Privacy policy

Last updated: October 3, 2026

CarWashPasses is operated by Polyglot LIMITED, 12/F & 15/F, Two Sky Parc, 51 Hung To Road, Kwun Tong, Hong Kong.

This policy explains what personal information CarWashPasses (“we”, “us”) collects when you visit carwashpasses.com or buy a car wash pass, how we use it, and the choices you have. We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

• Account details: the username and password you choose. Passwords are stored in scrambled (hashed) form.
• Contact details: your email address and phone number, entered at checkout.
• Pass details: the pass you bought, your wash day, renewal dates and your wash history (for example, which wash codes you opened).
• Payment details: payments are processed by Stripe. We never see or store your full card number; we only receive the payment status, the amount and the subscription details.
• Technical information: your IP address, browser and device type, the pages you visit and the ad or link that brought you here.

How we use it

• To create your account, activate your pass on your chosen day and give you your wash codes.
• To take payments, renew or cancel your subscription and send receipts and pass details by email.
• To answer your questions and give support.
• To keep the site secure and prevent fraud and abuse.
• To measure how our ads perform (for example, whether an ad click led to a purchase) and improve the site.

We do not sell your personal information.

Who we share it with

We share personal information only with service providers that help us run CarWashPasses, and only what they need:

• Stripe, for payments and subscription billing.
• Resend, to send our emails.
• Car wash membership partners, to the extent needed to activate and deliver your pass.
• Cloudflare and our hosting provider, to host the site and protect it from attacks.
• Telegram, which we use for internal notifications to our team about new orders.
• Google (Analytics and Ads), Microsoft (Clarity), Reddit and PropellerAds, to measure visits and ad results (see “Cookies and ads” below).

We are based in Hong Kong, and some of these providers store information outside Canada, mainly in the United States. Information stored outside Canada may be accessible to authorities under local law. We may also disclose information when the law requires it.

Cookies and ads

We use cookies and similar technologies:

• Essential cookies keep you logged in and protect forms. The site does not work without them.
• Analytics: Google Analytics tells us how visitors use the site, using pseudonymous identifiers. On our home and sign-up pages, Microsoft Clarity records how visitors move, scroll and tap so we can improve the pages; what you type into form fields is masked and not recorded.
• Ad measurement: Google Ads, the Reddit pixel and PropellerAds help us see which ads lead to visits and purchases. If you arrive from an ad, we keep the ad’s click identifier for up to 30 days and report a purchase back to that ad network.

You can block or delete cookies in your browser settings, use an ad blocker, or control ad personalization in your Google and Reddit account settings. You can opt out of Google Analytics with Google’s browser add-on. Microsoft explains how Clarity handles data in its privacy statement.

How long we keep it

We keep your account and pass information while you have an account with us. After that, we keep payment and transaction records only as long as the law requires (for example, Canadian tax rules), and delete or anonymize the rest.

How we protect it

We use encrypted connections (HTTPS), restricted access to our systems and reputable service providers. No method is completely secure, but we work to protect your information and will notify you and the Privacy Commissioner if a breach creates a real risk of significant harm.

Your choices and rights

You can ask to see the personal information we hold about you, correct it, or have your account deleted. You can also withdraw consent to optional uses, such as ad measurement, at any time. You can change your password and manage or cancel your subscription yourself after logging in.

For anything else, email [email protected] and we will reply within 30 days. You can also write to us at the address above.

If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Children

CarWashPasses is meant for drivers and is not directed at children. We do not knowingly collect information from anyone under 16.

Changes

If we change this policy, we will post the new version here and update the date above. For significant changes, we will also let members know by email.