Privacy Policy

Last updated: April 8, 2026

VINdow Sticker ("we," "us," or "our") operates the website vindowsticker.com (the "Site"). This Privacy Policy explains how we collect, use, and protect information when you visit our Site.

Information We Collect

Automatically Collected Information

When you visit the Site, we automatically collect certain information about your device and usage, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited, time spent on pages, and navigation paths
• Referring website or search terms
• Device type (desktop, mobile, tablet)

Local Storage

We use your browser's local storage to save your preferences, such as theme settings (light/dark mode), saved vehicles, and comparison selections. This data stays on your device and is not transmitted to our servers.

How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Site
• Understand how visitors use the Site so we can improve the user experience
• Monitor and analyze usage trends and preferences
• Detect and prevent technical issues

Third-Party Services

Google Analytics

We use Google Analytics to understand how visitors interact with the Site. Google Analytics collects information such as how often users visit, what pages they view, and what other sites they visited before coming to our Site. Google Analytics uses cookies to collect this information. You can learn more about how Google uses data at google.com/policies/privacy/partners.

Google AdSense

We use Google AdSense to display advertisements on the Site. Google AdSense may use cookies and web beacons to serve ads based on your prior visits to our Site or other websites. You can opt out of personalized advertising by visiting Google Ads Settings.

We may also work with additional advertising networks and technology providers in the future (such as Raptive, Mediavine, or SHE Media) to optimize ad delivery on the Site. Should we engage such a partner, that partner will collect and use certain data for advertising purposes consistent with this Privacy Policy and applicable law, and we will update our sub-processor list accordingly.

Cookies

Cookies are small text files stored on your device by your browser. We and our third-party partners use cookies for analytics and advertising purposes. You can control cookies through your browser settings. Disabling cookies may affect some features of the Site.

Data Sources

The vehicle inventory data displayed on the Site is sourced from publicly available dealer inventory listings. We collect data about vehicles, pricing, and dealer information — not about individual car buyers or shoppers. No personally identifiable information about vehicle purchasers is collected or displayed.

Data Security

We take reasonable measures to protect the information collected through the Site. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Privacy Choices (US State Residents)

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, or another US state with consumer privacy laws (CCPA, CPRA, CPA, CTDPA, VCDPA, UCPA), you have the right to opt out of the "sale" or "sharing" of your personal information for targeted advertising purposes.

To exercise this right, click the Your Privacy Choices link in our footer. This will open a consent management dialog where you can opt out of personalized advertising served by Google AdSense and our advertising partners. You can also opt out of personalized ads directly through Google Ads Settings or via the Digital Advertising Alliance opt-out page.

We do not sell personal information for monetary value. However, the use of advertising cookies for personalized ads may be considered a "sale" or "sharing" under certain state laws. Your opt-out request will be honored across our advertising partners using IAB's Global Privacy Platform signals where supported.

Legal Basis for Processing (GDPR Article 6)

For visitors in the European Economic Area (EEA) and United Kingdom, we rely on the following legal bases under Article 6 of the General Data Protection Regulation (GDPR):

• Legitimate interest (Art. 6(1)(f)) — for site analytics, security monitoring, fraud prevention, and improving the service.
• Consent (Art. 6(1)(a)) — for advertising cookies and ad personalization, collected via our consent banner. You may withdraw consent at any time.
• Contract (Art. 6(1)(b)) — when applicable for any future user accounts or services you request.
• Legal obligation (Art. 6(1)(c)) — when required to comply with applicable law.

Sub-processors

We use the following third-party sub-processors to operate the Site. Each processes data under its own privacy terms and applicable data protection safeguards:

• Google Analytics — Google LLC (United States). Purpose: website analytics and usage measurement.
• Google AdSense — Google LLC (United States). Purpose: advertising delivery and measurement.
• Vercel — Vercel Inc. (United States). Purpose: website hosting and content delivery.
• Neon — Neon Inc. (United States). Purpose: managed PostgreSQL database for vehicle inventory data.

Data Retention

• Analytics data: retained for 14 months (the Google Analytics default), after which it is automatically deleted.
• Ad personalization data: managed by Google AdSense in accordance with Google's retention policies.
• Vehicle inventory data: retained indefinitely for historical price tracking. This data contains no personal information about individual buyers.
• Local storage preferences: retained on your device until you clear your browser storage.

International Data Transfers

The Site and its infrastructure are hosted in the United States. If you access the Site from the European Economic Area, United Kingdom, or another jurisdiction outside the US, your data may be transferred to, stored, and processed in the United States. For transfers of personal data from the EEA and UK to the US, Google services (Analytics and AdSense) rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal transfer mechanism.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data under the GDPR, UK GDPR, and US state privacy laws such as CCPA/CPRA:

• Right to access (GDPR Art. 15, CCPA)
• Right to deletion / erasure (GDPR Art. 17, CCPA)
• Right to rectification (GDPR Art. 16)
• Right to data portability (GDPR Art. 20)
• Right to object to processing (GDPR Art. 21)
• Right to opt out of the sale or sharing of personal information (CCPA, CPRA, and other US state laws)
• Right to non-discrimination for exercising your privacy rights (CCPA)

To exercise any of these rights, please email us at privacy@vindowsticker.com. We will respond within the timeframes required by applicable law.

Security

We use HTTPS to encrypt all traffic between your browser and the Site, store no payment information, maintain limited internal access controls on our database, and audit our infrastructure dependencies regularly. No system is 100% secure, but we follow industry best practices to protect the information we collect.

Children's Privacy

The Site is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@vindowsticker.com.