Privacy

Nothing you type into this site is transmitted, stored or logged. That is a statement about how the pages are built, not a policy we are asking you to trust.

What happens to what you type

Every tool on this site runs entirely inside your browser. A price, an APR, a tire size, a gear ratio and a VIN are read from the form, computed by JavaScript already on the page, and written back into the result panel. There is no server to send them to: this site is a set of static files. Closing the tab is the whole of the deletion process.

The VIN is the one this site exists for. It is never transmitted — not to us, not to NHTSA, not to anyone. The decoder matches it against a copy of the government vehicle database that your browser downloaded before you typed anything, and the field you type it into carries no name attribute, so there is not even a form submission that could carry it. You can check this: decode once, switch your network off, and decode again.

Nothing you type is written to cookies, local storage or session storage either. Reloading the page clears the panel, which is the honest consequence of storing nothing.

The one request this site makes

The first time you decode a VIN, the page fetches /data/vpic-2026-08.bin.gz — the vehicle pattern database, about four megabytes compressed. That request is to this site's own content delivery network, it happens before the VIN is read, and it is byte-for-byte the same file for every visitor, so it says nothing about you beyond the ordinary server-log facts below. After it completes, decoding needs no network at all.

The two things this site counts

Page views and two events are counted with a self-hosted, cookieless analytics service run for this site's operator at analytics.pagefabrica.com. It sets no cookies, builds no cross-site profile, and honours the Do Not Track setting your browser sends. The two events are:

• work_started — a calculation was submitted.
• work_completed — a result was produced.

Each event is a name and nothing else. No property carries a price, a rate, a term, a tire size, a ratio or a result, and the code that sends them physically cannot: the allowlist that ships with the page accepts an event name as its only argument and refuses any name outside those two.

What this site does not have

• No advertising, no advertising network, and therefore no consent banner and no consent string.
• No accounts, no sign-in, no email capture and no newsletter.
• No third-party JavaScript beyond the analytics script named above.
• No fonts, images or scripts fetched from anybody else's servers.

What your browser keeps

The ordinary HTTP cache holds the pages, the stylesheet and the scripts, as it does for any website. That is a browser behaviour and you can clear it from your browser's settings. Beyond it this site keeps exactly two things, and only once you have decoded a VIN: the vehicle database in the Cache API, which is what makes the decoder work offline, and one string in local storage reading 2026-08, which names the release of that database so a stale copy can be replaced rather than stranded. Neither is a cookie, neither is sent anywhere, and neither contains a VIN or anything else about you. There is still no cookie of any kind and no session storage. The cookies page sets out both in detail.

Server logs

The files are served through a content delivery network, which records requests as any web server does — the page requested, a timestamp, a user agent and an IP address. Those records exist to keep the site running and are not combined with anything above.

Questions

Write to support@quietvin.com, or read what to expect from that address first. Corrections to this page are as welcome as corrections to the arithmetic.