Privacy Policy

• Vehicle Identification Number (VIN)— the 17-character identifier you submit so we can look up the vehicle’s history.
• Email address — required to send you the report and order updates.
• Payment confirmation — we never see or store your card details. We only receive a confirmation that payment succeeded.
• Approximate location — used solely to show prices in your local currency.
• Anonymous usage analytics — only if you accept analytics cookies.
• Ad attribution data — when you reach the site by clicking one of our ads, we record the click so we can later see which campaigns lead to a paid order. This data is a random label tied to a single click; it does not identify you.

We do not collect names, postal addresses, phone numbers, dates of birth, or any optional profile data. We do not build profiles about you across other sites and we do not use retargeting or social-media tracking.

• To run the VIN lookup and prepare your report.
• To deliver the resulting report to your email.
• To let you check the status of your order via a private link.
• To process your payment and issue refunds where applicable.
• To measure the effectiveness of our own advertising so we can spend our budget responsibly.
• To meet legal obligations such as keeping basic accounting records of paid transactions.

We do not sell or rent your data to anyone, and we do not use it for third-party advertising or audience profiling.

We share the minimum data necessary with trusted service providers that help us run VIN Story. Each is contractually bound to use that data only on our behalf:

• A payment provider, to process your purchase.
• An email delivery provider, to send your report and updates.
• Google Analytics, only if you accept analytics cookies, for aggregate usage statistics with all advertising features disabled.
• Google Ads, to confirm that a purchase came from one of our ads so we can measure campaign performance. Your email address is irreversibly hashed before it leaves our systems, and no other personal data is shared.

We do not transfer your data to anyone else, and we do not sell or rent it under any circumstances.

We keep your order details only as long as we need them — long enough to deliver your report, support any follow-up questions, and meet legal record-keeping obligations. Abandoned checkouts are removed shortly after they expire. Ad attribution data is kept for at most 90 days.

The report file itself is retained alongside your order so you can re-download it from your private order link if you misplace the original email. If you’d prefer it removed sooner, write to support@vinstory.co and we’ll delete it on request.

You can ask us at any time to confirm what data we hold about you, correct it, or delete it (subject to legal retention obligations). To exercise any of these rights, email support@vinstory.co from the address you used to place the order. We’ll respond within 30 days.

If you believe we’ve handled your data improperly, you also have the right to lodge a complaint with your local data protection authority.

We take reasonable steps to keep your data safe in transit and at rest. Payment processing is handled directly by an established third-party provider so your card details never reach our systems.

We split cookies into three buckets and ask for your consent before any non-essential cookie is set. You can change your mind at any time via the “Cookie settings” link in the footer.

• Strictly necessary — used to run the checkout session, remember your cookie preference, and attribute paid orders to the ad that brought you here. These are first-party only and do not require consent.
• Analytics (optional) — Google Analytics, with IP anonymisation and all advertising features disabled. Off by default; we ask before turning it on.
• Marketing (optional) — measurement cookies that let Google Ads confirm a purchase came from one of our ads. Off by default; we ask before turning it on. We do not use these cookies for retargeting or to follow you across other sites.

Withdrawing consent stops further data collection for that bucket immediately.

If we update this policy materially we’ll change the effective date above and, where the change affects you, notify you by email before it takes effect.