Privacy Policy

General

The GetCarCode website and app ("the service") respect your privacy. This policy explains what information is collected, who processes it and how long it is kept. No registration or personal details are required.

Information we collect

Data you enter: fault codes, licence plate numbers, VINs and vehicle details. These are used to perform the search you requested and are not stored as a personal profile.

Technical data: our hosting provider automatically logs IP address, browser and device type and pages viewed, to run the service, keep it secure and produce aggregate statistics.

What is stored on your device

The site uses your browser's local storage (localStorage) only for preferences such as accessibility settings and, for signed-in administrators, a login token. The site itself sets no advertising cookies. The third-party services listed below (Cloudflare Turnstile, Google AdSense, YouTube and affiliate networks) may set their own cookies or identifiers.

Providers and processors

Lovable — website hosting, cloud database and functions.

Google (Gemini models via the Lovable AI Gateway) — smart analysis, vehicle insights and parts search. We send make, model, year, engine and fault code, not your plate number.

NHTSA (USA) — VIN decoding; the VIN is sent directly from your browser.

Official registries: data.gov.il (Israel Ministry of Transport), RDW (Netherlands) and DVSA (UK) receive the plate number to perform the lookup.

YouTube Data API — video search by vehicle details. The player (youtube-nocookie.com) loads only after you tap it, after which Google may set cookies.

Wikimedia Commons — freely licensed vehicle photos.

Cloudflare Turnstile — checks you are not a bot before new smart content is generated; Cloudflare processes device and browser signals and may set a cookie.

Google AdSense (website) and Google AdMob (app) — when ads are enabled, Google may use cookies and device identifiers. Visitors in the UK and EU are asked for consent first.

Affiliate networks (such as Amazon Associates and eBay Partner Network) — after you click an affiliate link, the shop or network sets tracking cookies on its own site to attribute the purchase.

Caching and retention

Registry results are cached on our server for 24 hours, keyed only by country and plate number, without any visitor details, to avoid repeated registry requests.

Smart content (code explanations, vehicle insights, parts and videos) is cached per vehicle, language and market — never per person.

Shop link clicks are counted as an aggregate number per shop per day, without IP address, plate or vehicle details.

Rate limiting: we do not currently store IP addresses for rate limiting. If enabled, IP addresses will be stored only as one-way hashes and deleted within 48 hours.

Technical server logs are kept for a limited period for operations and security only.

In the app

Plate scanning with the camera is processed on your device only; images are never uploaded or stored. Only the recognised plate number is used for the lookup.

Reminders before the MOT/APK/test date are stored and scheduled on your device only — no server and no push service.

How we use information

To show results, run the smart analysis, prevent abuse, and improve and secure the service. We do not sell information to third parties.

Your rights

Under the Israeli Privacy Protection Law and, where applicable, the GDPR and UK GDPR, you may request access to, correction or deletion of your data, and withdraw consent to advertising cookies. You may also complain to your data protection authority (in the UK, the ICO). Contact us at info@getcarcode.com.

Changes

This policy may be updated. Last updated: 05.11.2026.