Privacy policy

Last updated: November 11, 2026

Information about visitors

CarFlawIndex does not require an account. Our hosting and content delivery providers (including Cloudflare) process standard technical data such as IP address, browser type and pages requested to deliver and protect the site.

Server logs

Our server keeps access logs to operate the site and protect it from abuse: IP address, browser user agent, page requested (including any search terms or VIN in the address), response status and time. Logs are rotated daily and deleted after 14 days. To limit automated abuse, search and VIN requests are counted per IP address in memory for one minute; these counts are not stored.

VIN check

When you use the VIN check, the VIN is sent to NHTSA's public vPIC service to decode it. We do not store the VIN in our database; the decoded result is kept in memory for up to one day so repeated checks are fast. A VIN on its own does not identify a person.

Analytics

We may use Google Analytics (through Google Tag Manager) to understand how the site is used. Google Analytics uses first-party cookies such as _ga to tell visits apart. We use these reports only in aggregate. You can block cookies in your browser or install the Google Analytics opt-out add-on.

Advertising and cookies

We may show ads through Google AdSense. When ads are enabled, Google and its partners may use cookies to show ads based on your visits to this and other websites. You can opt out of personalized advertising at Google Ads Settings. Where required by law, we will ask for your consent first.

Information in the data

Complaint records are public NHTSA data written by vehicle owners. We do not store complainants' cities, VINs, dealer details or names, and we remove email addresses, phone numbers and full VINs from complaint text before showing short excerpts.

Children

CarFlawIndex is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Your state privacy rights

Depending on where you live, for example in California, you may have the right to know, access, correct or delete personal information we hold about you, and to opt out of the sale or sharing of personal information or targeted advertising. We do not sell personal information.

Contact

For privacy questions email [email protected]. We usually reply within 2–3 business days.