Privacy

What we collect, why, and who sees it. Short version: we use your listing to write one report for you. We don’t sell your data.

Last updated 30 August 2026.

Who we are

IsThisCarOK is operated by John Jensen. The sites are isthiscarok.com (United States) and isthiscarok.ca (Canada). Same product, two markets. Write us if you want a copy of your data, a correction, or a deletion.

What we collect

• Account. Email address. We sign you in with a six-digit code — no password. A session cookie (sid) keeps you signed in.
• The listing you paste. URL, ad text, photos you upload or that we can read from the link, city, asking price, VIN, odometer, engine, and notes you type.
• The report. Research notes, the PDF, and job status, so you can download it and use the one included update.
• Payment. Stripe handles the card, Apple Pay, Google Pay, and Link. We store a payment id and which listing you paid for. We do not see or store your full card number.
• Mail. Sign-in codes, “report ready,” and (if you write us) the contact form. Transactional mail is sent from noreply@isthiscarok.com.
• Site cookies. Theme (itco_theme), market preview on localhost (itco_market), and in-house copy tests (itco_vid, itco_ab). No third-party ad pixel.
• Technical logs. Cloudflare may see IP, user-agent, and request path. We use that to run the site, stop abuse, and count daily usage caps.

Why

To sign you in, write the report you paid for, take payment, email you when it’s ready, run wording tests, keep spend brakes from running away, and answer you if you contact us. Where that language applies: the contract to deliver the PDF, our legitimate interest in running a small honest service, and consent where you tick a box or send a form.

Who we share with

Processors that actually run the product — not marketers buying a list:

• Cloudflare — hosting, database, file storage, and the workers that generate the report.
• Stripe — payment. Their privacy policy applies to card and wallet data.
• Resend — transactional email.
• xAI — research that goes into the PDF (listing text and photos you gave us, not your card). Don’t paste secrets you wouldn’t want a model to see.

We do not sell personal information. We do not run a broker file. We may disclose if the law requires it, or to protect someone from serious harm.

Photos and listings

Listing photos live in a private bucket. They are not a public gallery. We do not scrape Facebook or Kijiji at scale; we use the link and files you paste. Public /cars pages are year-and-model research. They are not your ad, and they do not include this listing’s photos.

How long

We keep an account, paid job, and PDF long enough for you to download the report and use the seven-day update. We may keep a thinner record of payment (id, amount, currency) for accounting. Contact-form messages are for answering you. You can ask us to delete what we still have.

Your choices

Use the contact form and ask for a copy, a correction, or deletion. Some US state laws give similar rights; if you are in one of those states, say so in the message. We will need the email you signed in with.

You can refuse the disclaimer checkbox and not buy. You can sign out. Theme and A/B cookies can be cleared in your browser.

Children

This product is for people buying a used car. It is not aimed at children. Don’t create an account for someone under 13 (or under 16 where that is the line).

International

The same workers serve .com and .ca. Data may be processed in the United States and Canada (Cloudflare, Stripe, and the research vendor). If that is a problem for your listing, don’t use the product.

Changes

If this page changes in a way that actually affects you, we’ll update the date here. The current version is the one on this URL.