Independent search service
Privacy Policy
What the finder processes, where it goes, and what the application deliberately does not store.
Last updated August 24, 2026
Information we process
We process the VIN you submit, basic request and security information such as IP address, Cloudflare Turnstile validation data, and the public-web search query needed to perform the service.
If you optionally submit a current or previous vehicle-listing URL or a CARFAX history-report URL, we process that URL only as part of the lookup you initiate. The service does not monitor the VIN or continue searching in the background after the request finishes.
If you purchase, Stripe processes your payment details and may collect your email and other checkout information. We receive transaction status and limited purchase metadata; we do not receive your full card number.
How information is used
We use this information to validate requests, identify the vehicle, search for a public report link, create Checkout, deliver a paid result, prevent abuse, provide support, and understand basic service reliability.
Service providers
VIN decoding is sent to NHTSA vPIC. Depending on which integrations are configured, public-web queries may be sent to Brave Search and SearchAPI, and listing clues may be requested from Auto.dev or Visor. Public archive checks use the Internet Archive. JavaScript-heavy listing pages may be rendered through Cloudflare Browser Rendering. Request verification is handled by Cloudflare Turnstile and payments are handled by Stripe. Each provider processes data under its own privacy terms.
Storage and logs
We do not intentionally download or store copies of vehicle-history reports. When a match is found, the exact link may be held for up to seven days in a restricted Upstash cache to avoid repeating the same discovery work. The link and submitted VIN are also stored in restricted Stripe Checkout metadata so the paid result can be delivered without a separate user account.
Operational logs are designed to record anonymous events such as whether a lookup succeeded, how long it took, and how many search requests were used. They are not designed to log full VINs, report URLs, or Checkout Session URLs.
Retention and choices
Service-provider records are retained according to their settings and legal obligations. You can avoid submitting information by not using the lookup. To ask about a completed purchase or a privacy request, contact support.
Security and changes
We use reasonable technical measures to protect the service, but no internet transmission is guaranteed secure. We may update this policy as the service changes; the date above identifies the current version.