Last updated: 2026-08-29
This policy explains what YourVin.com ("we", "us", "the site") collects when you use it, why, and what you can do about it. We have tried to write it in plain language rather than legalese.
1. The short version
- We do not ask you to create an account and we do not want your personal details.
- VINs you decode are sent from your browser to the NHTSA public API. We do not store them on our servers.
- We use analytics and advertising, both of which set cookies. In regions that require consent, nothing non-essential is set until you agree.
- Your recently checked VINs are kept in your own browser storage and never transmitted to us.
2. Information we collect
2.1 Information you provide
The only thing you type into the site is a vehicle identification number. It is passed straight from your browser to the NHTSA vPIC and recall endpoints in order to produce your result. We do not log it, associate it with you or retain it. If you email support, we hold that message and your email address for as long as needed to deal with the enquiry.
2.2 Information collected automatically
Like almost every website, our hosting provider records standard technical data when a page is served: IP address, user agent, referring page, timestamp and the resource requested. This is used for security, abuse prevention and aggregate traffic measurement.
2.3 Information stored in your browser
The decoder saves your recently checked VINs in your browser's local storage so they can be listed for quick access. That data stays on your device, is never sent to us, and is cleared when you use the "clear history" control or clear your browser data.
3. Cookies and similar technologies
We use three categories:
- Strictly necessary. Required for the site to function and to remember your consent choice. These are always set.
- Analytics. Google Analytics 4, used to understand aggregate traffic, which pages are read and where visitors arrive from. IP addresses are anonymised. We do not use analytics to identify individuals.
- Advertising. The site is supported by third party advertising, including Google AdSense. Ad networks may set cookies or use similar technologies to serve, cap and measure advertising, and, where you have consented, to personalise it.
In the European Economic Area, the United Kingdom, Switzerland and other consent-required regions, we operate Google Consent Mode. Analytics and advertising storage are denied by default and only enabled if you accept. You can change your choice at any time by clearing this site's cookies and reloading the page.
4. Advertising and third parties
Third party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to our site or other sites. You can opt out of personalised advertising through Google's Ads Settings, and you can opt out of some third party vendors' use of cookies for personalised advertising through the industry opt-out pages operated by the Network Advertising Initiative, the Digital Advertising Alliance and Your Online Choices in Europe.
We do not control these third parties and their handling of data is governed by their own privacy policies.
5. Services we send data to
| Service | Purpose | What it receives |
|---|---|---|
| NHTSA vPIC and recalls API | Decoding and recall lookup | The VIN, sent by your browser |
| Google Analytics 4 | Aggregate traffic measurement | Page views, referrer, anonymised IP |
| Google AdSense | Advertising | Ad requests and cookie identifiers, subject to consent |
| Firebase Hosting | Serving the site | Standard web server logs |
| Google Fonts | Typefaces | Font requests from your browser |
6. Legal bases (EEA and UK visitors)
We rely on legitimate interests for serving and securing the site and for aggregate, non-identifying measurement. We rely on consent for analytics and advertising cookies, which you give or withhold through the consent banner. Where we correspond with you by email, we rely on legitimate interests in answering your enquiry.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or port your personal data, to object to or restrict processing, to withdraw consent at any time, and to lodge a complaint with a supervisory authority. California residents have rights under the CCPA and CPRA, including the right to know, delete and opt out of the "sale" or "sharing" of personal information. We do not sell personal information for money.
To exercise any of these, write to info.litelabs@gmail.com. Because we do not hold accounts, the practical answer to most access requests is that we hold nothing beyond any email you have sent us.
8. Data retention
Server logs are retained by our hosting provider on their standard schedule. Analytics data is retained per the Google Analytics retention setting on the property. Support emails are kept while the enquiry is open and for a reasonable period afterwards.
9. Children
This site is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us and we will delete it.
10. International transfers
The site is served from global infrastructure and the third party services listed above may process data in the United States and elsewhere. Where required, those transfers rely on the appropriate safeguards published by the service providers concerned.
11. Security
The site is served over HTTPS. Because we do not hold accounts, payment details or vehicle records, there is very little about you here to compromise. No method of transmission over the internet is completely secure and we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy as the site changes. The date at the top always reflects the current version. Material changes will be noted on this page.
13. Contact
Questions about this policy, or any privacy request: info.litelabs@gmail.com.