Last updated: August 3, 2026
DiecastLog ("we," "our," "the site") is a collection-tracking site for diecast car collectors. This page explains what information we collect, why, how it's used, and the choices you have. We've tried to write it in plain language rather than dense legal boilerplate.
Account information. When you create an account, we collect a username and password. If you sign up through the public registration form, we also collect your email address, which we use to send your temporary password and, later, password reset links. Accounts created directly by an administrator may not have an email on file at all.
Profile information. Anything you choose to add to your profile — display name, bio, location, and a profile photo — is stored as you enter it. This is entirely optional.
Collection data. The cars you add — driver, year, scheme, brand, model, scale, purchase price, purchase location, purchase date, notes, estimated value, and any photos you upload — are stored so the site can function as intended. This is the core purpose of the service.
Messages. If you use the inbox feature to message another user, the message content is stored so both of you can see the conversation. We do not read, scan, or otherwise access the content of your messages as a matter of routine; message content is never included in our internal security logs (see below).
Technical and security information. Like most websites, we automatically log certain technical information for security purposes: IP address, browser/device information (user agent), timestamps of login attempts (successful and failed), and, separately, a general log of requests to pages that don't exist on the site (used to detect and block automated scanning/bot traffic). This information is used exclusively for account security and abuse prevention — detecting suspicious login activity, for example — and is not used for advertising or shared with advertisers. These logs are automatically deleted after 90 days.
Cookies. We use a single session cookie to keep you logged in. We do not use advertising or cross-site tracking cookies, and DiecastLog does not display ads.
Your collection, and separately your stats page, are private by default. You control this yourself, in Account settings:
Within a shared collection, you additionally choose, field by field, whether to reveal purchase price, purchase location, purchase date, current estimated value, and notes. Driver, year, scheme, model, and scale are always shown on a shared collection, since that's the point of sharing it. Your wishlist is never shared regardless of your other settings. Similarly, your stats page (if you choose to share it at all) has its own separate, independent controls over whether dollar totals, individual "leader" cards, the value trend chart, and category breakdowns are included.
We rely on a small number of outside services to run the site. Each only receives the information it needs to do its specific job:
We do not sell, rent, or share your personal information with advertisers or data brokers. We have no advertising on this site.
Your account and collection data are kept for as long as your account exists. Security and traffic logs (login attempts, scanning/bot detection) are automatically deleted after 90 days. If you delete a car, a photo, a message you sent, or your entire account, that data (and any associated photo files) is removed from our systems at that time — deleting your account also removes your entire collection and its photos, though it does not delete messages you've sent to other users, since those remain part of their conversation history.
Passwords are never stored in plain text — they're hashed using scrypt with a unique salt per password. The site is served entirely over HTTPS. We actively monitor for and automatically block IP addresses showing signs of automated scanning or brute-force login attempts.
DiecastLog is not directed at children, and we don't knowingly collect information from anyone under 13. If you believe a child has provided us with personal information, please contact us and we'll remove it.
If this policy changes in a meaningful way, we'll update the date at the top of this page. Continued use of the site after a change means you accept the updated policy.
Questions about this policy or your data? Reach out via the contact form.