In short: Caropen.lt uses no cookies, requires no sign-up and collects no personal data. The figures on the site are aggregate statistics about groups of cars only.
What we show
- Only aggregate figures about makes, models, years of manufacture, municipalities and the country. The source data contains no personal data, and plates, VINs and station codes are hashed – we never reverse them (more).
- We publish no individual car's history and offer no lookup by plate or VIN.
Cookieless analytics
Traffic is measured with a self-hosted instance of Umami and with Cloudflare Web Analytics. Neither sets cookies, uses browser storage or links visits to a person. Cloudflare counts only page views, referrers and site speed. With Umami we count page views (address, referrer, browser and device type, country) and anonymous interactions on the site – for example which filters you pick, whether you follow a download or partner link, and which make and model you check in the calculator – as well as how fast pages load and respond on your device, so we can learn what works for visitors and what does not. Search queries that look like a licence plate or a VIN are never recorded, only the fact that such a search happened. That is why there is no cookie banner.
Server logs and hosting
The site and the API are served through Cloudflare; the API server and its data are kept in the European Union. Like any website, the servers briefly keep technical request logs (IP address, browser type, requested URL) – for security and debugging only, not to track visitors.
For API usage statistics the server keeps pseudonymous request records for 90 days: the requested URL, the response status and duration, the country, the browser type and a digest of the IP address made with a key that changes every day, from which the address itself cannot be recovered. After 90 days only daily totals without any identifier remain. Search queries that look like a licence plate or a VIN are not recorded here either, and the mileage entered in the calculator is rounded to 10 000 km.
In the mileage check, the make, model, year and mileage you enter are passed in the page URL so the result can be shared. They are not linked to you and not stored apart from the ordinary request logs.
Links to other sites
Some pages link to partner services (for example VIN-based vehicle history reports). Following such a link takes you to the partner's site, where its own privacy policy applies. Caropen passes nothing about you to it.
E-mail reminders (planned)
We plan to offer a reminder before a car's next technical inspection. When it launches, this section will be updated with the exact details. The principles are settled:
- the reminder date will be downloadable as a calendar file with no e-mail at all;
- an e-mail address will be used for reminders only, after double opt-in (a confirmation link);
- we will keep only the e-mail address, the inspection date and the language – in the European Union;
- every e-mail will have an unsubscribe link, and unsubscribing deletes the data;
- the data will never be shared with or sold to third parties.
Contact
Privacy questions or GDPR requests: info@caropen.lt.