A request to DNF checks these settings; that check sends nothing to Meta.

Turn Marketing off in Privacy settings, then save, or choose Reject optional to turn off both optional categories. Marketing withdrawal stops new browser measurements and cancels pending requests where possible, then asks our server to clear the server setting. We show an error if we cannot save the change; collection stays off on that page. Withdrawal cannot recall a request already sent, erase measurements Meta already received, or delete cookies on Meta's domains. Use Meta's own privacy controls for those cookies and information; you can also contact our privacy officer about your rights. Preference expiry does not establish how long Meta keeps its records.

Who sees what

• Anyone: a published listing's details, photos, the last 8 characters of the VIN and the area it's in, never the address. Public pages show only the VIN's last 8 characters.
• Signed-in buyers: buyers with a confirmed email and a postal or ZIP code on their profile can request the full VIN in private buyer details. After making an offer on that listing, they can also see the insurer's salvage deduction if the seller entered one. These details are unavailable if either account is suspended or being deleted, either member has blocked the other, or the listing has no public page. Uploaded documents stay private.
• After a seller accepts an offer and any required platform fees on both sides are paid: the buyer and seller get each other's contact details. Before contact details are released, neither side sees them.
• Our staff: what they need to review listings, handle reports and keep the site running.
• Our service providers, who store or send information for us: Vercel (hosting), Neon (database), Cloudflare (photos and files), Postmark (email), Stripe (payments, only while fees apply), Google (analytics) and Meta (advertising measurement), each with its own choice, and Google Ads (when we upload conversions from Google ad clicks: the click identifier, the kind of conversion, its time and, for a fee, its amount and currency). Some of them store information in the United States, where it can be subject to US law.

We do not exchange your information for payment. Optional Meta measurement shares limited information with an advertising platform unless you turn Marketing off; where the law requires us to ask first, it waits until you allow it. Depending on applicable law and Meta's use, this can be treated as sharing for advertising; you can reject it without losing access to DNF.

If you choose to sign in with Google or Microsoft, that company tells us your name, your email address and whether it has confirmed that address. We ask for nothing else: not your password there, your contacts, your mail, your files or your photo, and we don’t keep the keys that would let us act for you at Google or Microsoft. They will know you signed in to DNF, and their own privacy policies cover what they do with that: Google’s and Microsoft’s. To disconnect DNF, remove it from your Google account’s connections, your Microsoft account’s app permissions or, for a work or school account, My Apps. You can always use your email address and a password instead.

How long we keep it

When you delete your account, your listings come down at once and your personal information is deleted 30 days later. We keep fee and tax records for six years because tax law requires it, records of what you agreed to by email for three years, and moderation decisions for at least a year. Messages you sent stay in the other person's inbox, shown as from a deleted account, and contact details already shared after an accepted offer stay with that person. Backups are overwritten within 7 days.

Campaign tags and click identifiers: 90 days in your browser, and with your account, listing or offer until you delete your account.

Your choices

You can see, correct or delete your information, and turn off alert emails, from your account. To ask for a copy of what we hold, or to withdraw your consent to something, write to our privacy officer. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or in Quebec to the Commission d'accès à l'information.

If something goes wrong

If a breach of your information creates a real risk of significant harm, we'll tell you and the Privacy Commissioner as soon as we can.

United States residents

Your privacy rights in the US

Wherever you live in the US, you can ask us what personal information we hold about you, ask us to correct or delete it, and get a copy of it. To ask, email support@damagednotfinished.com. You can also correct or delete your information yourself from your account settings. We'll answer within 45 days. If we say no, you can ask us to reconsider, and we'll explain how to complain to your state's attorney general. We do not exchange personal information for payment or profile you in ways that have legal effects. Optional Meta advertising measurement is described above. In California it is off unless you allow it; elsewhere in the US it starts automatically and you can turn it off. You can turn it off in Privacy settings; we also honour Global Privacy Control and Do Not Track for optional measurement.

Privacy notice for California residents

What we collect and why:

• Account: your name, email address and password, to run your account.
• Listings: the vehicle's details, VIN, photos, documents and the postal or ZIP code you list from, to publish and moderate listings; documents stay private unless you choose to share them.
• Offers and messages: what you write and when, to pass offers and messages between buyer and seller and keep the marketplace safe.
• Searches and alerts: your saved searches and postal or ZIP code, to send the alerts you ask for.
• Device and usage data: your IP address and the pages you use, to keep the service secure and working, and the campaign tags and ad click identifiers you arrived with, where advertising measurement is on. When analytics is enabled, Google also receives browser and device information, a browser cookie identifier and the limited public-page measurements described above. When marketing measurement is enabled, Meta receives the limited advertising measurements, IP address and browser information described above. We do not include your name, email address, phone number or a VIN in either provider's event fields.

Account, listing, offer, message, search and alert records follow the retention rules above, including deletion of personal information 30 days after you close your account and the stated exceptions. Optional Google and Meta measurement follows the separate settings, storage and withdrawal rules above; contact our privacy officer about measurements already received. We do not exchange your personal information for payment. Meta advertising measurement can involve sharing for cross-context behavioral advertising under California law. In California, Marketing stays off unless you allow it, and you can turn it off again in Privacy settings or choose Reject optional. Global Privacy Control and Do Not Track also disable optional measurement. Read the full policy for your rights to know, delete and correct.

Last updated October 27, 2026.