Privacy Policy

1. Information We Collect

We collect only what is needed to run the Service:

• Account information you provide: username, email address, hashed password, optional profile details, and two-factor authentication secrets if enabled.
• Content you create: cars, build lists, parts, build logs, images you upload, votes, and comments. Items you submit privately — such as content reports to moderators and bug reports — are kept internal and are not displayed publicly.
• Technical data: IP address, user agent, timestamps, and request logs used for security, rate limiting, and debugging.
• Cookies and local storage: a session token to keep you logged in, plus minimal preferences. We do not use tracking cookies of our own.
• Data from our Chrome extension: if you install our optional extension, it does not run in the background and does not passively track your browsing history. When — and only when — you click the extension's action button on a page, it captures that page's URL and its rendered HTML and sends them to our servers for parsing into product information. Before the HTML is stored or parsed, our servers remove scripts (other than product structured data), styles, iframes, and form field values so that autofilled inputs and inline user-state blobs are not retained. The extension does not read cookies, browser storage, or request headers.
• Google Sign-In: if you choose to sign in with Google, we receive your Google account email address and basic profile information (name, profile picture) from Google to create or authenticate your account. We do not request access to any other Google APIs, Drive, Gmail, Calendar, or contacts. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. How We Use Your Information

• To operate, maintain, and improve the Service.
• To authenticate you and send transactional email (e.g. email verification, password reset).
• To detect, prevent, and investigate abuse, fraud, and security issues.
• To display user-submitted content (usernames, builds, parts, comments) publicly on the Service. Assume anything you post publicly is public. Content you submit privately — such as moderation reports and bug reports — is used only for operations and is not displayed to other users.

We do not sell your personal information. We do not share it with third parties except as described below.

3. Third-Party Services

We rely on third-party providers to help operate the Service. These providers may process limited data on our behalf or as part of serving the Service, including:

• Cloud infrastructure providers — for hosting, storage, and transactional email.
• Advertising partners — third-party vendors, including Google, may use cookies to serve ads based on your prior visits to our Service or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you. You can opt out of personalized advertising by visiting Google Ads Settings or, for other participating vendors, aboutads.info/choices.
• Retailer websites — if you use features that link to or interact with retailer pages, your interaction with those sites is governed by their own policies.

4. Chrome Extension: Limited Use of Data

Our Chrome extension is built to comply with the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:

• Data captured by the extension (the URL and sanitized HTML of the page you explicitly scrape) is used only to parse product information for you and to let you add that part to your CarModPicker account.
• We do not sell or transfer this data to third parties for advertising, resale, marketing, credit-scoring, or any unrelated purpose.
• We do not use this data for personalized advertising of any kind.
• We do not allow humans to read this data except: (a) with your explicit consent, (b) to investigate security incidents or policy abuse, (c) to comply with applicable law, or (d) where the data has been aggregated or anonymized such that it no longer identifies you.

5. Data Retention and Deletion

We do not guarantee any particular retention period for your data. The Service is in active development and is operated on a best-effort basis. We may, at any time and without prior notice, reset, migrate, wipe, or delete accounts, databases, uploaded images, or any other stored content — for example:

• during schema changes or infrastructure moves;
• during abuse cleanup or moderation actions;
• or simply because we decide to.

Scraped page archives. Sanitized HTML captured via the Chrome extension is stored so that the parsed product information can be refreshed or corrected later. We retain it only for as long as it remains useful for that purpose, and we may delete or overwrite it at any time without notice — for example:

• when the associated part is removed;
• when an archive is superseded by a newer capture of the same URL;
• or during routine storage cleanup.

You can request deletion of pages you submitted by emailing us.

You should keep your own copies of anything you care about. Do not rely on the Service as a system of record.

You can request deletion of your account and associated personal data by emailing tyler@webbpulse.com. We will process verified deletion requests without undue delay, typically within thirty (30) days. Content you posted publicly may persist in backups or caches for a reasonable period after deletion.

6. Security

We take reasonable steps to protect your data, including hashing stored passwords, encrypting traffic in transit, and offering optional two-factor authentication. No system is perfectly secure, and we make no guarantee that your data will not be accessed, disclosed, altered, or destroyed as a result of a breach. Use a unique password.

7. Minors

The Service is intended exclusively for adults 18 years of age and older. We do not direct the Service to minors and do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us at tyler@webbpulse.com and we will terminate the account and delete the data.

8. EEA / UK Residents (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

• Performance of a contract — to provide the Service you signed up for (e.g. authenticate you, display your builds).
• Legitimate interests — to secure the Service, prevent abuse, debug issues, improve features, and send operational communications.
• Consent — where we rely on your consent (for example, optional cookies for personalized advertising). You may withdraw consent at any time.
• Legal obligation — to comply with applicable law.

You have the right to access, correct, export, restrict, object to, or delete your personal data, and to lodge a complaint with your local data protection authority. To exercise any of these rights, email us. We will respond within one month.

9. California Residents (CCPA / CPRA)

In the past twelve months, we have collected the following categories of personal information from California residents: identifiers (e.g. username, email, IP address), customer account records, commercial information (if you purchase paid features), internet and network activity (e.g. request logs), and user-generated content.

We do not sell or share your personal information for cross-context behavioral advertising, and we have not done so in the past twelve months. We do not knowingly collect or sell the personal information of minors under 16.

California residents have the right to know, delete, correct, and limit the use of their personal information, and to not be discriminated against for exercising these rights. To exercise any of these rights, email us.

10. International Users

The Service is operated from the United States and your data will be processed there. By using the Service, you consent to that transfer.

11. Changes to This Policy

We may update this policy at any time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after a change means you accept the updated policy.

12. Contact

Questions about this policy? Email tyler@webbpulse.com.