What stays private. What gets sent.

What this site collects

Standard web-server request logs (IP address, requested path, user agent, timestamp) for operating and securing the site. No analytics, advertising, or third-party tracking scripts run on any page.

The identification reader

The VIN, label and document reader processes identifiers, selected images, PDFs, previews and transcripts in your browser. It does not upload your inputs, filenames, file contents, EXIF, transcripts or results to this site's server or other services, put them in request URLs or analytics, or save them in browser storage. It downloads its own OCR scripts, language data and PDF tools from this site when needed. Those ordinary web requests still send your IP address and usual browser headers, as described above; they do not contain your vehicle data.

Clear everything or leave the page to remove the workspace. Saving or printing a report deliberately creates a copy outside the workspace; protect it as you would the original document. Search is different: search terms are sent to this site's server to find public reference content. Keep personal identifiers out of search.

Contact, corrections and privacy requests

The contact and corrections forms will send messages to a private inbox on this site. The inbox is not accepting messages yet; it opens when durable storage and protected owner access are configured. When it does, it stores the category, subject, message, optional name and email, source link, the page the message is about, the time and a random receipt ID.

Only the owner can read messages, after signing in through Cloudflare Access with phishing-resistant multi-factor authentication. Links are accepted; attachments are not. Nothing submitted is published automatically, and an accepted correction is recorded without your personal details. The message store is capped at 5,000,000 bytes: the oldest archived messages, then the oldest active ones, are removed to stay within it. Ordinary deletion keeps a deduplicated address for correspondence; a verified privacy request removes the messages and the address. There is no backup, so storage loss can lose messages. To ask for access, correction or deletion, choose the privacy category on the contact form.

Cookies

This site does not set tracking or advertising cookies. The contact and corrections forms use one essential cookie that protects them against forged submissions.

Affiliate links

Some recommended resources use affiliate links, identified beside the link: the merchant may pay SubaruFacts a commission when you buy through one. As an Amazon Associate, SubaruFacts earns from qualifying purchases. Commission never affects which products are recommended, how they are described or ranked, or any published fact. See advertising and affiliate links.

No retailer script runs here, and decoder input is not used for targeting or shared with retailers. Following a link takes you to a separate service governed by its own privacy policy.