Privacy policy
Last updated October 19, 2026
This policy covers cardefectradar.com and the reports we sell there. The short version: we collect what we need to make and deliver your report, we don’t sell it or use it for advertising, and we delete your order details after 12 months.
Who is responsible
Car Defect Radar is run by BootstrapBits, based in Mexico. For anything about your data, write to [email protected].
What we collect
When you visit the site. We use Google Analytics to count visits and see which pages are used. It sets cookies and records the pages you view, your device and browser, and your approximate location. Our host, Cloudflare, processes your IP address to serve and protect the site. The cars you shortlist are kept in your own browser and are not sent to us.
When you order a report.
- The cars you pick, and the mileage, state and VIN you give. We only keep the first 11 characters of the VIN: they tell us the model and engine, not which car it is.
- From Stripe: your email address, your name if Stripe asks for it, the amount, the date, and the type and last four digits of your card. Stripe handles the payment itself, and we never see your full card number.
When you email us. Your email address and what you write, including the details of a free order.
What we use it for
- To make your report and email it to you.
- To answer your questions, send corrections and updates, and handle refunds.
- To keep the payment records that tax law requires.
- To see, in aggregate, how the site is used and improve it.
We don’t sell your data, share it for advertising, or send you marketing email.
Who else handles it
- Stripe processes payments, under Stripe’s privacy policy.
- Google runs Google Analytics, under Google’s privacy policy.
- Cloudflare hosts the site.
- Our email provider stores the messages we exchange with you.
These companies may process data in the United States, Mexico or other countries.
How long we keep it
- Your order details (cars, mileage, VIN, state), your report and our emails with you: deleted 12 months after your order.
- Payment records (email, amount, date): kept for as long as tax law requires, generally five years.
- Stripe and Google keep their own records under their policies. Google Analytics data is kept for at most 14 months.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, or stop using it. We may keep payment records that tax law requires. Write to [email protected] and we’ll answer within 30 days. You can block Google Analytics with your browser’s settings, a content blocker, or Google’s opt-out add-on.
Children
The site is not meant for children under 13, and we don’t knowingly collect their data.
Changes
If we change this policy, we’ll update the date at the top of this page.