Privacy Policy

This policy covers the VinRescue website (vinrescue.org) and the VinRescue iPhone app.

What VinRescue collects

• Department PIN. Used only to sign you in. The website keeps a signed sign-in cookie for 30 days. The iPhone app keeps the PIN in the iPhone's Keychain so it can sign you back in; signing out erases it.
• VINs, vehicle picks and searches. Sent to VinRescue to find a rescue sheet. VINs are also sent to NHTSA's free VIN decoder. Decoded vehicle details (make, model, year — no owner information) may be kept to speed up later lookups.
• Photos for Photo ID. Sent to Cloudflare Workers AI to identify the vehicle, then discarded. VinRescue does not store photos. Only a daily count of Photo ID uses is kept.
• License plates. The Plate tab does not send plates to VinRescue. It copies the plate on your device and opens FaxVIN's website, which has its own privacy policy.
• Server logs. Cloudflare, which hosts VinRescue, keeps short-term request logs (such as IP address and time) for security and troubleshooting.

What VinRescue does not do

• No accounts, names, email addresses, location tracking, advertising or analytics.
• Nothing is sold or shared for marketing.

Third parties

Cloudflare (hosting, database and Workers AI), NHTSA (VIN decoding), and vehicle makers' websites when you open one of their documents. Each follows its own privacy policy.

Keeping and deleting data

Sign-in cookies end after 30 days or when you sign out. Cached vehicle details hold no personal information. To ask a question or ask for anything to be deleted, contact your department's VinRescue administrator.

Last updated 2026-10-06.