BuyVinHistory

Privacy policy

Last updated: September 7, 2026

What we collect

  • VIN you enter to order a report, and the email address you give at checkout or ask us to send the report to.
  • Payment details are collected and processed by Stripe, not by us. We receive a payment reference and status only.
  • Technical data such as IP address and request timestamps, used for security and rate limiting.

How we use it

  • To generate and deliver your report and email you the access link.
  • To process payments and refunds and to prevent fraud and abuse.
  • To answer support requests.

We do not sell personal data. We do not run third-party analytics. We do use one advertising tag, described under Cookies below.

Retention

Order records and delivered reports are kept for as long as needed to provide access (30 days) plus a reasonable period for accounting, support and dispute handling. VIN lookups are cached for up to 24 hours. We also keep a count of how often each VIN was checked, with no name, email or IP address attached to it, for up to 90 days, so we can see which vehicles are in demand.

Sharing

VINs are sent to our vehicle-history data supplier to generate the report. Payment data is handled by Stripe under its own privacy policy. Emails are sent through our email provider. Google receives the advertising data described under Cookies. We share data with no one else unless required by law.

Your rights

You can ask us to access, correct or delete your personal data by emailing support@buyvinhistory.com.

Cookies

We write no cookies ourselves. Two third parties do: Stripe's checkout page may set cookies needed for payment processing and fraud prevention, and Google's advertising tag sets the cookies described next.

We advertise on Google, so every page except your report and our admin pages loads Google's advertising tag (gtag.js). It stores an advertising identifier (in a cookie on this domain and in Google's own cookies) and tells Google which page you opened, when, your IP address, your browser and device, and the page you arrived from. We use it for exactly one thing: to see which ads lead to a purchase, so we know where to spend our advertising budget. It never receives your VIN, your email address or your report, because the tag is deliberately switched off on report pages.

You can turn off ad personalisation at Google My Ad Center or opt out of Google's advertising cookies at Google Ads Settings. Blocking third-party cookies, or using an ad blocker, also stops the tag. Nothing on this site stops working if you do.