Privacy

CurbSpec is a sole proprietorship of Joe Swanson in Bozeman, Montana. Public name CurbSpec; legal name stays the person. Support: joe@swantron.com.

You paste a VIN, a listing, or what you know, plus a stated mileage when it is not in the paste. We send a VIN (when we have one) to NHTSA to decode the vehicle and look up year/make/model campaigns. We store that snapshot in Postgres so the same URL keeps working. We do not create a user account.

Most reports send the identified vehicle (year, make, model, engine) to Google's Gemini API to research known issues. If you pasted a listing, that text goes too. Vehicles without a hand-reviewed calendar also get a researched maintenance outlook from the same call. Don't paste anything you wouldn't want a third-party AI provider to process — leave out names, addresses, or other personal details that aren't about the vehicle itself.

If you pay $12.99, Stripe processes the card. Stripe collects your email on Checkout. We store that email on the report so we can send you the report URL. We do not sell email lists or VIN data.

Vercel hosts the app and may record page views (path, referrer, country, device) so we can see whether the preview converts. That is not a marketing pixel network. Links from the Chrome extension include utm_source=extension so we can tell a listing click from a typed URL — still a page view, not a profile.

The optional Chrome extension (CurbSpec — Used Car VIN Check) runs only on a vehicle-detail page on Cars.com, Autotrader, CarGurus, Carvana, TrueCar, CarMax, Craigslist, or Facebook Marketplace. It reads that page locally in your browser to find a VIN and stated mileage. It does not collect, store, or send that text anywhere. If you click the on-page button, Chrome opens curbspec.com in a new tab with the VIN (and mileage, when found) in the URL, the same as typing them yourself. Dismissing the button is stored only in that tab's session. Uninstalling the extension removes it. The extension does not use cookies, analytics, or background network requests of its own.

Paid report JSON stays frozen. Unpaid previews may be deleted later so the table is not all tire-kickers. To ask that a report or email be removed, write joe@swantron.com.