BIMMERPOST Privacy Notice
Effective Date: July 26, 2026
Last Updated: July 26, 2026
BIMMERPOST knows that you care how information about you is used and shared. We appreciate your trust and are committed to protecting your privacy carefully and sensibly. By visiting BIMMERPOST, you are accepting the practices described in this Privacy Notice.
The term BIMMERPOST refers to BIMMERPOST.com and all related domains referred to as "The Site" in our Terms of Service.
1. Information We Collect
The information provided to BIMMERPOST is limited in scope and primarily provided directly by you.
Information You Give Us
When you register for an account, we store your username, e-mail address, IP address, birthday (to verify age requirements), registration date, social media contact information (if provided), and details you voluntarily add to your profile such as your vehicle or location. Your password is cryptographically hashed; we cannot retrieve your raw password.
Automated Security & Connection Data (Guests & Members)
To maintain the security of your connection and prevent abuse, we process your IP address and browser User-Agent for the duration of your session. This transient session data is automatically purged from our active databases after 60 minutes of inactivity.
Mobile App & Push Notifications
If you use our mobile application and opt-in to notifications, we collect unique device tokens (FCM Tokens and APNs Tokens). This allows us to deliver push notifications regarding your account updates, private messages, or subscribed threads. We share this data securely with our push service providers, Google Firebase and Apple Inc. (APNs), who process it strictly on our behalf for the sole purpose of message delivery.
2. Public Communities and User-Generated Content
You may choose to publicly disclose personal information when contributing content (articles, blogs, reviews), communicating in our forums, creating user profiles, or posting images. Information you voluntarily disclose in these public areas is unencrypted and public. There can be no expectation of privacy or confidentiality for data posted in public threads. We strongly recommend against sharing sensitive personal information that could directly identify you or others.
3. Strictly Necessary Cookies and Local Storage
For our core community features, we believe in a fast, clean browsing experience. The forum software itself does not use tracking cookies, marketing cookies, or third-party behavioral profiling pixels. Because we only use technologies strictly necessary for the site to function securely, you will not see a cookie consent banner triggered by our native systems. However, because we utilize third-party advertising to support the site, you may encounter a Consent Management Platform (CMP) banner depending on your region and the specific pages you visit (see Section 4).
Below is a transparent overview of the technical data we store on your device to keep your account secure and save your preferences:
| Cookie / Key Name | Purpose & Functionality | Data Stored | Expiry / Storage Type |
|---|---|---|---|
| csrf | Security. Prevents malicious cross-site attacks by verifying forms were submitted directly by you. | A random, unique session identifier. | End of Session (Cookie) |
| human_verify | Security. Distinguishes between human users and automated bots to protect our servers. | A signed cryptographic timestamp and hashed network prefix. | Dynamic (Expires automatically based on active security parameters) |
| remember_selector remember_token |
Authentication. Automatically logs you back in when your session expires (only set if you check "Remember Me"). | Random cryptographic lookup tokens (hashed on the server). | Up to 1,200 Days or until manual Logout (Cookie) |
| age_gate_failed | Compliance. Remembers if you failed the age verification requirement to prevent immediate re-attempts. | A simple numeric flag (e.g., "1"). | 24 Hours (Cookie) |
| mp_view_density hide_pinned_* hide_subforums_* theme-pref |
User Interface. Remembers your preferred forum layout, such as compact view, hidden sections, and Dark/Light mode. | Simple text strings representing UI choices (e.g., "compact" or "dark"). | 1 Year to Persistent (Cookie & Local Storage) |
| mp_draft_* | Functionality. Temporarily saves unfinished post and message drafts locally on your device to prevent data loss. | The raw text or HTML of your unsubmitted forum posts or messages. | Until post is submitted (Local Storage) |
4. Third-Party Advertising
We use third-party advertising companies, including Google (AdSense / Ad Manager), to serve ads on our website. This helps fund the operation of the site. You can learn more about how Google processes your data by reviewing Google's Privacy & Terms.
How Advertising Cookies Work
Google and its advertising partners use cookies, web beacons, and local storage to serve ads based on your prior visits to our website or other websites on the internet. These technologies allow them to collect non-personally identifiable data such as your IP address, browser type, and interaction with ads.
- Personalized Ads: Google uses advertising cookies to enable it and its partners to serve personalized ads to you based on your browsing history.
- Non-Personalized Ads: Even if ads are not personalized, cookies are still used for frequency capping, aggregated ad reporting, and to combat fraud and abuse.
Your Consent and Opt-Out Choices
When you visit our homepage from applicable regions (such as the EEA or UK), you will be presented with a Consent Management Platform (CMP) banner allowing you to accept or decline the use of advertising cookies.
Regardless of your region, you can opt out of personalized advertising by visiting Google's Ads Settings. Alternatively, you can opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info.
5. How We Share Information
Information security is important to us. We do not sell, rent, or trade your personal information to third parties. We only share information under the following limited circumstances:
- Service Providers: We use Google Firebase (FCM) and Apple Inc. (APNs) strictly for the delivery of mobile push notifications to Android and iOS devices. (Google Privacy Policy | Apple Privacy Policy)
- Protection of BIMMERPOST and Others: We release account and other personal information when we believe release is appropriate to comply with the law, enforce our Terms of Service, or protect the rights, property, or safety of BIMMERPOST, our users, or others.
- Business Transfers: If BIMMERPOST or its business units are acquired or sold, user information is generally transferred as a business asset, subject to the promises made in this Privacy Notice.
6. Security, Data Retention & Breach Notification
We work to protect the security of your registration information by encrypting your passwords with modern cryptographic algorithms. It is important for you to protect against unauthorized access to your password and your devices.
Data Retention
Account data (such as your username, email, and preferences) and user-generated content (such as forum posts) are retained indefinitely to maintain the integrity and flow of forum discussions, or until you request account deletion. For security purposes, we log failed login and password reset attempts (including IP addresses) to prevent brute-force attacks; this strike data is automatically purged after 15 minutes. General session data (IP and User Agent) used to authenticate your active connection is automatically wiped from our systems after 60 minutes of inactivity.
Data Breach Protocol
In the event of a security breach that compromises your personal, identifying data, we will notify affected users via the email address on file and post a notice on the site within 72 hours of discovering the breach, in compliance with applicable laws.
7. Children's Privacy
BIMMERPOST is not intended for use by children under the age of 13. If you are under this age, our age-gate will prevent you from registering, and you may not submit any personal information to us.
8. California Privacy Rights (CCPA / CPRA)
If you reside in California, you have the right to request access to the specific pieces of personal information we have collected about you, the right to request deletion of your data, and the right to correct inaccuracies.
Except for programmatic advertising displayed on our website, we do not sell or share your personal information with third parties for cross-context behavioral advertising. You may opt out of advertising data sharing by utilizing the "Do Not Sell or Share My Personal Information" link provided on those specific pages, or by utilizing a Global Privacy Control (GPC) signal in your browser.
Exercising Your Rights: Registered members can view, download, or request deletion of their account profile data directly through our Personal Data Portal. Unregistered guests or users who cannot access an account may submit a data request by emailing bimmerpost.com@gmail.com. Please note that transient guest data (such as temporary IP logs used for site security) is automatically deleted after 60 minutes of inactivity.
For residents under 18: You may request and obtain the removal of content or information you have publicly posted by emailing us with the exact URLs of the content you wish to have removed.
Do Not Track (DNT) Signals: California law requires us to let you know how we respond to web browser Do Not Track (DNT) signals. Because there is not yet a common industry standard for DNT, our site does not currently respond to traditional DNT signals. However, as noted above, we do honor modern Global Privacy Control (GPC) signals where applicable.
9. European Union Privacy Rights (GDPR)
For residents of the European Economic Area (EEA) and the UK, your data is processed under the legal bases of legitimate interest (e.g., site security and fraud prevention), contract performance (e.g., providing your requested forum account), and consent (e.g., "Remember Me" login tracking).
You have the right to: access your personal information, request correction or erasure, object to or restrict processing, and request data portability.
Exercising Your Rights: Registered members can seamlessly exercise these rights using our Personal Data Portal. Unregistered guests may contact us at bimmerpost.com@gmail.com. Because guest session data (IP/User Agent) is automatically destroyed after 60 minutes, no persistent profile exists for non-registered users. If you believe we have not complied with data protection laws, you have the right to lodge a complaint with your local supervisory authority.
10. International Data Transfers
We are headquartered in the United States. Our sites and services are hosted in the U.S. By using our sites or providing us with your information, you acknowledge and consent to the processing, transfer, and storage of your information in the United States, where privacy laws may differ from those in your country of residence.
11. Conditions of Use and Revisions
If you choose to visit BIMMERPOST, your visit and any dispute over privacy is subject to this Notice and our Terms of Service. We may occasionally email periodic reminders of our notices, but you should check our website frequently to see recent changes. We will never materially change our policies to make them less protective of customer information collected in the past without the consent of affected customers.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Notice or how we handle your personal information, please contact us at:
Email: bimmerpost.com@gmail.com