Privacy Policy

Who we are

CarCad Index ("we", "us") operates the website at carcadindex.com. This page describes what we collect from visitors and what we do with it.

What we collect

Accounts. When you create an account, we store your email address, username, password (hashed by our authentication provider — we never see it), and the dates you accepted these policies. When you submit a part, we store the submission details and link them to your account.

Email list. If you subscribe to updates, we store your email address and the time you consented. Every email we send includes an unsubscribe link, and you can also unsubscribe with the button your mail client shows.

Contact form. When you contact us through the inquiry form, we store the topic, your email address, your subject, and your message.

Search and click logs. When you use the search feature, we log the search query, the source filter (if any), the number of results returned, and the timestamp. When you click through to a source platform from a part page, we log which part and when. Both logs include an anonymized IP address: we zero the last part of the address (the last octet for IPv4, everything past the /48 for IPv6) before it is stored, so it identifies a rough network area, not your device or household. We never store your full IP address in these logs. They are not linked to your account, and they are automatically deleted after 90 days.

We use these logs to understand what people are looking for, find gaps in the catalog, measure which parts people actually click through to, and detect abuse. To help with the last of those, site administrators can look up the approximate location (city / region level) of an anonymized address using ipapi.co, a third-party geolocation service; the anonymized address is sent to them for that lookup and nothing else.

Analytics

We use Vercel Analytics to understand how people use the site. It is cookieless and collects aggregate data like page views, browser type, and approximate location derived from IP address. We do not sell this or any other data.

Cookies

We use a cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Third parties

Your data is stored and processed by: Neon (database and authentication), Cloudflare R2 (image storage), Vercel (hosting and analytics), Resend (sending email), and ipapi.co (approximate location of anonymized IP addresses, admin-only, as described above). We do not share your personal information with anyone else, except as required by law.

Deleting your account

You can delete your account from the account page. This removes your login, email, username, and profile image, and unsubscribes you from the email list, so you can re-register with the same email later. Submissions you made stay indexed on the site under an anonymous record so the catalog remains intact.

If you are in a region with a legal right to access, correct, or erase your data (for example the EU/UK or California), you can exercise it through the inquiry page.

Children

CarCad Index is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects when changes were last made, and signed-in users are shown a notice when there is a material change.

Contact

Questions about this policy? Reach us through the inquiry page.