Privacy Policy
Last updated: 2026-10-10
Who we are
N1plates is an advertising platform for distinctive UAE car number plates, available at n1plates.com and as a mobile app. This policy explains what data we collect, why, what we do with it, and how you can delete it.
We are an advertising venue only. We are not a party to any sale, and we never hold money between a buyer and a seller.
What we collect
If you are a buyer: we ask you for nothing. Browsing needs no account, you are never asked to pay, and we ask for no personal data to view ads or contact a seller. Our website does, however, use the Meta Pixel, which records visits and some actions on the site for Meta — see “The Meta Pixel on our website” below.
If you are a seller and create an account, we collect:
- Your email address — the one you sign in with.
- The display name you choose.
- A WhatsApp number in international format — required to publish an ad, since it is the channel buyers use to reach you.
- Your emirate and Instagram handle — both optional.
- Your ad content: emirate, plate code, number, price, and an optional note.
- The ownership documents you upload with each ad: your Emirates ID (required) and, if you choose to add it, the plate ownership card (optional). We ask for them to keep fake ads off the platform; only the review team can open them, and buyers never see them.
- Payment records: the processor's transaction reference, amount, currency, status and date. Card numbers are handled by a licensed payment processor and never reach our servers.
We also record aggregate per-ad counters (view count and Buy-button taps). These are totals, not tied to any individual. Like any web server, IP addresses and browser details appear in short-lived technical logs used for security and abuse prevention.
The app stores your language, light/dark preference and signed-in state on your own device. That data never leaves the device and is erased when you uninstall the app.
What we do not collect
We do not collect your location, your contacts, or your photos or files (other than the ownership documents you choose to upload). The mobile app contains no third-party analytics or advertising SDKs and does not read your device's advertising identifier. The website uses one measurement tool, the Meta Pixel, described in its own section below; apart from it we do not track you across other apps or websites, and we never sell your data to anyone.
How we use it
- To publish your ad and let buyers reach you.
- To moderate ads before they go live, and to prevent fraud and duplicate listings.
- To collect the AED 50 ad fee and the AED 199 Diamond pass, and issue receipts.
- To send you notices about your own account: ad approved or rejected, ad expiring, and a weekly reminder for unsold ads. You can turn these off.
- To show you your own ad's statistics (views and interested buyers).
- To measure and improve our own ads on Facebook and Instagram, through the Meta Pixel on the website (see its section below).
The WhatsApp handoff
Tapping Buy opens WhatsApp with a prefilled message containing the plate details. From that moment the conversation is directly between you and the seller and is governed by WhatsApp's privacy policy, not this one. N1plates is not a party to it and cannot see its contents.
A seller's WhatsApp number never appears in browse pages or in the app's listing data; it is issued only at the moment you tap Buy.
The Meta Pixel on our website
Our website uses the Meta Pixel, a measurement tool from Meta Platforms, the company behind Facebook and Instagram, to measure and improve our own ads there: to learn which ads bring visitors, and to show our ads to people likely to be interested. It runs for every visitor to the site, on every page except the few listed below, without a separate consent step, which is why it is explained here in full, together with how to switch it off.
What Meta receives from our site:
- The pages you visit, with their full addresses. Some forms on the site work through the page address, so what you enter in them reaches Meta as part of the page you visited: the plate search and its filters, the plate you look up or ask for on the wanted-ads page, and the plate you design on the design page.
- Key actions: opening a plate's page, tapping Buy or a bundle's WhatsApp button, contacting the person behind a wanted ad, starting a payment, and a confirmed payment for an ad, its renewal or a wanted ad. They carry only the number of the ad concerned on our site, the emirate, the amount in dirhams (a fixed asking price, never a negotiable one, or our fee), and the kind of action.
- The technical data your browser sends with any request: IP address, browser and device type, the page you came from, and the time.
- Meta's cookie on our site (_fbp, plus _fbc if you arrived from one of our ads), which lets Meta recognise the same browser on later visits and lasts up to 90 days from your last visit. The pixel also keeps in your browser's storage (localStorage) a note of the last outside website that sent you to us, which it reports with each event, and the ad click id if you arrived from one of our ads. Our site keeps there the list of payments it has already reported, so that reloading a page does not report the same payment twice, and a short-lived marker in session storage (sessionStorage) so that moving between pages with and without the pixel never reloads a page more than once. If your browser allows it, the request to Meta also carries Meta's own cookies from facebook.com, which is how Meta can link a visit to a Facebook or Instagram account you may have.
What is never sent to Meta: your ownership documents, your name, phone or WhatsApp number, your email address, anything you type into the sign-in, profile or sell forms, or your payment details. The pixel never runs on the admin, sign-in, profile and account-deletion pages, on a paid design's download page, on any page whose address carries a sign-in or download code or something that looks like a phone number or email address, on a quick-sale result, or on the sell form when it is refilled with your plate and price after a payment does not go through. Moving to one of these pages from a page where the pixel runs loads it afresh, without the pixel, and the addresses of these pages are not passed to Meta as the page you came from.
Meta processes this data under its own terms and privacy policy (facebook.com/privacy/policy), including to measure and deliver ads; we see it only as aggregated reports in Meta's advertising tools. The mobile app itself does not include the Meta Pixel or any other Meta tool; website pages it opens in your browser (for example to create a design, or to pay for or renew an ad) are part of the website, and the pixel runs on them as described here.
How to switch it off:
- Turn on Global Privacy Control in your browser (available in browsers such as Firefox, Brave and DuckDuckGo, or through an extension). Our site then never loads the pixel for you and sends no event.
- Block third-party cookies or trackers in your browser settings, or use a content blocker; the site works fully without the pixel.
- Control how Meta uses this activity for ads in its own settings (Accounts Center → Ad preferences), where you can turn off ads based on your activity on its partners' websites.
How long we keep it
- Your account data: until you delete your account.
- Your ads: until you delete them, or delete your account.
- Ownership documents (Emirates ID, and the plate card if you added one): for as long as the ad they prove exists, deleted together with it, or as soon as you delete your account. Every time the review team opens one, it is logged.
- Payment records: five years, per UAE financial record-keeping requirements — but after you delete your account nothing in them links back to you.
- Technical server logs: a short period, for security purposes.
- Meta Pixel data: kept by Meta under its own policy; the _fbp and _fbc cookies stay in your browser for up to 90 days from your last visit, and the notes in its storage until you clear the site's data from your browser.
Deleting your account
You can delete your account at any time, in three ways:
- In the app: Settings → Delete account.
- On the web: Account → Delete account, or directly at n1plates.com/en/delete-account.
- By email to support.xx.plates@gmail.com from the address on your account.
Deleted immediately: your account, display name, email address, WhatsApp number, all of your ads, the reports filed about them, and the ownership documents you uploaded.
Retained but unlinked from you: payment records (amount, date, transaction reference) for five years as a legally required financial record, and the moderation log that documents decisions taken about other users. After deletion neither contains your name, email or number.
Deletion is permanent and cannot be undone. Buyers have no account in the first place, so there is nothing for them to delete.
Your rights
Under the UAE Personal Data Protection Law (Federal Decree-Law 45 of 2021) you have the right to access your data, correct it, delete it, restrict or object to its processing, withdraw consent, and receive a copy of it. To exercise any of these, email support.xx.plates@gmail.com and we will respond within 30 days.
Children
The service is intended for people aged 18 and over. We do not knowingly collect data from anyone younger, and we delete it if we learn that we have.
Security
All traffic is encrypted over HTTPS. Database access is governed by row-level security policies, so no seller can reach another seller's data. We do not store payment card details.
Changes to this policy
If we make a material change we update the date above and notify account holders by email.
Contact us
For any privacy question, or to exercise your rights: support.xx.plates@gmail.com