Privacy Policy

Information we collect

We collect only what we need to run the service. Depending on how you use the site, this may include:

• VINs you enter. The 17-character Vehicle Identification Number you search, so we can show specifications and safety recalls. A VIN identifies a vehicle rather than a person, but it can sometimes be linked to a vehicle’s owner.
• Waitlist details. If you join the full-report waitlist: the name, email address and phone number you type in, plus the VIN page you were viewing and the language you had selected.
• Photos you attach (optional). A photo you add to a VIN check is resized and kept in your own browser for the current session only. It is not uploaded to our servers.
• Technical and usage data. Your IP address, browser and device type, the pages you visit and your approximate location, collected in our hosting provider’s logs and by Google Analytics.
• Preferences. Your chosen language and light/dark theme, stored in your browser.

How we use your information

• To decode VINs and show vehicle specifications and recall information.
• To contact you about the launch of full vehicle-history reports, if you joined the waitlist. We use your contact details for that purpose and for closely related updates about this service, and we do not sell them.
• To keep the site secure and prevent spam and abuse, including a bot check on forms.
• To understand how the site is used so we can improve it.
• To comply with legal obligations.

Who we share information with

We do not sell your personal information. We share it only with service providers that help us run the site, and only as needed:

• Vercel — hosts the website.
• Neon — hosts the database where waitlist details are stored.
• Google — Google Analytics (usage statistics) and Google Fonts (to display text).
• Cloudflare — Turnstile, the bot check shown on the waitlist form.
• NHTSA (the U.S. National Highway Traffic Safety Administration) — the VIN you search is sent from our server to its public vehicle database to retrieve specifications and recalls.

We may also disclose information if the law requires it or to protect our rights and our users.

Cookies and similar technologies

We use a small number of cookies and browser-storage items:

• Preferences (local storage) — remembers your language and theme.
• Photo session (session storage) — holds an attached photo until you close the tab.
• Analytics (Google Analytics) — cookies that tell us, in aggregate, how many people visit and which pages are used.
• Bot check (Cloudflare Turnstile) — loads only when you open the waitlist form and uses technical signals to tell people from bots.

You can block or delete cookies in your browser settings, or use a browser tool to opt out of Google Analytics. The site will still work, although some preferences may not be remembered.

Where your information is processed

Our hosting and database providers operate in the United States, so your information is processed outside your country of residence. We use reputable providers and use them only for the purposes described here.

How long we keep it

• Waitlist details — until we have told you about the full-report launch and then for up to 12 months, or until you ask us to delete them, whichever is sooner.
• Hosting logs and analytics — for the periods set by those providers.
• Photos — only for your current browser session.

Security

We use HTTPS on all pages, restrict the admin area with authentication, and store waitlist details in an access-controlled database. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

You can ask us to access, correct or delete the personal information we hold about you, to stop using it for a purpose such as the waitlist, or to withdraw a consent you gave. To make a request, contact us using the contact details on this website. We will respond within a reasonable time. You may also have the right to complain to your local data-protection authority.

We aim to handle personal data in line with applicable data-protection law, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

Children

This website is not directed at children under 18 and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. Continuing to use the site after an update means you accept the revised policy.

Contact us

Questions about this policy or your data? Contact us using the contact details on this website.