Privacy
Short version: we keep anonymous stats. Never your photo, your raw VIN or your IP address.
VIN lookups
Your browser sends the VIN to NHTSA vPIC (a US government service) to decode the basics. NHTSA’s own privacy policy applies to that request.
After a score shows, we log one anonymous record: a hashed VIN plus vehicle attributes (model, year, drive, computer estimate and its confidence, battery type, FSD status, a mileage range such as 25-50k, the score, and whether it came from a VIN or a photo). The VIN is turned into a salted SHA-256 hash on our server and then discarded. We never store the raw VIN, your IP address, your user agent or any photo. The hash only lets us count repeat lookups of the same car.
Photos
Photos you upload are sent to Cloudflare Workers AI to read the text on screen, then discarded. We don’t store them. Before upload, your browser shrinks the photo; the preview thumbnail stays on your device.
Rate limiting
To stop abuse we count requests per visitor using a salted hash of your IP address (for IPv6, the /64 network). Each counter covers a 10-minute window, then expires and is purged. The IP itself is never stored.
Hosting
The site runs on Cloudflare Pages. Cloudflare processes requests, including IP addresses, to deliver and protect the site, under its own privacy policy.
Cookies and storage
Visitors get no cookies. We don’t use localStorage, sessionStorage, analytics, ads or trackers. The only cookie, vl_admin, is an HttpOnly sign-in cookie for the site operator’s private stats page. Visitors never receive it.
We don’t sell data
We don’t sell or share personal data. We have none to sell.
Contact
Contact details coming soon.