Privacy Policy

1. Information We Collect

Information you provide directly:

• Email address and name (on account creation)
• Vehicle information (make, model, year, mileage, asking price, VIN)
• Scoring formula preferences from the quiz
• Feedback submissions

Information collected automatically:

• Page views and feature usage (via PostHog analytics)
• Basic device and browser information

Third-party data we retrieve on your behalf:

• NHTSA recall and complaint data (public API, keyed to VIN or make/model/year)
• NHTSA NCAP safety ratings (public API)

2. How We Use Your Information

• To provide the vehicle scoring and comparison service
• To save your vehicle list and scoring formulas across sessions
• To send transactional emails (email verification, password reset)
• To respond to feedback submissions
• To improve the Service based on aggregate usage patterns

3. Data Sharing

We do not sell your personal information. We share data only in these cases:

• Supabase — database and authentication provider (US-based, SOC 2 compliant)
• Resend — transactional email delivery
• PostHog — product analytics (anonymized usage data)
• Vercel — hosting and CDN (US-based)
• Legal requirements — if required by law or legal process

3b. Affiliate Partners

When you click affiliate or partner links on CarScorer, you are directed to third-party platforms — including our affiliate partners myAutoLoan (financing), Oedro (accessories & exterior parts), KSP Performance (suspension & performance parts), and Carla (car rental), as well as used-car marketplaces such as CarGurus, AutoTrader, Cars.com, and Edmunds. These platforms have their own privacy policies. CarScorer does not share your personal information with any of them.

4. Vehicle Data Privacy

Vehicle information you enter is stored in your private account and is never publicly shared. Public vehicle research pages at /vehicles/[slug] are built exclusively from NHTSA public data — they contain no information from user accounts.

5. Anonymized Pricing Data

When you enter an asking price for a vehicle, an anonymized data point (year, make, model, price) may be added to a community pricing dataset used to improve market comparison features. This record contains no personal information and cannot be linked back to you.

Anonymized pricing data you contribute cannot be individually identified or deleted, as it contains no personal information.

6. Data Retention

Your account data is retained until you delete your account. On account deletion, your profile, vehicles, and formula profiles are permanently and immediately deleted. Anonymized pricing contributions are retained (see section 5).

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data (Settings → Danger Zone)
• Export your vehicle data (Settings → Data Export)

To exercise rights not covered by the self-service tools above, contact us at help@carscorer.com.

8. Children

CarScorer is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us at help@carscorer.com.

9. Cookies and Local Storage

CarScorer uses cookies for authentication (Supabase session cookies). We use localStorage to persist UI preferences such as dismissed banners and quiz progress. No third-party tracking cookies are placed without your consent.

9b. Browser Extension

The CarScorer browser extension shows a reliability score on used-car listing pages (CarGurus, AutoTrader, Cars.com, Edmunds, and Craigslist). It works anonymously — no account or sign-in is required to use it.

• What it sends:when you view a listing, the extension sends only that vehicle's year, make, model, VIN, mileage, and asking price to the CarScorer scoring API to generate the score. Nothing else about the page or your browsing is sent.
• Your browsing stays private:the extension does not track your browsing history and does not read pages other than the car listing you are viewing. The listing's web address is only sent to CarScorer if you click “See full report,” so the report can link back to it.
• Local caching:recent scores are cached in your browser's local extension storage (for a few hours) so the same car loads instantly and to reduce network requests. This cache stays on your device.
• No accounts, no selling: the extension sets no cookies and requires no login, and CarScorer does not sell any of this data. Saving a car to your garage is optional and uses the same account flow described above.

10. Security

All data is transmitted over HTTPS. Database access uses row-level security enforced by Supabase — your data is inaccessible to other users at the database layer. We recommend using a strong, unique password for your account.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use after changes are posted constitutes acceptance of the updated policy.

12. Contact

Privacy questions: help@carscorer.com