Privacy policy

Carolina Camper Vans is a marketplace for camper vans in North and South Carolina. Sellers pay a one-time fee to publish a listing. Buyers browse for free and contact sellers directly. We are not a party to any vehicle sale, we take no commission, and we never hold the money for one.

The site is owned and operated by 704MKT LLC, based in Charlotte, NC. On this page, we and us mean Carolina Camper Vans.

Anything on this page, or anything you want us to look up or delete, goes to hello@carolinacampervans.com. Our phone number is (704) 555-0142.

This depends entirely on what you do here, so it is split three ways. Most people only ever land in the first group.

If you are just browsing

You do not need an account to look at listings, and you do not need one to contact a seller. Our own code stores nothing about you while you browse, and it sets no cookie of its own until you sign in.

Two things happen regardless. The site is hosted by Vercel, which keeps standard web server logs of requests, and those logs include IP addresses and browser user agents. We have not built anything that reads, analyzes or exports them. Separately, each listing has a view counter, which is a single number stored on the listing. It records nothing about who did the viewing.

Google Analytics and the Meta Pixel also run on most pages. Those are covered in full under cookies and tracking.

If you send a seller a message

The contact form on a listing asks for four things: your name, your email address, your phone number, and your message.

We ask for a phone number so the seller can call you back, which is how most of these conversations actually go. It is required, and it needs at least ten digits.

All four are stored in our database, and all four are shown to the seller who owns that listing. Be clear-eyed about what that means: sending a message hands your name, email address and phone number to a private individual we have not vetted. Send it to sellers you genuinely want to hear from.

Your message also appears in our own admin area, which one person at 704MKT LLC can reach. We look at inquiries to catch spam and to see whether the marketplace is working.

If you happen to be signed in when you send it, we record your account id next to the message. If you are signed out, that field stays empty and nothing links the message to any other visit.

If you sign in and list a van

Sign-in is Google only. There is no password to create here, and we never see your Google password. When you sign in, Google tells us your name, your email address, whether Google has verified that address, and a link to your Google profile picture. We store those, together with the access tokens Google issues so the session can be refreshed.

Each sign-in also writes a session record holding a session token, an expiry date, and the IP address and browser user agent the session was created from. Sessions last 30 days.

The first time you start a listing we create a seller profile from that Google information: your display name, your email address, and the link to your profile picture.

Then there is the listing itself. What you type into the listing form, we store:

• Vehicle details. Year, make, model, trim, builder, mileage, drivetrain, fuel, transmission, dimensions, sleeping and seating capacity, colors, solar, battery, water, fixtures and features.
• The price, the title status, and your written description.
• The VIN, if you enter one. This is optional, and if you enter it, it is printed on the public listing page.
• The city, state and ZIP code where the van is. The city and state appear on the listing. The ZIP code is stored but is not shown anywhere on the site.
• Photos. These upload from your browser straight to Cloudinary using a signature our server generates, so the image files never pass through our servers. We store the resulting URL and Cloudinary id.

Everything in a published listing is public, visible to anyone on the internet and reachable by search engines. What is public about you as a seller is narrower: your display name or business name, whether you are a private seller, dealer or builder, your city and state, and the month you joined. Your email address and phone number are not shown on the listing page.

Finally, the payment. When you pay the listing fee we store the amount charged, the price before any discount, the discount, the status of the charge, and the Stripe payment id. If you used a promo code we also record which code, on which listing, and how much it took off. Card numbers are entered into a form served by Stripe, inside an iframe on our checkout page. Card details never reach our servers and are never in our database.

We are a small business in North Carolina selling to people in the Carolinas, so this is the plain version rather than the European one.

Everything above is collected because the marketplace does not function without it. A listing needs vehicle details to be a listing. A buyer inquiry needs a way for the seller to reply. A payment needs an amount and a record that it happened. Sign-in needs an identity to attach your listings to. When you fill in a form here, you are asking us to do the thing that form does.

The analytics are different, and worth being straight about: they are there so we can tell whether our own advertising is worth the money. They are not necessary for you to buy or sell a van, and nothing on the site breaks if you block them.

We do not collect anything here in order to sell it, and we do not build advertising profiles of our own.

Ours

• A sign-in cookie, set by our authentication library once you sign in with Google. It lasts 30 days and refreshes about once a day while you keep using the site. Signing out ends it. Nothing is set before you sign in.
• A listing draft, kept in your browser local storage under the key ccv:listing-draft:v1. This is how a half-finished listing survives a closed tab. It stays on your device and only reaches us when you submit the listing. Submitting clears it.
• A short marker in browser session storage, under keys beginning ccv:analytics:, so that reloading the payment success page does not report a second purchase.

Google Analytics 4

GA4 records page views and sets its own cookies, whose names start with _ga. Google receives the usual things a measurement tool receives: the page you are on, the referring page, rough location from your IP address, and the device and browser you are using.

The Meta Pixel

The pixel records page views and sets a cookie called _fbp. If you have a Facebook or Instagram account, Meta may be able to connect a visit here to it. That is the pixel working as intended, and it is why we run it: it is how we find out which ads brought somebody who actually listed a van.

The events we report, exactly

Beyond page views, we report three moments to both Google and Meta:

• A seller reached the checkout page for a listing.
• A listing payment succeeded.
• A buyer sent an inquiry about a listing.

Each of those carries at most four values: a dollar amount, the currency, our internal listing id, and the Stripe payment id. That is the whole payload, enforced in one place in our code. No name, email address, phone number, VIN or message text is ever sent to Google or Meta.

Neither tag loads on the admin area or on the sign-in page. Both are switched on by an environment variable, so if the variable is unset the scripts are not on the page at all and no request is made to Google or Meta.

There is no consent banner

We do not have one. The analytics cookies described above are set as soon as you open a page that carries the tags, without asking you first. We would rather say so here than pretend otherwise.

If you do not want them, browser tracking protection, a content blocker, or a private window will all stop them, and nothing on this site depends on them working. We also do not currently detect Do Not Track or Global Privacy Control signals, so sending one has no effect here.

The seller you message

When you send an inquiry, that seller sees your name, your email address, your phone number and your message. This is the whole point of the form, and it is the single most consequential thing on this page. We have no control over what a seller does with those details afterwards.

Anyone on the internet

A published listing is a public web page. Its content, including the VIN if the seller entered one, can be read, copied, cached and indexed by anyone. Taking a listing down later does not undo that.

The companies that run parts of the site

These six are the complete list. We do not use any other vendor that touches this data.

Vercel

Hosts the site and runs the server code. Every request to carolinacampervans.com passes through Vercel, and Vercel keeps standard web server logs. Privacy policy

Neon

Runs our Postgres database. Everything in the lists above that we describe as stored is stored there. Privacy policy

Google

Two separate roles. Sign-in, where Google confirms who you are and gives us your name, email address and profile picture. And Google Analytics 4, which receives the page views and events described under cookies and tracking. Privacy policy · How Google uses data from sites that use its services

Stripe

Takes the listing fee. Your card details go straight from the Stripe form to Stripe. We also send Stripe the amount, a description that includes the listing title, our listing and seller ids, any promo code used, and the seller email address so Stripe can send the receipt. Privacy policy

Cloudinary

Stores and delivers listing photos. Photos go from your browser directly to Cloudinary, so the image files themselves never pass through our servers. Privacy policy

Meta

Receives the Meta Pixel events described under cookies and tracking. Privacy policy · Cookie policy

Nobody else

We do not sell or rent personal information. We have no relationships with data brokers, advertising networks beyond the two tags named above, lead resellers, or list buyers. We do not use anything collected here to train AI models, and we have not built anything that sends it to an AI service.

If a court order or a law requires us to hand something over, we will comply with it.

Honestly: mostly until you ask us to delete it. We have not built expiry rules.

• Listings stay live until the seller marks them sold or archives them. There is no expiry date and no relisting. A sold or archived listing stays in our database, and its photos stay at Cloudinary.
• Buyer inquiries are kept indefinitely. Nothing deletes them on a schedule.
• Payment records are kept as our record that a charge happened. Stripe keeps its own record under its own retention rules, and we cannot delete that one.
• Sessions expire after 30 days, or sooner if you sign out.
• Accounts and seller profiles stay until you ask us to remove them.

Email hello@carolinacampervans.com and say what you want. Write from the address on the account, or the one you used on the inquiry form, so we can match you to the right rows without asking you for more information than we already have.

There is no button for this. We have not built self-service export or deletion, so email is the only route, and a person handles it by hand. Expect a reply within a few business days and the work finished inside 30 days. If it is going to take longer than that we will tell you why.

What we can do:

• Tell you everything we hold about you, and send you a copy.
• Correct anything that is wrong.
• Delete your account, your seller profile, your listings and their photos, and any inquiries you sent.

What we cannot do:

• Remove Stripe's record of a payment, or Google's and Meta's copies of the analytics events already reported. Those live with them, under their policies.
• Retrieve a listing once it has been public. Search engines, archives and other people may already have copies, and we have no way to reach into those.
• Make a seller forget an inquiry you already sent them. Once the details reach a seller they are out of our hands.

Separately, you can revoke this site's access to your Google account at any time from your Google security settings. That stops you being able to sign in; it does not by itself delete anything we already hold.

This site is not directed at children, and it is not built for anyone under 13. We do not knowingly collect anything from them, and we have no feature that would have a reason to.

If you believe a child has given us something through a form here, email hello@carolinacampervans.com and we will delete it.

The California Consumer Privacy Act applies to businesses above certain size and revenue thresholds. We are new and small, and we do not believe we are over them yet. We are writing this section anyway, because the thresholds are about our size rather than about your information, and we would rather not change how we behave the day we cross one.

We have never sold personal information for money, and we have no intention of starting.

One thing deserves stating plainly rather than buried. The Meta Pixel sends event data to Meta, and under California's definitions that kind of transfer can count as "sharing" for cross-context behavioral advertising even though no money changes hands. We would rather flag that than argue about it. The events carry no name, email address, phone number or message, and you can stop them with a content blocker or a private window.

If California law does apply to us, now or later, it would give you the right to know what we hold, to get a copy, to have it corrected, to have it deleted, to opt out of sale or sharing, and not to be treated worse for asking. You can exercise all of that today by emailing us, and we will not treat you differently for it. See getting a copy, or getting it deleted.

What we do not have: a "Do Not Sell or Share My Personal Information" link, an automated opt-out, or support for Global Privacy Control signals. If we build them, this section will change.

A privacy policy is mostly a list of activities, so here is the list of the ones we are not engaged in. These are true today, not aspirations.

• No marketing email, no newsletter, no texts. We have no email or SMS provider connected at all. The only automated email anything here sends is the Stripe receipt for a listing fee, and Stripe sends that.
• No vehicle inspection or verification. We do not inspect, verify, appraise or road test anything listed here, and we do not check documents. Title status is whatever the seller selected in the form. As a result we hold no inspection reports, no VIN history reports, no credit checks and no financing applications, because none of those exist here.
• No handling of the vehicle money. The listing fee is the only thing we ever charge. We never see a buyer's payment details and we never hold funds for a vehicle sale.
• No selling or renting of personal information, and no data brokers.
• No AI training on your data.
• No advertising cookies other than Google Analytics and the Meta Pixel described above.

Specific things that are true of how this is built:

• Card details are handled by Stripe and never touch our servers or database.
• Photo uploads go straight to Cloudinary, signed by our server for one folder and one moment, so an upload cannot be redirected or replayed.
• There are no passwords to steal from us. Sign-in is Google, and identity is checked on every request rather than trusted from the browser.
• The admin area is restricted to a short list of email addresses, matched against the Google-verified address on the session.
• The database is not reachable from the browser. Every query runs on the server.

No system is perfectly secure and we are not going to claim ours is. If you find something wrong with this one, please tell us at hello@carolinacampervans.com before you tell anyone else.

When what we do changes, this page changes, and the date at the top changes with it. We do not keep an archive of previous versions today, so if you need a copy of the wording on a particular day, save one.

Two changes are already on the horizon and will show up here: rentals, and a real notification system for buyer inquiries.

Email is the fast route for anything about your data. Put "privacy" in the subject line and it gets read sooner.