Privacy
Effective July 2026 · Will It Car (willitcar.com)
The short version
You can use everything that matters here without an account. If you create one, we store your email and what you save. We don’t run ad trackers, we don’t sell data, and VINs you look up are never stored.
What we collect
- Without an account: standard server logs (IP, user agent) kept briefly for abuse prevention and debugging. VIN lookups are decoded via NHTSA’s public API and not written to our database. Recent searches live in your own browser’s storage, not on our servers.
- With an account: your email, display name, saved cars, alert preferences, and any ratings you write. Passwords are hashed (we never see them); magic-link sign-in stores no password at all.
- Emails: we send sign-in links, the recall alerts you asked for, and account security notices. Nothing else. Every alert email has a one-click unsubscribe.
What we don’t do
- No selling or sharing personal data with data brokers or advertisers.
- No third-party ad-tech or cross-site tracking pixels.
- No storing VINs or connecting them to you.
Cookies
One session cookie (httpOnly, secure) when you sign in. That’s it.
Third parties
The site runs on Cloudflare (hosting, database, email delivery). Vehicle data requests go to NHTSA’s public APIs. If you click a disclosed partner link, that site’s own privacy policy applies from there.
Your data, your call
Delete your account from the garage page — ratings, saves, and alerts go with it, permanently. For anything else: notify@willitcar.com.